1. Home
  2. Security
  3. Duo Multi-Factor Authentication (MFA) [Draft]
  4. Duo Multi-Factor Authentication (MFA) [Draft]
  5. Passkey first time enrollment (Alternative)

Passkey first time enrollment (Alternative)

Passkeys are a strong, cryptographic-key-based MFA. A private key is held by your device or password manager and used during login to replace traditional methods. Passkeys are generally supported by Duo and can be used if you prefer them over the recommended Verified Push. Because there are many passkey technologies, Emory officially supports only the ones we directly use; you are welcome to use whatever passkey methods your technology allows, but support may vary.

1. Mobile passkey (Chrome, Edge, iOS, or Google Password Manager)


The steps below are the same across these technologies - only the screen where you choose where to save the passkey differs. Duo treats a roaming passkey as a Security key. You will need a computer with a browser, an existing Duo method (such as Duo Mobile), and a mobile device with a camera and a password manager (Google Password Manager or iOS Passwords).

On your computer

    1. Sign in to a Duo-protected application (or the Duo Self-Service Portal) with your Emory Network ID and password.

    2. At Welcome to Duo Security, select Get started.

    3. Choose Security key (Duo treats roaming passkeys as security keys).

      1

    4. In the browser's security-key prompt, click Save another way (you are not using a physical key).

      7

    5. Choose Use a phone or tablet as the passkey location. (This is the step that differs by technology - pick your password manager or device here.)

      8

    6. Scan the on-screen QR code with your mobile device's camera, then tap Sign in with a passkey.

      9

    7. Follow the prompts on your mobile device to create and save the passkey.

      10

    8. The passkey now appears as a registered device (for example, Google Password Manager). You can use it to verify your identity at login.

      11

2. Touch ID

  1. From the list of device options, select Touch ID (Recommended)
    2
  2. Select Continue.
    2
  3. When prompted by your browser, allow it to use Touch ID.
  4. Select Continue with Touch ID.
  5. Place your finger on the Touch ID sensor to complete the confirmation.
    3
  6. Select Continue.
    4
  7. You can now use Touch ID to verify your identity with Duo on this Mac.