Step 1: Before you get started, download the DUO mobile application on your android or iPhone via the Google Play store or the Apple store (images shown below). If your phone is not compatible, please email oit@uci.edu or call 949-824-2222. 

From your mobile device, download the Duo Mobile app (there are versions for iOS and Android). Once the app is installed, set your mobile device aside and come back to these instructions. 

 

Step 2: Enroll your mobile device 

After downloading the app, from your computer, select the button below to open the Duo Support Desk in a new tab. If prompted, sign in with your UCInetID and password. 

 

2a: Click the “Mobile Device Registration Button” to start the enrollment process. 

Step 2b: Click “next” through the series of Duo prompts that appear on the screen.  

Step 2c: When you arrive at the “Select an option screen”, click on the Duo Mobile button.  

Step 2d: Enter your phone number and then select Continue.

Step 2e: Click “Yes, it’s correct” if the phone number is correct or “No, I need to change it” if you want to input a different number.  

Step 2f: The next prompt will ask you to download Duo Mobile on your device. If you have not already downloaded the Duo Mobile application, please do so now.  

Step 2g: Open up your Duo Mobile App and tap the “Add” button with the plus symbol near the top right corner.   

Tap the “Use QR Code” button near the top of the screen. 

Step 2h: Using the Duo mobile app, scan the QR code that appears in your browser. 

NOTE: Do NOT scan the example QR code below. 

Step 2j: The next prompts will inform you that your setup has completed.

Step 2k: Pick up your mobile device, and open the Duo Mobile app. Tap Approve to accept the Duo push request.

Step 2l: You may now Close the current tab and return to the original Mobile Device Registration page. Your enrollment is now completed. Refresh the device registration page by clicking the “Enrollment” tab. If you would like to add another device or manage your current device, click the “Mobile Device Registration” button again and it will bring you to the device management portal.   

---

You're Done! Now generate your Emergency Backup Codes

On your computer, you will see that your enrollment was a success. You can exit this page and access UCI applications that require Duo MFA for logins. Duo is mandatory for future UCI login attempts.

After enrolling, you have the ability to generate Emergency Backup Codes. This is optional. Backup codes can be used just in case you lose or replace your phone.

Now that you are enrolled, learn more about how to use Duo.

I do not have a mobile device (smartphone or tablet). What can I use instead?

Step 1: Get a Hardware Token

If you don’t have a mobile device, the campus has funded independent Duo tokens for your use, free of charge.

Please email oit@uci.edu to request for a Duo hardware token. Please include your UCInetID in the email.

Alternatively, students and employees can purchase a third-party hardware token from vendors like Yubikey. If you have a Yubikey, enroll it now.

 

Step 2: Enroll your Hardware Token

From your computer, select the button below to open the Duo Support Desk in a new tab. If prompted, sign in with your UCInetID and password.

Once you're at the Duo Support Desk, you'll need to enter your hardware token's serial number, which can be found on the back of the token. Please note that some of the hardware token serial numbers will just be a string of numbers, and some will begin with the letters 'DSEC'. After you enter the number, select Register.

Step 3: Test your Token

Select the Test Token on the top-left of the page.

If prompted, you should login with your UCInetID and password. When you arrive at the Duo login page, type in the 6-digit code that appears on your hardware token's screen, and then select Verify.

NOTE: The hardware token has a button on it that displays the token code when it is pressed. If the button is pressed too many times without the token code being used to log in, the token will get out of sync and you won't be able to log in until it is resynced. Having the token in your pocket or backpack with keys or other objects that could press on the button will cause this to happen. Contact the OIT Help Desk to get the token resynced.

 

---

After you've enrolled

How to send a Duo push to your mobile device

Step 1: Log in to a SSO-enabled service (such as ZotPortal or Canvas) as you normally would with your UCInetID and password.

---

Step 2: The page will state the duo push has been sent to your phone.

---

 

Step 3: Open the Duo Mobile app and tap Approve. You will be automatically taken to the website you were trying to visit on your computer (ZotPortal, Canvas, etc).

 

---

 

How to enter a Duo passcode

Step 1: Log in to a SSO-enabled service (such as ZotPortal or Canvas) as you normally would with your UCInetID and password.

---

Step 2: On the Duo Login screen, select Other options and click on Duo Mobile Passcode if you want to use the code generates by the duo app. If you want to use your hardware token, select Hardware token.

---

Step 3: Generate your 6-digit passcode.

Mobile Device Users: Open the Duo Mobile app and tap the 'Duo-Protected University of California - Irvine' token to expand it and reveal a 6-digit code that you can use.

Duo Hardware Token Users: Press the button on the token to generate a 6-digit code.

---

Step 4: Type the 6-digit code and then select Verify. That's it! You will be automatically taken to the website you were trying to visit on your computer (ZotPortal, Canvas, etc).

---

 

Remember me for 24 hours

Step 1: Log in to a SSO-enabled service (such as ZotPortal or Canvas) as you normally would with your UCInetID and password. (Note: the trusted device prompt will reappear after the 24 session ends)

---

Step 2: Complete the duo login screen by approving the push or entering your passcode.

Step 3: The page will reload asking you if this is your device. Click on Yes, this is my device to have it remember your duo authentication for the next 24 hours and you're done!

---

 

Generate backup codes

You'll need these in case you misplace or replace your phone.

You've probably heard that you shouldn't write down your password, but these backup codes are an exception. You should definitely print these or write these down and keep them handy in a place where you can find them in an emergency, like your wallet, pocketbook, or purse. These are single-use codes, so after you use a code it cannot be used again.