After registering your device, a hardware token [staff/Postgraduate Researchers], or a personal security key, you'll be required to use MFA to verify your identity from the next time you log in.
If you haven't already registered a device, see Setting up MFA.
Step 2: Authenticate using MFA
After successfully logging in, the 'Duo Prompt' will appear on screen. Duo Prompt lets you choose how to verify your identity each time you log in.
Duo Prompt on Desktop
Duo Prompt on mobile
Depending on the preferences you chose when you set up MFA, you will either:
automatically receive a mobile push notification
be prompted to choose how you want to authenticate (see 'Authentication options')
Option 1: Approve mobile push notification
If you set your account to automatically receive push notifications for the Duo Mobile App or to choose 'Send Me a push' from the Duo Prompt, you will receive a notification on your phone.
Take a look at Duo's guide to push notifications for:
Note: If you get a login request that you weren't expecting, press Deny to reject the request. You’ll be given the ability to report it as fraudulent, or you can tap It was a mistake to deny the request without reporting it.
Option 2: Enter a passcode
Passcodes let you log into your account, even when your device is without an internet connection. You can access passcodes either from a hardware token or the Duo Mobile app.
Getting a passcode with a Hardware Token [Staff/Postgraduate Researchers only]
To authenticate using a hardware token, click the Enter a Passcode button from the Duo Prompt.
Press the button on your hardware token to generate a new passcode, type it into the space provided from the Duo Prompt, and click Log In. Using the "Device:" drop-down menu to select your token is not necessary before entering the passcode.
Getting a passcode with Duo Mobile app
To authenticate on iOS and Android, click the Enter a Passcode button from the Duo Prompt.
Open the Duo Mobile app and tap the down indicator to get a one-time passcode for login. (See screenshots below for Duo Mobile on iPhone). Type the passcode into the space provided from the Duo Prompt, and click Log In.
For more information on passcodes, including how to generate a new passcode, take a look at Duo's end-user guides for:
Screenshots of Duo Mobile viewed on an iPhone
'Remember Me' option
To minimise the number of times you need to complete a login with Duo, select the 'Remember me for 7 days' option when completing a login. This functionality allows devices and browsers to be deemed trustworthy and therefore keeps you from having to authenticate for logins for 7 days in the browser or device from which you initiated your login.
How it works
The 'Remember Me' feature stores a cookie in your browser. This means it will only activate on the browser you applied it to. If you're using a different device or browser to log in, you'll be prompted again to authenticate and select 'Remember me for 7 days' .
Note: As long as you don't clear your cookies, the Remember Me feature will remember a browser for 7 days.
You may be required to use MFA more frequently for some applications which have sensitive or protected information (for staff this includes our payroll system), as they require a higher level of protection.
Users of some services such as the University's VPN will find that the 'Remember Me' MFA feature doesn't work. VPN isn't a web service and therefore doesn't have cookies, which are required for this MFA feature. When your VPN connection drops (often due to inactivity), then you will need to authenticate using MFA when you reconnect to VPN.
Private Browsing modes
If you use Private Browsing you won't be able to activate the Remember Me feature.
Enabling Private Browsing mode such as Incognito Window (Chrome) or Private Window (Firefox) allows you to browse the web privately. When you visit a website, your browser won’t store any information such as history, cookies, form data. Since information isn't stored, you won't be able to remember devices or browsers.
How to activate Remember Me
The following instructions display the process from the view of a desktop browser. Duo Prompt may look slightly different on smaller screens such as a smartphone or tablet, but the same options are available for use.
To activate the Remember Me feature, select the tick box next to 'Remember me for 7 days'.
If you have automatic Duo Push enabled, you first need to cancel this feature.
Select the 'Cancel' button.
You can now select 'Remember me for 7 days' option.