Duo Timeline

What is the timeline for integrating Duo and remote.kenyon.edu?

Kenyon account holders can enroll now. Once you do, remote.kenyon.edu will require you to confirm your login attempt using Duo. (But for the next month, if you have not enrolled with Duo, remote.kenyon.edu will let you enter after you confirm your Kenyon username and password.

After April 3, 2017, everyone logging into remote.kenyon.edu will be required to confirm their enrollment with Duo. If you have not enrolled with Duo by this time, you will be required to into order to proceed with logging into remote.kenyon.edu.  

Will Kenyon use Duo to secure other systems?

After April 3, 2017, LBIS will review integrating Duo two-factor authentication (2FA) with other Kenyon services.

Duo Enrollment and Use

I don’t have a smartphone. Can I still enroll with Duo?

Yes. If you have a mobile phone, you can enroll to receive verification codes via SMS messages. Yubikeys are another option.  If you do not have a mobile phone, contact Helpline to discuss other options.

If I have a smartphone, do I have to use the Duo Mobile app if I’m already using LastPass Authenticator/Google Authenticator/Authy?

Yes. Duo Mobile is the only mobile app that can receive Duo push messages or generate Duo passcodes.

That said, you can use Duo Mobile to generate passcodes (aka TOTP codes) for two-factor authentication with other web services, including Google accounts, Dropbox, Evernote, Amazon, and Facebook. If you want the convenience of managing most (if not all) of your two-factor authentication from one app, we recommend this method.

My smartphone’s camera doesn't work. Can I still enroll with Duo using the Duo Mobile app?

Yes. You can still enroll in Duo using Duo Mobile even if your phone camera is not working. Here’s how:

  1. During the Duo enrollment process, when you are prompted to scan a QR code, instead click the link labeled Or, have an activation link emailed to you instead
  2. In the following page, enter your Kenyon email address. You’ll shortly receive an activation email from Duo.
  3. Open this message in your mobile device's email client and click the link included in the email. Doing so launches the Duo app and completes the enrollment process. 

I’m using two-step verification (2SV) to protect my Kenyon Google account. Can I use Duo Mobile with 2SV?

Yes. You can use Duo Mobile to generate Authenticator-style TOTP codes. Consider this option if you only want to use one 2FA app on your smartphone. For more information, see Duo's guide to third-party accounts.

Can I generate backup codes to use offline with Duo?

No. But once you configure Duo Mobile to receive push notifications, the app can also generate passcodes, and your phone does not need to have a cell network or wifi connection to do this. This would allow you to confirm your login attempt with Duo in a situation where your computer has network access but your smartphone does not.

What if I enroll to receive push notifications, then I go abroad and don't have cell data or wifi?

See the answer above. Once you set up Duo Mobile, you can use the app to generate passcodes even if your smartphone doesn’t have a network connection.  

Manage Your Devices in Duo

What if I get a new phone?

If you enroll your current phone with Duo using its phone number, and then you get a replacement phone that has the same phone number, have Duo call your phone or send it an SMS in order to log in. At that point, you can click My Settings and Devices within the Duo options to enroll your new phone. 

Otherwise, contact Helpline at 1-740-427-5700.

What if I lose my current phone?

Contact Helpline at 1-740-427-5700 for instructions. 

My smartphone isn’t receiving push notifications.

First, confirm that you have enrolled the phone you are currently using with Duo. (Even if you get a new phone with the same phone number as your old phone, your new phone will not receive push notifications until you enroll it with Duo. 

Then confirm that your phone has a cell or wifi connection. If your phone is not connected to a network, it will not be able to receive push notifications from Duo. Also check that your phone’s date and time are correct, as this can be a factor.

If none of these help, contact Helpline at 1-740-427-5700.

Can Duo send push notifications to Apple Watch or Android Wear devices?

Yes. Apple Watch can display push notifications from Duo Mobile, and in limited testing, we have seen Android phones pass Duo push notifications to some Android Wear devices. Note that this may not be possible with all combinations of Android mobile devices and Android Wear devices.