Have questions about DUO?
Check out our frequently asked questions below, and contact our IT Service Desk at 205-348-5555 with any additional questions.
What is two-factor authentication?
Two-factor authentication, also referred to as multi-factor authentication, provides an additional layer of security when logging in to a website. Two-factor is becoming the standard in cyber security. Google, Apple, and other services all have their own two-factor authentication methods. In short, passwords are no longer sufficient in protecting our sensitive data, we’ve got to add another layer of security to our accounts.
What are my authentication options?
- DUO Push – if you have the DUO Mobile App installed on your smartphone or tablet, you can receive a push notification. From the app, you can approve or deny the login attempt.
- Passcodes – You can receive a passcode by the Alabama logo in the DUO Mobile App, this does not require any wireless connectivity. You can also obtain a passcode through our self-service application. You do not have to have a smartphone for this option.
- Phone Call – you can receive a phone call on your mobile phone or landline phone. The call will give instructions on approving or denying the login attempt.
Is DUO mandatory?
DUO is required for all UA students. Future UA students who have been admitted to attend UA are eligible for DUO, and will be required to use it by the add/drop date at the beginning of their first semester.
DUO is not required for all faculty and staff; however certain departments do have requirements in place. Check with your supervisor. DUO is also required for certain applications like Banner, VPN and direct deposit changes.
What are Passcodes?
If you opt-out of the DUO Mobile Application push notifications, there are a variety of passcode options to utilize as your second verification method.
- Passcodes via DUO Mobile App – If you have the DUO Mobile app installed, you can receive a single passcode by tapping the University of Alabama logo in the mobile app. This code must be used immediately.
- Passcodes via SMS – users can receive a batch of one-time use codes via text message. You can request these by logging into your myBama as you typically would. Once you received the DUO prompt, you can click Enter Passcode, then click on the blue button “Text me new codes.” These codes do not expire, and they are valid until used.
- Online-Generated Temporary Passcodes – If you do not have your device with you, you can obtain temporary passcodes. Each of the passcodes can only be used once, and will expire after 72 hours. Visit our self service page to generate these passcodes.
What is Autopush?
We recommend leaving Autopush or Autocall disabled as it has been known to cause a few glitches. You can; however, use the “remember me” option. If you are unable to activate the “remember me” function, please make sure autopush is disabled. If you’ve enabled Autopush or Autocall, and you want to remove it, you must deactivate and reactivate your account.
What does “Remember this device for 30 days” mean?
Selecting this option will allow you to bypass DUO authentication for the next 30 days. This only works if you are logging in from the same computer, IP address and browser. You will still be prompted to verify once – with your username and password. You will not be able to access your settings on that particular browser during the 30 days.
Please note that if you have tools or policies running that regularly delete or clean cookies, the remember me feature will not work. If you do need to access your settings (perhaps to add another device) just try another browser. Remember me will not work if your browser is set to private browsing mode. Remember me will also not work if you have enabled autopush. If you’d like to disable autopush, follow these instructions.
Forgot your device?
If you do not have your device with you, you can obtain a batch of temporary pass codes. To obtain them, please visit our self service page. You will login with your myBama username and password, and then you will answer additional questions to receive a batch of temporary DUO access codes. Each of the passcodes you will receive can only be used once, and will expire after 72 hours.
*If you have lost your device, please report it to the IT Service Desk at 205-348-5555. We want to ensure someone else does not maliciously authenticate your account with your device.
Who can use DUO?
DUO is available to current students, future students who have been admitted, and faculty and staff. At this time, DUO is not available to UA retirees, past employees or alumni.
Can I use DUO without using wifi or cellular data?
Yes. The passcode option on the DUO app does not require wifi or cellular connectivity, it even works on airplane mode. To use this option, visit the DUO app on your smartphone, and tap the key icon to obtain a passcode. Enter the passcode into the DUO prompt when logging into myBama.
What Applications are Using DUO?
Applications and services must have DUO enabled individually by our programmers. The following applications use DUO. Most applications that require DUO have a green DUO icon on the application’s login page.
- Crimson Mail
- Direct deposit self-service
Do I have to use DUO to access Blackboard?
