A cloud service provider I use relies on Duo for two-factor authentication. As an end user, do I need to purchase a hardware token or other device, or is installing the Duo Authenticator app on my phone usually enough? I'm having trouble visualizing how the setup works and would appreciate a basic explanation.
3 Answers
The exact process depends on how the service has configured Duo. Some setups only send a push notification to the Duo app, while others might require an additional desktop application or security check. The service administrator should tell you which method is required.
Usually, no extra hardware is needed. If the provider lets you register your phone by text message or by scanning a QR code, you can use the Duo mobile app to approve sign-ins or generate a code.
Thanks, that helps clarify how the phone-based setup works.
A hardware security key, such as a USB or NFC token, may also be supported if you don’t want to use a mobile device. Whether that’s required depends on the provider’s configuration.
That’s useful to know—thanks for mentioning the hardware option.
Got it. I’ll check which Duo method the provider requires.