Skip to content

Duo Two-Factor Authentication Frequently Asked Questions (FAQ's)

Print Friendly and PDF

  1. How Do I Change Settings or Enroll a Backup Device, such as a tablet?
    • To change settings or enroll another device (such as a tablet), go to OIT Password Management page and choose Manage Two-Factor Authentication. Log in with your NetID and password and authenticate with two-factor. Once you are in, you can Add, Modify, or Delete a Device and change your default preference.
  2. I have a new phone. How do I reactivate Duo?
  3. If I have signed up for 2FA, can I sign up for the non-expiring password policy? 
    • Yes! After signing up for two-factor authentication, go to and change your NetID password to a new 12-16 character password and you will no longer be prompted to change it.
  4. How much data does a Duo Push use?
    • Almost none. 500 pushes to your device will use 1 MB of data in total. This is roughly equivalent to loading one webpage on your smartphone.
  5. Does installing the Duo Mobile app collect data or give up control of my phone?
    • No. Duo Mobile has no access to change settings on your phone. Duo Mobile cannot read your emails, it cannot see your browser history, and it requires your permission to send you notifications. Lastly, Duo Mobile cannot remotely wipe your phone.
    • The only information Duo Mobile collects is for the purpose of verifying the security of your device. Collected data includes your OS version, device encryption status, and screen lock. Duo uses this information to help recommend security improvements to your device and you are always in control of whether or not you take action on these recommendations.
  6. Why does the Duo Mobile app need to access my camera?
    • Duo Mobile only accesses your camera when scanning a QR code during activation.
  7. What if I don’t have a Wi-Fi connection or cellular reception?
    • No problem. Tap the icon in the Duo Mobile app to generate an authentication passcode. You do not need an internet connection or a cellular signal to generate these passcodes.  If you are not taking your phone when you travel, contact the OIT HelpDesk for a temporary code to take with you on your trip.
  8. I am planning on traveling abroad, what should I do to prepare for my trip?
    • You are also encouraged to test your two-factor authentication prior to leaving the university.  The Duo mobile app will generate an authentication passcode which does not require an internet connection or a cellular signal. If you are not taking your phone with you, contact the OIT HelpDesk for a temporary code or request a hardware token.
  9. What if my push alerts aren’t coming through?
  10. My webpage uses NetID and password to log in. How do I add two-factor authentication?
    • Contact the OIT HelpDesk to start the conversation. 
  11. I log into my computer with my NetID and password. Will it use two-factor?
    • Most computers will not use two-factor for authentication.
  12. I left my phone at home and can’t log in. What should I do?
    • In the event that you leave your phone at home, you have two options: 1) Return home and get your phone or 2) contact the OIT HelpDesk at 865-974-9900 for a temporary code.**
      **Note that option 2 is only available Monday - Thursday 7 a.m. ET to 10 p.m. ET and Friday from 7 a.m. ET to 5 p.m. ET and the HelpDesk will need to verify your identity before providing a code. 
  13. I check my department’s email account. Does it have to use two-factor?
    • At this time, departmental accounts will not be placed behind 2FA. More information for departmental accounts will be available later this year.  
  14. My bank uses text messages for two-factor. Why is that not an option?
    • Text messages and telephone calls are features within the system. However, they are an additional cost. Other universities using these features pay up to an additional $250,000/year. UT has elected to use the more secure Duo Mobile app instead of enabling text messaging and telephone calls.
  15. Who will be required to use two-factor?
    • Anyone with a NetID and password, including active faculty, staff, students. At this time, visiting scholars, and contractors are not yet required to use two-factor.
    • In general, we are exempting Emeritus (non-active), Retirees, and Alumni from 2FA. However, if an account is compromised, 2FA will be required before the account is re-enabled.
  16. Why doesn't the "remember me for 7 days" work on lab computers?
    • Many campus computer labs use software (such as Deep Freeze) that clears all data from the user's profile and web browsing sessions upon reboot. This software will delete the cookie that stores the login session.
  17. Can I borrow a hardware token? 
    • No. All active Knoxville-area staff, faculty, and students may obtain their initial token at no cost. Provided tokens are yours to keep and use as needed. 
  18. I lost my token and need a replacement.  Where can I get one?
    • Replacement tokens are available for $10 at VolTech in the Student Union.
  19. I have a HUAWEI phone running Android OS, but I can't find the Duo Mobile app in my app store. 
    • The Duo Mobile app is not available for HUAWEI phones running Android OS.  You will need to request a hardware token to sign up for two-factor.
  20. My push notification is not working because I don't have cellular or wi-fi service.  How can I log in?
    • Your Duo Mobile app will generate a temporary passcode. This option does not require WiFi or data, so this is a great option if you’re traveling or if you have limited or no cell/internet service. Open your Duo mobile app, tap the key icon, and it will reveal a passcode. Log in to the application, choose the enter a passcode option, enter the code, and you’re in!
  21. Can I connect Duo Mobile to my Apple Watch?

Need more help?

The flagship campus of the University of Tennessee System and partner in the Tennessee Transfer Pathway.