No, DUO is not required to access Blackboard. You may bypass the DUO prompt by visiting ua.edu and click the top right icon to show more navigation items. From there, you can click the Blackboard icon to visit blackboard directly. You can also bookmark the link ualearn.blackboard.com for a direct access to Blackboard.
How does DUO work on student Crimson mail and faculty/staff webmail?
When you visit mail.crimson.ua.edu or webmail.ua.edu to check email, you will see the standard DUO prompt that you see when logging into myBama. You will follow the same procedure as you typically would when logging into myBama. You can even use the Remember Me for 30 Days feature!
If you use a smart phone mail app (like outlook or your device’s standard Mail App) for your email, you will not notice any change. You will be able to use your email as you typically would. However, when adding a Crimson mail account, or an OIT-supported Exchange mail account to an iOS device (iPhone or iPad), DUO will require an authentication to verify the account.
How does DUO work the direct deposit self-service page?
If you are an active DUO user, you can login to your myBama account as you typically would with your username, password and DUO notification, and you can access the direct deposit self-service page. There is no second DUO notification upon reaching the direct deposit self-service page.
If you are not an active DUO user, when you go to the direct deposit self-service page, you will see a prompt to register for DUO. Once DUO registration is complete, you will be able to access this page.
What if I get a notification that someone is trying to access my account, but I didn’t request it?
Select the red X to deny access to your account, then promptly change your myBama password.
What if I am traveling abroad?
You have several choices when traveling abroad. Be sure to test them out before your travels so you can determine which solution is best for you.
- If you do not have your two-factor authentication device with you, please visit our self service page to obtain temporary passcodes. These expire after 72 hours, so be sure to use one of these passcodes to register a multi-factor device you can use abroad.
- If you do have a smartphone/tablet, the DUO Mobile App can provide a six-digit passcode even if your phone or tablet doesn’t have cellular, network or wifi service. Launch the DUO Mobile App, and press the key icon to obtain a passcode.
- If you only have a basic cell phone, register your phone to receive SMS text notifications.
Is the DUO smartphone app available for iOS (iPhone/iPad) and Android devices?
Yes! Visit the app store on your smartphone to download DUO Mobile.
Please note that Google Play Services are required to receive push notifications on Android. Users without Google Play Services installed will have to “fetch” by swiping down in the DUO Mobile app.
What if I get a new smartphone or device?
If your phone number has not changed, login to www.duo.ua.edu then choose the “Call my Phone” option. Then click on replace your existing phone or tablet with a new device. Choose your device from the list, and then follow the instructions to activate DUO Mobile on your new device.
If you have a new phone number, you will first need to obtain a temporary passcode (see the ‘What are Passcodes?’ section above). Login to www.duo.ua.edu and enter the temporary passcode. Click on “Replace your existing phone or tablet with a new device.” Choose your device from the list, and then follow the instructions to activate DUO Mobile on your new device.
Can I have DUO on more than once device?
Yes. You can add devices by visiting your DUO settings. When you see the DUO prompt with the three notification options, click Settings at the top right. (Please note that if you are using the Remember Me for 30 days feature, you will need to visit mybama.ua.edu on a different web browser to receive the prompt, and access your settings.) After you click Settings, click Add a New Device. You can register smart phones, cell phones, tablets and landline phones.
What can the DUO app access on my smartphone?
The DUO smartphone application serves only to provide two factor authentication. It does not access any personal information on your device, nor does it track your location. Learn more about DUO’s commitment to privacy on their website.
Is DUO required for VPN?
DUO is required to access the campus VPN. This applies UA students, faculty and staff; anyone using VPN. When you connect to the campus VPN, you will be prompted for your username, password and second password. In the second password field, you can enter the word “push” to receive a DUO push notification to your smartphone, or you can enter a passcode through the DUO app, via SMS text, or through the OIT self-service feature. Additional instructions for using DUO with VPN is available on our VPN page where we have instructions for each unique operating system.
What if I am locked out of my myBama account and I see a DUO message?
Then you should activate your duo account at duo.ua.edu. Chances are, DUO is now required for you to access the sensitive data in your myBama account.