1. Open the App Store (iOS) or Google Play Store (Android)
2. Search for "Duo Mobile" 
3. Select the free Duo Mobile app published by Duo Security LLC and install it

Note: There may be similar apps advertised. Be careful to download the correct one!

Managing 2-Factor Authentication

1. In a web browser on a computer, go to the NetID Center via identity.uillinois.edu 
2. Select Log in
   
   
   
   
3. Under "2-Factor Authentication," select Manage my 2FA
   
   
   
   
4. Verify that the correct phone number is displayed.
   • If you have a new phone and are using the same number for authentication, select "Reactivate Duo App" and follow the remaining instructions for activating the app.
     
     
5. Select + Add a new device
   
   
   
   
6. Choose the smartphone device platform, i.e. Android, iOS (Apple), or Windows Phone
   
   
7. Select Continue
   
   
   
   
8. Enter your phone number, including country code
   
   
9. Choose "Yes" for the question "Do you want to use the Duo Mobile App for this device?"
   
   
10. Select "Continue"
    
    
    
    
11. If your device is already registered, you will be prompted to continue or cancel. Choose "Continue."
    
    
    
12. On the following instructional page, select "I have Duo Mobile installed" and 

Scan the QR code with the Duo Mobile app

1. Switching to your smartphone: Open the Duo Mobile app
   
   
   
   
2. On the app start menu, select "Continue" and "QR code"
   • Note: If you already have Duo Mobile installed, use the "Add +" option in the top-right corner, and then "QR Code" to set up an account
     
      
      
     
     
3. Duo Mobile will open a camera to scan the QR code
   • Your phone permissions may add a prompt asking if you want Duo to have camera access; please allow the request
     
     
4. Point your smartphone's lens toward the QR code generated by the NetID Center
   
   
5. Duo Mobile will prompt you to name the account for your remembrance, e.g. "U of I MFA" or "Illinois 2FA" or "work"
   
   
   
   
6. Once complete, the new account will appear on the list of connected services
   
   

When you register a smartphone as a 2FA security device using the Duo Mobile app, it adds "Send a Push" as an option every time you log in. To simplify login, you can set that notification to push automatically, saving yourself a click. Follow the steps below to change this setting in the Identity Center.

1. In a web browser on a computer, go to the NetID Center via identity.uillinois.edu 
2. Select Log in
3. Once signed in, select “Manage my 2FA”
   
   
   
   
4. Scroll down the page and click the drop-down for “When I log in:” 
   
   
5. Select “Automatically Duo Push”
   
   

Net ID Center

1. Log into the NetID Center
   
   
2. If the Duo prompt automatically sends you a push notification, click on Other options.
   
   
3. Authenticate using the Text meessage option, or via another device
   
4. Click on Manage my 2FA.
   
   
5. Click on your device under My Devices & Settings, then click on Reactivate Duo App
   

DUO Universal Prompt

1. Click on Other options to go to the authentication methods screen.
   
   
2. Click on Manage devices.
   
   
3. You'll need to verify your identity here, so choose an alternative authentication method such as text message.
   
   
4. At the device management screen, click on I have a new phone.
   

NetID Center

Click the trash can button to delete a device.

Note: You may not remove your device if you only have one set up. If you wish to remove it, first add another then delete the original. You will be given a chance to confirm or cancel the removal of the device. Once the device is deleted, it can no longer be used to approve DUO requests.

DUO Universal Prompt

Click on the Edit button, then click on Delete.

Note: The delete option will only appear if you have another device listed. If you wish to remove it, first add another then delete the original. You will be given a chance to confirm your selection.

NetID Center

If you authenticate with more than one device, you can specify the default by selecting the blue star icon:

You can also choose the default behavior when you authenticate via a UI Verify Duo Prompt:

DUO Universal Prompt

The first time you access the Duo Universal Prompt for a given application, it will evaluate your registered devices and automatically select the most secure option available to you, using this ordered preference (ordered from most to least secure):

1. FIDO2 Security Key
2. Duo Mobile push approval
3. Yubikey passcode
4. Duo Mobile generated passcode
5. Hardware token passcode
6. SMS passcode

If you want to try a different method than the one selected for you, you can click on 'Other options' to get a list of your available authentication methods:

When you successfully authenticate, the Duo Universal Prompt remembers the authentication method used and defaults to that method for future logins to that application. If you want to try a different method than the one used last, click 'Other options' to get a list of your available authentication methods.

Automatic Duo Push

If you explicitly choose Duo Push authentication or it is automatically selected on your behalf during a first-time authentication, Duo will automatically send the push notification to your device without any action needed by you. During future authentications, Duo will continue to send the push notification automatically if that remains your default authentication method.