Duo Mobile on iOS

Duo Mobile on iOS

The Duo Mobile application makes it easy to authenticate — just tap “Approve” on the login request sent to your iPhone. You can also quickly generate login passcodes, even without an internet connection or cell service.

Find the latest version of Duo Mobile in the App Store.

Supported Platforms: The current version of Duo Mobile supports iOS 10.0 and greater. Support for older Duo Mobile versions on iOS 9.0 ended April 1, 2018.

To see which version of Duo Mobile is installed on your device, go to the iOS Settings menu, then scroll down and tap Duo Mobile. The "System Info" section shows the app version.

Duo Push

Duo Push is the easiest and quickest way of authenticating. You'll get a login request sent to your phone — just press Approve to authenticate.

Duo Push Request on iOS

If you get a login request that you weren't expecting, press Deny to reject the request. You’ll be given the ability to report it as fraudulent, or you can tap It was a mistake to deny the request without reporting it.


Face ID

You can approve Duo authentication requests with Face ID on your iPhone X with Duo Mobile 3.19 and later. If your Duo admin requires biometric verification when approving Duo requests you'll see the Face ID icon in the Duo Push request.

Duo Mobile Face ID Prompt

The first time you receive a Duo Push request on your iPhone X that requires biometric verification, you'll be prompted to grant Face ID permission to the Duo Mobile app. Tap OK to proceed.

Duo Mobile Face ID Permission Request

Scan your face in the same manner that you use to unlock your iPhone X to approve the Duo login request.

Duo Mobile Face ID Success

If your first try isn't successful, tap Try Face ID Again to scan your face again.

Duo Mobile Face ID Retry Scan

If you're not able approve the login request with Face ID you can tap Cancel and approve the Duo authentication request using the device's passcode.


Touch ID

Duo Mobile 3.7 and later for iOS also supports Touch ID for Duo Push-based logins as an additional layer of security to verify user identity. If you're using a Touch ID capable iOS device you'll see a Touch ID prompt each time you authenticate via Duo Mobile (if required by your administrator).

Duo Mobile TouchID Prompt

If you're not able to scan your fingerprint using the TouchID sensor you can also approve the Duo authentication request using the device's passcode by tapping Cancel.


Duo Push and Notifications

You can respond to Duo Push requests from the iOS lock screen or banner notification starting with Duo Mobile version 3.8. The actions presented to you wen you respond to the notification depend on your organization's Duo policy settings, such as whether or not you can approve the login request without PIN or biometric verification.

On Apple devices that support 3D Touch, performing a firm longpress on the Duo Mobile notification from the lock screen reveals the "Approve" or "Deny" actions. Tap an action and supply your passcode or biometric verification (face or fingerprint) to complete the action.

Duo Mobile 3D Touch Notification

On devices that do not feature 3D Touch, swipe left on the lock screen Duo Mobile notification to reveal additional actions.

Duo Mobile Lock Screen Notification

Swipe down on the Duo Mobile banner notification received when your screen is unlocked to reveal additional actions.

Duo Mobile Banner Notification

Passcodes

Tap the down indicator to get a one-time passcode for login. This works anywhere, even in places where you don't have an internet connection or can't get cell service.

If the account is a Duo native account (meaning you enrolled this device into Duo and activated the app for Duo Push), then the passcode shown is valid until used. Tap the arrows to generate a new Duo passcode.

Duo Passcode Generation in Duo Mobile

If the account is a third-party OTP account (meaning you logged into another service like Gmail and added this device as an authenticator app), then you'll see a 30 second countdown indicator on the right. If you don't use that passcode before it expires then a new passcode is generated and the countdown begins again.

Third-Party Passcode Generation in Duo Mobile

When entering the passcode from Duo Mobile don't type in the space! If you need to use the passcode from Duo Mobile in another mobile app simply tap the passcode to copy the currently shown code and paste it into the other app.

Adding Accounts to Duo Mobile

During the setup process you'll see a barcode to scan (it looks like this).

Tap "Add Account" (or the plus button in the upper right). Scan the barcode to add the account to Duo Mobile.

Duo Mobile Account Activation

Security Checkup

Duo Mobile's Security Checkup verifies device settings against Duo's recommended security settings, and lets you know if any of your device's settings don't match.

 

This iOS device has up-to-date software and all of Duo's recommended security settings configured:

Duo Mobile Security Checkup - No Issues

 

This iOS device doesn't have the latest OS update installed:

 

Duo Mobile Security Checkup - Issues Found

Tap on any detected issue to learn more about that particular setting and how you can update your device with the recommended configuration.

Tap the menu and go to Settings > Security Checkup in Duo Mobile to view your device's security status at any time.

Removing Accounts

Delete an account by tapping the Edit button in the upper left. Then tap the delete icon, tap "Delete", and confirm the deletion.

Pull to Refresh

Check for authentication requests by pulling the account list down. Duo Mobile automatically checks for authentication requests, but if you think you have missed a request, then tap the list of accounts and pull down to refresh.

Backup & Restore

Your Duo Mobile account information is backed up automatically when you enable iCloud Backup on your phone, and can be restored only on the same device. This iCloud backup can't be used as is to migrate your Duo accounts to a new phone. See Apple's guide to enabling iCloud backup for more information.

You can restore your accounts to Duo Mobile on a new iOS device via the guided recovery process. See the full Duo Restore guide here.

Print Article

Details

Article ID: 78819
Created
Tue 5/21/19 5:21 PM
Modified
Tue 12/3/19 4:33 PM

Related Articles (10)

Overview of Duo Mobile on Apple Watch
Overview of authentication using the Duo Prompt.
Overview of common issues with Duo Mobile
Overview of Duo enrollment
Overview of Duo Recovery for iOS devices.
Overview of Touch ID and Duo
Troubleshooting article for Duo Push notifications on Apple watches.
Introduction to two-factor authentication and Duo