Duo Multi-Factor Authentication

Duo is a multi-factor authentication (MFA) tool that proves that you are you when accessing TU systems. By providing a layer of protection, MFA helps reduce malware, phishing and ransomware attacks.

This service and vendor documentation are cloud-hosted and not controlled by Towson University. TU-specific documentation is reviewed and updated quarterly. 

Everyone with a TU NetID now uses Duo! 

If you need a passcode, contact the OTS Tech Support Desk at 410-704-5151.

What is Duo Multi-Factor Authentication?

Duo MFA is a security method that requires a second form of identification to help you securely login to systems the university wants to strongly protect. This proves you initiated the login by providing a randomized, automatically generated number that authenticates you for a single login session. Even if a criminal manages to steal your password, they won’t be able to access your data, thanks to Duo. Using MFA protects your account more than just a username and password. 

Who uses Duo at TU?

Everyone with a TU NetID uses Duo when using access TU resources. 

Services requiring Duo

With the growing number of cyber threats, traditional password-only security is no longer sufficient, so almost all of TU's systems are protected by Duo. Single-Sign On (SSO) helps reduce the number of times you need to log in - but it is required when prompted.

How does it work?

Logging into multi-factor authentication requires something you know (like your TU NetID and password) and something you have (like Duo app or texted codes). The easiest way to authenticate is to use the Duo app on your phone. There are back-up options if you don't have your phone so it's recommended you enroll multiple devices. 

As of Jan. 13, 2025 using a phone call to authenticate is no longer an option.

Enroll or manage Duo devices or create emergency passcodes using the NetID management system.

Get started with Duo and NetID Management

Self-Help Resources

Frequently Asked Questions

It could mean your login information is compromised and someone is trying to access your account. Click "DENY" in the prompt or ignore it, then contact the OTS Tech Support Desk

You can use the Duo mobile app (available for smartphone or tablet) to generate passcodes even if you don't have an Internet, Wi-Fi, or a cellular connection.

The most common reason for your account to be locked out is from multiple incorrect NetID password attempts or multiple failed Duo login attempts in a row. Wait for your NetID and your Duo access to both automatically unlock after 10 minutes, or contact the OTS Technology Support Desk at 410-704-5151 for assistance.

You can select the "Remember Me" option. This allows Duo to remember you, lessening the number of prompts you receive. You must be authenticating on the same (non-public) computer/browser and must not clear browser cookies. Learn more.

No smartphone, no problem. You can use the Duo mobile app on a tablet, receive codes to a phone that can use text SMS, use your own security key or pre-printed passcodes.

It’s strongly recommended that you enroll multiple devices when registering for Duo so you can have a backup ready. 

Yes, the Duo mobile app is free. The Apple App Store requires payment information on record even when downloading a free app.

For Faculty

Students using Duo on a mobile device or with pre-printed passcodes (bypass codes) should only add 5-10 seconds to classroom time. If students don’t use technology (laptops, etc.) that require logins, they won’t need to authenticate with Duo. Additionally, Duo isn’t an excuse for students to use their smartphones throughout class.

Students should use pre-printed passcodes. In your syllabus or at the start of the semester, you can ask students to print these out and bring them to every class. Here's example text that might be helpful to in:clude:

  • Be prepared to log into Duo MFA to access class activities (i.e., exams, quizzes) and apps like your Microsoft account, or potentially risk losing points. Set a backup plan at towson.edu/netid in case your primary device is unavailable, and print passcodes in advance.
  • Failure to have your MFA device or a backup (lost, was stolen, dead battery, etc.) or printed codes is not an excused absence or a valid reason for make-up work.
  • Limit use of devices in class: use your mobile device to authenticate/login, then put it away during class.

If the student has set up their security questions in advance, they can request a temporary passcode online at towson.edu/netid, or they can call the OTS Tech Support Desk at 410-704-5151 to verify their identity and receive a temporary one-time passcode. Students with the pre-printed passcodes might avoid lost quiz/exam time.

If the student is using their own device and checked the “Remember Me” option, they might be able to restart their computer and re-authenticate with their NetID/password without being prompted for Duo (i.e., not need to use their smart device).

If the student did not click the “Remember Me” box, is using a shared device, or their browser settings weren’t saved, they’ll need to log back in with their NetID/password and authenticate with MFA-Duo which will require briefly using their smartphone. Use of a proctor assisting with this process is recommended during testing time.

If you have a specific need, please reach out to us through TechHelp, so we can talk about options and potential solutions.

Support

For help with Duo, submit a TechHelp service request or contact the OTS Technology Support Desk.