Enrolling in Multifactor Authentication (Duo)

This article will guide Chico State users through choosing and setting up Duo multifactor authentication methods to ensure reliable and secure access to campus systems.

Quick Links: | Choose a Duo Method | Set up Duo Mobile (recommended) | Set up Device-based Passkeys | Security Keys |

 If you are prompted for a bypass code, or if you have used Duo Mobile before but the app shows Disabled, make sure the Duo Mobile app is installed.
 
Then text DuoMobile to 1-877-529-8585 and follow the SMS prompts.

Choose a Duo Method

Chico State uses Duo multifactor authentication (MFA) to protect your account. When you sign in, Duo confirms your identity using one or more authentication methods.

You can choose from the following options:

• Duo Mobile app (recommended)
• Device-based passkeys (Face ID, Touch ID, Windows Hello)
• Security keys (physical devices you carry)

You may set up more than one method. Setting up Duo Mobile is strongly recommended even if you plan to use a passkey or security key.

Set up Duo Mobile (recommended)

Duo Mobile is the preferred authentication method because it works across devices and provides backup and recovery options.

You can use Duo Mobile on a supported smartphone or tablet. 

1. Install Duo Mobile from your device’s app store.
2. Sign in to the Chico State Portal.
3. On the Duo enrollment screen, select Duo Mobile from the list of options.
4. Choose your country and enter your phone number, then click Add phone number.
5. Activate Duo Mobile by scanning the QR Code with the app's built-in QR Code scanner.
   
    
6. Each QR Code is unique and only works for the phone enrolled.
   • Can't scan the QR Code? Click Get an activation link instead and follow the instructions.
7. After activating your device, you should receive a confirmation screen.

Once set up, you can approve login requests by tapping Approve in the Duo Mobile app.

Set up Device-based Passkeys (Face ID, Touch ID, Windows Hello)

 Important note: If you enable a device-based passkey, you must also set up Duo Mobile as a backup. Without Duo Mobile, you may be locked out if your device is lost, replaced, or reset.

Device-based passkeys use biometric or PIN security built into your device. These passkeys only work on the device where they are created.

• Best for users who usually sign in from the same computer or phone
• Not transferable to a new or replacement device

To set it up:

1. Open an incognito or private browser window.
2. Log in to the Chico State Portal.
3. On the Duo window, select Other options, then Manage devices.
   
    
4. Duo into the Device Management section, or contact IT Support Services if you cannot. After authenticating in, you'll see a screen that says "You're Verified. Sending you to the devices page". 
5. Choose Add a device.
6. Select Touch ID, Face ID, or Windows Hello.
7. Follow the on-screen steps to complete setup.

Security Keys

Security keys are physical devices that plug into or tap on your computer or mobile device. Unlike device-based passkeys, security keys can be used on multiple devices.

• Best for users who sign in from multiple computers
• IT Support Services does not provide security keys. You can buy these individually, but ensure they are Duo-supported. 
  • WebAuthn/FIDO2 security keys from Yubico or Feitian are good options.
  • You can purchase these online from retailers like Amazon. Please contact ITSS for questions or support. 

To set it up:

1. Open an incognito or private browser window.
2. Log in to the Chico State Portal.
3. On the Duo window, select Other options, then Manage devices.
   
    
4. Duo into the Device Management section, or contact IT Support Services if you cannot. After authenticating in, you'll see a screen that says "You're Verified. Sending you to the devices page". 
5. Choose Add a device.
6. Select Security Key.
7. Insert or tap your security key and follow the on-screen steps.

 Still need help? Contact IT Support Services for further assistance.
  
 Help us improve our Knowledge Base! Click Yes or No below, then let us know what worked — or what didn’t. Your feedback helps us improve our content and provide the best possible support.