Have questions about DUO?

Check out our frequently asked questions below, and contact our IT Service Desk at 205-348-5555 with any additional questions.


What is two-factor authentication?

Two-factor authentication, also referred to as multi-factor authentication, provides an additional layer of security when logging in to a website. Two-factor is becoming the standard in cyber security. Google, Apple, and other services all have their own two-factor authentication methods. In short, passwords are no longer sufficient in protecting our sensitive data, we’ve got to add another layer of security to our accounts.


What are my authentication options?

  • DUO Push – if you have the DUO Mobile App installed on your smartphone or tablet, you can receive a push notification. From the app, you can approve or deny the login attempt.
  • Phone Call – you can receive a phone call on your mobile phone or landline phone. The call will give instructions on approving or denying the login attempt.
  • Passcodes – You can receive temporary or long-term passcodes by text/sms message, from our self-service application, or directly from the DUO app by tapping the key icon.

Is DUO mandatory?

DUO is required for certain applications. Activate your account before the deadlines below!

Beginning July 1, 2017 DUO is required to access the direct deposit self-service page on myBama.

Beginning August 21, 2017 DUO is required to access the campus VPN.

Beginning October 2, 2017, DUO will be mandatory for all UA students.


What are Passcodes?

If you opt-out of the DUO Mobile Application push notifications, there are a variety of passcode options to utilize as your second verification method.

  • Passcodes via SMS – users can receive a batch of one-time use codes via text message.You can request these by logging into your myBama as you typically would. Once you received the DUO prompt, you can click Enter Passcode, then click on the blue button “Text me new codes.”  These codes do not expire, and they are valid until used.
  • Passcodes via DUO Mobile App – If you have the DUO Mobile app installed, you can receive a single passcode by tapping the key icon next to The University of Alabama in the mobile app. This code must be used immediately.
  • Online-Generated Temporary Passcodes – If you do not have your device with you, you can obtain temporary passcodes. Each of the passcodes can only be used once, and will expire after 72 hours. Visit our self service page to generate these passcodes.

What is Autopush?

We recommend leaving Autopush or Autocall disabled as it has been known to cause a few glitches. You can; however, use the “remember me” option. If you are unable to activate the “remember me” function, please make sure autopush is disabled. If you’ve enabled Autopush or Autocall, and you want to remove it, you must deactivate and reactivate your account.


What does “Remember this device for 30 days” mean?

Selecting this option will allow you to bypass DUO authentication for the next 30 days. This only works if you are logging in from the same computer, IP address and browser. You will still be prompted to verify once – with your username and password. You will not be able to access your settings on that particular browser during the 30 days. Please note that if you have tools or policies running that regularly delete or clean cookies, the remember me feature will not work. If you do need to access your settings (perhaps to add another device) just try another browser.


Forgot your device?

If you do not have your device with you, you can obtain a batch of temporary pass codes. To obtain them, please visit our self service page. You will login with your myBama username and password, and then you will answer additional questions to receive a batch of temporary DUO access codes. Each of the passcodes you will receive can only be used once, and will expire after 72 hours.

*If you have lost your device, please report it to the IT Service Desk at 205-348-5555. We want to ensure someone else does not maliciously authenticate your account with your device.


Who can use DUO?

DUO is available to current UA students, faculty and staff. At this time, DUO is not available to UA retirees, past employees or alumni.


Can I use DUO without using wifi or cellular data?

Yes. The passcode option on the DUO app does not require wifi or cellular connectivity, it even works on airplane mode. To use this option, visit the DUO app on your smart phone, and tap the key icon to obtain a passcode. Enter the passcode into the DUO prompt when logging into myBama.


What Applications are Using DUO?

Applications and services must have DUO enabled individually by our programmers. Currently, myBama and Crimson Mail utilize DUO. This list will continue to grow over time. OIT will add VPN to this list summer 2017!


How does DUO work on Crimson mail?

When you visit mail.crimson.ua.edu to check email, you will see the standard DUO prompt that you see when logging into myBama. You will follow the same procedure as you typically would when logging into myBama. You can even use the Remember Me for 30 Days feature!

If you use a smart phone mail app (like outlook or your device’s standard Mail App) for your Crimson Mail, you will not notice any change. You will be able to use your Crimson Mail as you typically would. However, when adding a Crimson mail account to an iOS device (iPhone or iPad), DUO will require an authentication to verify the account.


How does DUO work the direct deposit self-service page?

If you are an active DUO user, you can login to your myBama account as you typically would with your username, password and DUO notification, and you can access the direct deposit self-service page. There is no second DUO notification upon reaching the direct deposit self-service page.

If you are not an active DUO user, when you go to the direct deposit self-service page, you will see a prompt to register for DUO. Once DUO registration is complete, you will be able to access this page.


What if I get a notification that someone is trying to access my account, but I didn’t request it?

Select the red X to deny access to your account, then promptly change your myBama password.


What if I am traveling abroad?

You have several choices when traveling abroad. Be sure to test them out before your travels so you can determine which solution is best for you.

  • If you do not have your two-factor authentication device with you, please visit our self service page to obtain temporary passcoes. These expire after 72 hours, so be sure to use one of these passcodes to register a multi-factor device you can use abroad.
  • If you do have a smartphone/tablet, the DUO Mobile App can provide a six-digit passcode even if your phone or tablet doesn’t have cellular, network or wifi service. Launch the DUO Mobile App, and press the key icon to obtain a passcode.
  • If you only have a basic cell phone, register your phone to receive SMS text notifications.

What if I get a new smartphone or device?

If your phone number has not changed, login to www.duo.ua.edu then choose the “Call my Phone” option. Then click on replace your existing phone or tablet with a new device. Choose your device from the list, and then follow the instructions to activate DUO Mobile on your new device.

If you have a new phone number, you will first need to obtain a temporary passcode (see the ‘What are Passcodes?’ section above). Login to www.duo.ua.edu and enter the temporary passcode. Click on “Replace your existing phone or tablet with a new device.” Choose your device from the list, and then follow the instructions to activate DUO Mobile on your new device.

We have a step-by-step guide for adding a new phone. Check it out before calling our IT Service Desk.


Can I have DUO on more than once device?

Yes, simply visit the DUO home screen to add additional devices – www.duo.ua.edu


What can the DUO app access on my smartphone?

The DUO smartphone application serves only to provide two factor authentication. It does not access any personal information on your device, nor does it track your location.


Is DUO required for VPN?

Beginning Monday, August 21, 2017, DUO will be required to access the campus VPN. This includes UA students, faculty and staff; anyone using VPN. Activate your DUO account today! When you activate DUO, it will be applied to all DUO-enabled systems. Meaning DUO will be activated not only for VPN access, but also for your myBama access.

After August 21, when you connect to the campus VPN, you will be prompted for your username, password and second password. In the second password field, you can enter the word “push” to receive a push notification to your smartphone, or you can enter a passcode through the DUO app, via SMS text, or through the OIT self-service feature. Additional instructions for using DUO with VPN is available on our VPN page where we have instructions for each unique operating system.