Body
Overview
New devices can be added to Duo from the Duo Prompt. Including multiple options for authentication is best practice so that you can always access your account.
Note
Starting July 1, 2025, the SMS-based MFA method will no longer be available in Duo. Beginning December 18, 2025, Duo Verified Push will automatically be enabled for Duo Mobile users, and the Phone Call method will also be discontinued. These changes are part of the UA System's ongoing effort to prioritize user security by transitioning to more reliable and resilient methods of authentication. Learn more at:
In this article:
What materials do I need?
- Active at the University of Alaska (UA) System
- Students registered for at least 1 credit through UAOnline, or
- Employees with an active job status
- UA username and current UA password.
- If you forgot your UA username or password, please visit the ME.UAA account recovery website.
- Internet access
- Web browser (i.e. Mozilla Firefox, Google Chrome, Apple Safari, etc)
- Desktop or laptop computer
- A compatible device you regularly keep with you
Enroll a New Device
- On a desktop or laptop computer with an internet connection, open your preferred web browser.
- Log in to any online service such UAOnline, Blackboard, Google Workspace @ UA, etc.
- At the Duo prompt, click Other options at the bottom.

- Click Manage Devices at the bottom of the prompt.

- Choose an authentication method.

- Once authenticated, the page will redirect you to the Manage Devices page.
- Click inside the Add a device box.

- Select an option for another Duo device.

- Proceed to the Device Types section to add various Duo-compatible devices.
Device Types
Recommended Devices
The Duo Mobile app, Security Key, and Feitian One-Time-Password (OTP) Hardware Token are the recommended authentication devices, as they provide the best user experience, are easy to carry at all times, and offer broad compatibility across platforms and devices. Once one of these devices is set up, additional recommended devices can also be configured as backups.
Duo Mobile app
Note
This is the preferred primary method for MFA as it provides the best user experience.
Note
- UAA IT Services does not provide security keys for free or at a discount; they must be purchased personally out of pocket. However, we encourage you to consider this a worthwhile investment in your online account security. These keys are not only compatible with our Duo MFA system but can also be used to secure many of your personal accounts that support security keys. For purchasing options, please visit the Security Keys with Duo Security article.
- The following steps were written for Windows 11, but the steps should be similar to other computer operating systems.
- Click the Security key option at Select an option prompt.

- Click on Continue.

- Continue to follow your computer's on-screen prompts. This will vary from other operating systems.

- Once you have completed the setup prompts, it will pair your passkey with Duo. Click the OK button to close the prompt.

- Congratulations, your Security Key has been added.

Feitian One-Time-Password (OTP) Hardware Token
Note
- If you do not have a compatible Duo device, UAA IT Services (ITS) can provide this token for free and apply it to your account login. To request one, please open a Questions or Assistance with Multi-Factor Authentication ticket.
- If you lose your free UAA ITS-provided token, a replacement charge of $15 is required. If you are a:
- Student - <TBD, how do students pay?>
- University employee - you must provide their departmental Billing Contact (Fiscal Technician), Org number, and Fund number.
- If your UAA ITS-provided token breaks, a replacement will be provided for free.
- Adding this token to your Duo account is done outside of Duo.
- Click the Security key option at Select an option prompt

- Under Multi-Factor Authentication (MFA) enabled, click the Hardware keys button.
- Enter the Serial Number on the back of your Feitian token.
- Click the Add hardware key button.
- Congratulations, your token has been added.
Backup Devices
We advise against using Mobile Device Verification, macOS Touch ID, or Windows Hello as your sole primary method for Duo authentication. You may not always have a mobile Windows or macOS computer with you at all times, and these methods are not supported across all platforms and devices. Therefore, they are best used as secondary or backup authentication methods.
Mobile Device Verification
Note
This method supports common device authentication methods such as iOS/iPadOS FaceID, Android Face or Fingerprint Unlock, PIN, etc.
- Click the Device verification option at Select an option prompt

- Click the Continue button to proceed with the set up.

- Your mobile device will prompt you to use your face, fingerprint, PIN, or your other device authentication methods. Follow the on-screen prompts.

- Congratulations, your mobile device verification has been added.
macOS TouchID
- While on your macOS computer, click the TouchID option at Select an option prompt.
- Click Continue to prompt Touch ID authentication.

- Enter the Touch ID account password.
- Congratulations, your macOS TouchID has been added.
Windows Hello
Note
The following steps were written for Windows 11, but the steps should be identical to Windows 10.
- Before you begin, ensure you have a Windows Hello method set up already: Microsoft Support - Learn about Windows Hello and set it up
- While on your Windows computer, click the Windows Hello option at the Select an option prompt.

- Click the Continue button to proceed with the set up.

- A Windows Hello prompt will appear on your screen. Select your Windows Hello method. In this example, PIN was selected.

- Once you have authenticated Windows Hello, it will pair it with Duo. Click the OK button to continue.

- Congratulations, your Windows Hello method has been added.

Is there any additional information I should know about?
Frequently Asked Questions (FAQ)
The Multi-Factor Authentication FAQs article provides answers to the following FAQs and more:
- Why does Duo prompt for an IT Bypass Code when I already set up my device?
- Why did UA remove SMS and Phone Call MFA methods in 2025?
- How long will MFA remain active on my account?
- What if I'm getting an MFA prompt (e.g., Duo Push notification) but I didn't try to log in?
- I get an error on my phone. Account Error Something unexpected happened. Please contact your helpdesk. NSURLErrorDomain -999/-1200
For more information and resources about MFA, please visit our Knowledge Base catalog, Multi-factor Authentication.
Need additional help or have issues
For support, requests may be submitted anytime using the appropriate Questions or Assistance with Multi-Factor Authentication form. Requests generate a Ticket which will be worked in order received and urgency by UAA Employees with the knowledge and permissions to assist with the request.
For immediate assistance, please review the Contact Us page for the appropriate support group.