Setup a Platform Authenticator with Duo

Setup Duo with Touch ID on Mac

In order to use Touch ID with Duo, make sure you have the following:

• A MacBook Pro, MacBook Air, or Magic Keyboard with a Touch ID button.
• A fingerprint enrolled in Touch ID (see how to do this at the Apple Support site).
• A supported browser: Safari or Chrome.
• iCloud Keychain sync enabled on all the Apple devices you will use with Duo and the passkey you will create during setup.

Add Touch ID as an authentication method

1. From the Self-Service Portal, select Add a device
2. Select Touch ID
3. You will be prompted to "Set up Touch ID," select Continue
4. You will be prompted to "Use Touch ID to sign in?", follow the instructions on your Mac
5. You have now enrolled your device with Touch ID, select Continue to return to the Self-Service Portal

Authenticating to Duo with Touch ID

1. The next time you log on using Duo, you can select Touch ID as an authentication method
2. Select Use Touch ID and touch the Touch ID button when prompted
3. If you aren't able to access the Touch ID sensor (such as when you close and dock your laptop), then you can choose to type in your Mac login password instead to verify.

Setup Duo with Face ID on iPhone/iPad

In order to use Face ID or Touch ID on an iPhone or iPad with Duo, make sure you have the following:

• An iPhone or iPad that supports Face ID or Touch ID.
• Face ID or Touch ID already set up on the iPhone or iPad. Learn how to set up Face ID or set up Touch ID at the Apple Support site.
• iCloud Keychain sync enabled on all the Apple devices you will use with Duo and the passkey you will create during setup.

Add Face ID as an authentication method

1. From the Self-Service Portal, select Add a device
2. Select Face ID / Touch ID
3. You will be prompted to "Set up Face ID / Touch ID," select Continue
4. You will be prompted to "Use Face ID to sign in?", follow the instructions on your iPhone
5. You have now enrolled your device Touch ID, select Continue to return to the Self-Service Portal

Authenticating to Duo with Face ID

1. The next time you log on using Duo, you can select Face ID as an authentication method
2. Select Use Face ID and allow your phone to scan your face when prompted
3. If the Face ID camera isn't able to see your face, then you can choose to type in your device PIN to authenticate

Setup Duo with Android Biometrics on an Android device

In order to use Android Biometrics with Duo, make sure you have the following:

• An Android device that supports biometrics, like fingerprint or face unlock.
  
• Facial or fingerprint unlock set up on the device. Go to Settings → Security to change your unlock settings. Refer to the Google support articles Unlock your Pixel phone with your fingerprint and Unlock your Pixel phone with your face, the Samsung articles Set up and use the fingerprint sensor on your Galaxy phone and Use Facial recognition security on your Galaxy phone, or your device manufacturer's support site for examples of how to do this.
  

Add Android Biometrics as an authentication method

1. From the Self-Service Portal, select Add a device
2. Select Device verification
   

   
   
   

3. You will be prompted to "Set up Device verification," select Continue
   
   
   
4. Follow the instructions on your Android device to verify biometric or PIN based authentication
   

   

   
   
5. You have now enrolled your device with Android Biometrics, select Continue to return to the Self-Service Portal

Authenticating to Duo with Android Biometrics

1. The next time you log on using Duo, you can select Device verification as an authentication method
2. Follow the instructions on your Android device to verify with biometrics or PIN
   

Setup Duo with Windows Hello on a Windows PC

In order to use Windows Hello with Duo, make sure you have the following:

• A device running Windows 10 or later.
• Windows Hello set up on the device for signing in with a PIN, fingerprint, or facial recognition. Learn how to set up Windows Hello at the Microsoft support site.
• A supported browser: Chrome, Edge, or Firefox. 
  

Note that Chrome Incognito and Edge InPrivate browsing will not work with Windows Hello

Add Windows Hello as an authentication method

1. From the Self-Service Portal, select Add a device
2. Select Windows Hello
   

   
   
   

3. You will be prompted to "Set up Windows Hello," select Continue
   

   

   
   

4. You will be prompted to set up with either PIN, Fingerprint, or Facial Recognition, depending on what is supported on your device; if multiple methods are supported, you can switch between them with the More choices option in the bottom left of the prompt
   

   
   

   
   
5. You have now enrolled your device with Windows Hello, select OK and then Continue to return to the Self-Service Portal

Authenticating to Duo with Windows Hello

1. The next time you log on using Duo, you can select Windows Hello as an authentication method
2. Follow the instructions in the Windows prompt to authenticate with either PIN, Fingerprint, or Facial Recognition

Setup Duo with Device Verification on a Chromebook

In order to use Device Verification with Duo, make sure you have the following:

• ChromeOS version 108 or later

Add Device Verification as an authentication method

1. From the Self-Service Portal, select Add a device
2. Select Device verification
   

   
   
   

3. You will be prompted to "Set up Device verification," select Continue
   

   
   
   

4. You will get a Google prompt to "Create a passkey to sign in to duosecurity.com?", select Save another way
   

   
   
   

5. You will be asked where to save the passkey, select This device
   

   
   
   

6. You have now enrolled your device with Device Verification, select Continue to return to the Self-Service Portal

Authenticating to Duo with Device Verification

1. The next time you log on using Duo, you can select Device verification as an authentication method
2. When prompted, enter the password you use to log on to the Chromebook to authenticate with Duo