Duo Security
Duo Multi-Factor Authentication adds an extra layer of protection to your BU account by requiring you to verify your identity when signing in to protected University services.
MULTI-FACTOR AUTHENTICATION
More Than Just a Password
Passwords can be stolen, guessed, or exposed. Duo adds a second verification step so that knowing your BU password alone is not enough to access a protected account.
Duo does not see your BU password. The second authentication factor is separate from your username and password.
GET STARTED
Set Up Duo on Your Device
The first time you access a BU service that requires multi-factor authentication, you may be prompted to set up a device for Duo. Duo Mobile is available for supported iOS and Android phones and tablets.
01
Install Duo Mobile
Download the Duo Mobile app on your smartphone or tablet.
02
Start Enrollment
Sign in to a BU service that requires Duo and follow the enrollment prompts to add your device.
03
Link Your Device
Follow the on-screen instructions to connect Duo Mobile to your BU account. Enrollment may include scanning the QR code displayed during your authentication session.
04
Verify Your Login
Once enrolled, use Duo when prompted to confirm that it’s really you signing in.
SMARTER MFA
Make Duo Work Better for You
Duo is easiest when your authentication methods are set up before you need them. A few small choices can make sign-ins faster and give you a backup when your primary device isn’t available.
Don’t Rely on One Device
If your primary phone is lost, replaced, or unavailable, having another approved authentication method can prevent you from being locked out of protected BU services.
Duo Can Work Without Internet
Duo Mobile can generate a passcode even when your phone has no cellular service or Wi-Fi. This is especially useful while traveling or when you’re somewhere with unreliable connectivity.
Replacing your phone? Restoring Duo Mobile from a phone backup does not necessarily restore its connection to your BU account. Your new device may need to be reactivated before Duo Push works again.
DEVICE CHANGES
New, Lost, or Unavailable Phone?
Your Duo account is linked to registered authentication devices. What you should do depends on whether you’ve replaced, lost, or temporarily don’t have access to your device.
Got a New Phone?
Duo Mobile may need to be activated again on a replacement phone, even if your apps were restored from a backup. Use Duo’s device-management options to update or reactivate your registered device.
Forgot Your Phone?
Contact the BU IT Help Center if you cannot access your registered authentication device. After verifying your identity, they can help you regain temporary access.
Lost Your Phone?
Contact the BU IT Help Center immediately so your Duo account can be secured against unauthorized authentication attempts.
WHEN YOU’LL SEE DUO
What to Expect When Signing In
Duo is part of the sign-in process for protected BU services. How often you’re prompted can vary depending on the service, browser, device, and whether a previous authentication can be remembered.
Duo comes after your BU credentials. You’ll normally sign in with your BU Login first and then complete Duo verification when the service requires multi-factor authentication.
Duo prompts can vary. Some BU services and sign-in sessions may allow your authentication to be remembered for a period of time. Changing browsers or devices, using private browsing, or clearing browser cookies can cause Duo to prompt you again.
Seeing a Duo prompt again does not necessarily mean there is a problem with your account. If authentication repeatedly fails or Duo behaves unexpectedly, use the troubleshooting guidance below.
TROUBLESHOOTING
Common Duo Problems
Duo is part of the sign-in process for protected BU services. How often you’re prompted can vary depending on the service, browser, device, and whether a previous authentication can be remembered.
No Push Notification
Open Duo Mobile directly and check your connectivity. You may also be able to generate a passcode from the app.
Blank Duo Screen
Duo requires JavaScript. On Apple devices, browser content restrictions, device-management settings, or blocked scripts can prevent the Duo prompt from appearing.
Asked Again Too Soon
Remembered-device functionality relies on a persistent browser cookie. Clearing your browser cookies can cause Duo to request authentication again.
New Phone Isn't Working
Restoring Duo Mobile from a phone backup does not necessarily restore its association with your BU account. The new device may need to be reactivated.
COMMON QUESTIONS
Quick Answers
Do I have to use Duo?
Yes. BU requires multi-factor authentication for protected University online resources.
Can I authenticate by text message or phone call?
No. BU discontinued SMS and phone-call authentication for Duo on February 4, 2025. Duo Push is now the primary authentication method, with options such as hardware security keys available when appropriate.
Does Duo work without Wi-Fi or cellular service?
Yes. Duo Mobile can generate a passcode without an internet or cellular connection.
Why am I suddenly being asked for Duo again?
Some remembered-device functionality relies on browser cookies. Clearing cookies or using another browser or device can cause Duo to request verification again.
Having Trouble with Duo?
If you can't enroll a device, have lost access to your registered device, or are unable to complete Duo authentication, contact the BU IT Help Center for assistance.
Get IT Support
questromhelp@bu.edu
Visit The Helpdesk
617-353-9858
Mon – Thurs: 8am – 6pm
Friday: 8am – 5pm