Using biometric verification with Duo Universal Prompt

Warning! Due to the restrictive nature of the biometric verification methods, you should always have at least one other verification method registered, such as a token or the Duo Mobile app. Please see our Registration Guides for more information on registering additional devices. 

Overview

Learn how to enable your device's biometric verification methods for Duo.

The following methods are compatible (select the method that applies to you):

Please Note: Please consult our other documentation for YubiKey and other HOTP options.

Limitation of Biometric Methods

Biometric verification only works for logging in to services on the device with the biometric feature.

For example, enabling Face ID on your iPhone wouldn't allow access to a Duo-protected service on a MacBook Pro laptop. Instead, you would need to use the Touch ID capability on your MacBook Pro or one of the other verification methods (Verified Push, passcode from the Duo Mobile app or token, etc.).

Touch ID and Face ID

Touch ID

In order to use Touch ID with Duo, make sure you have the following:

  • A MacBook Pro, MacBook Air, or Magic Keyboard with a Touch ID button.
  • A fingerprint enrolled in Touch ID (see how to do this at the Apple Support site).
  • A supported browser: Safari or Chrome.
  • iCloud Keychain sync enabled on all the Apple devices you will use with Duo and the passkey you will create during setup.

Touch your Mac's Touch ID sensor when prompted to log in to the application. If you aren't able to access the Touch ID sensor (such as when you close and dock your laptop), then you can choose to type in your Mac login password instead to verify.

If you need to cancel a Touch ID authentication in progress, click or tap the cancel option shown by your browser, outside of the Duo Universal Prompt.

Touch ID or Face ID on an iPhone or iPad

In order to use Touch ID or Face ID on an iPhone or iPad with Duo, make sure you have the following:

  • An iPhone or iPad that supports Touch ID or Face ID.
  • Face ID or Touch ID already set up on the iPhone or iPad. Learn how to set up Touch ID or set up Face ID at the Apple Support site.
  • iCloud Keychain sync enabled on all the Apple devices you will use with Duo and the passkey you will create during setup.

Depending on the option your device supports, you'll either scan your face to use Face ID while logging in, or you'll scan your fingerprint instead to use Touch ID.

Windows Hello

Note: Windows Hello can only be enabled on personal computers and devices. It is not supported on computers managed by Information Services.

In order to use Windows Hello with Duo, make sure you have the following:

  • A device running Windows 10 or later.
  • Windows Hello set up on the device for signing in with a PIN, fingerprint, or facial recognition. Learn how to set up Windows Hello at the Microsoft support site.
  • A supported browser: Chrome, Edge, or Firefox.
    • Chrome Incognito and Edge InPrivate browsing won't work with Windows Hello, but will work with Security Keys.

Follow your device's prompt to enter your Windows Hello PIN, scan your fingerprint, or use facial recognition to log into Duo.

Android Biometrics

In order to use Android Biometrics with Duo, make sure you have the following:

Follow your device's prompt to scan your fingerprint or use facial recognition to log into Duo.

Request Help Print Article

Related Articles (1)

Answers to frequently asked questions about Duo Universal Prompt, the new interface for Duo two-step login.

Related Services / Offerings (1)

This form is designed for use by individuals who can't visit the Technology Service Desk in person. If you need help with a role/department account, follow alternate instructions at https://service.uoregon.edu/TDClient/2030/Portal/KB/ArticleDet?ID=140500