Have questions about DUO?

Check out our frequently asked questions below, and contact our IT Service Desk at 205-348-5555 with any additional questions.


What is two-factor authentication?

Two-factor authentication, also referred to as multi-factor authentication, provides an additional layer of security when logging in to a website. Two-factor is becoming the standard in cyber security. Google, Apple, and other services all have their own two-factor authentication methods. In short, passwords are no longer sufficient in protecting our sensitive data, we’ve got to add another layer of security to our accounts.


What are my authentication options?

  • DUO Push – if you have the DUO Mobile App installed on your smartphone or tablet, you can receive a push notification. From the app, you can approve or deny the login attempt.
  • Phone Call – you can receive a phone call on your mobile phone or landline phone. The call will give instructions on approving or denying the login attempt.
  • Passcodes – You can receive temporary or long-term passcodes by text/sms message, from our self-service application, or directly from the DUO app.

What are Passcodes?

If you opt-out of the DUO Mobile Application push notifications, there are a variety of passcode options to utilize as your second verification method.

  • Passcodes via SMS – users can receive a batch of one-time use codes via text message.You can request these by logging into your myBama as you typically would. Once you received the DUO prompt, you can click Enter Passcode, then click on the blue button “Text me new codes.”  These codes do not expire, and they are valid until used.
  • Passcodes via DUO Mobile App – If you have the DUO Mobile app installed, you can receive a single passcode by tapping the key icon next to The University of Alabama in the mobile app. This code must be used immediately.
  • Online-Generated Temporary Passcodes – If you do not have your device with you, you can obtain temporary passcodes. Each of the passcodes can only be used once, and will expire after 72 hours. Visit our self service page to generate these passcodes.

What is Autopush?

We recommend leaving Autopush disabled as it has been known to cause a few glitches. You can; however, use the “remember me” option. If you are unable to activate the “remember me” function, please make sure autopush is disabled.


What does “Remember this device for 30 days” mean?

Selecting this option will allow you to bypass DUO authentication for the next 30 days. This only works if you are logging in from the same computer, IP address and browser. You will still be prompted to verify once – with your username and password. You will not be able to access your settings on that particular browser during the 30 days. If you do need to access your settings (perhaps to add another device) just try another browser.


Forgot your device?

If you do not have your device with you, you can obtain a batch of temporary pass codes. To obtain them, please visit our self service page. You will login with your myBama username and password, and then you will answer additional questions to receive a batch of temporary DUO access codes. Each of the passcodes you will receive can only be used once, and will expire after 72 hours.

*If you have lost your device, please report it to the IT Service Desk at 205-348-5555. We want to ensure someone else does not maliciously authenticate your account with your device.


Who can use DUO?

DUO is available to current UA students, faculty and staff. At this time, DUO is not available to UA retirees, past employees or alumni.


What Applications are Using DUO?

Applications and services must have DUO enabled individually by our programmers. Currently, only myBama and the myBama password reset tool utilize DUO. This list will continue to grow over time.


What if I get a notification that someone is trying to access my account, but I didn’t request it?

Select the red X to deny access to your account, then promptly change your myBama password.


What if I am traveling abroad?

You have several choices when traveling abroad. Be sure to test them out before your travels so you can determine which solution is best for you.

  • If you do not have your two-factor authentication device with you, please visit our self service page to obtain temporary passcoes. These expire after 72 hours, so be sure to use one of these passcodes to register a multi-factor device you can use abroad.
  • If you do have a smartphone/tablet, the DUO Mobile App can provide a six-digit passcode even if your phone or tablet doesn’t have cellular, network or wifi service. Launch the DUO Mobile App, and press the key icon to obtain a passcode.
  • If you only have a basic cell phone, register your phone to receive SMS text notifications.

What if I get a new smartphone or device?

If your phone number has not changed, login to www.duo.ua.edu then choose the “Call my Phone” option. Then click on replace your existing phone or tablet with a new device. Choose your device from the list, and then follow the instructions to activate DUO Mobile on your new device.

If you have a new phone number, you will first need to obtain a temporary passcode (see the ‘What are Passcodes?’ section above). Login to www.duo.ua.edu and enter the temporary passcode. Click on “Replace your existing phone or tablet with a new device.” Choose your device from the list, and then follow the instructions to activate DUO Mobile on your new device.

We have a step-by-step guide for adding a new phone. Check it out before calling our IT Service Desk.


Can I have DUO on more than once device?

Yes, simply visit the DUO home screen to add additional devices – www.duo.ua.edu