Add a Multi-Factor Authentication Method or Device


In This Article


Are You a New User?

You will need to enroll in Multi-factor Authentication (MFA) and set up your MFA profile.

Once you have enrolled in MFA, you can add and manage your authentication methods and devices from your MFA Profile. You can add multiple devices to your MFA profile as a backup in case your primary device is forgotten, lost, stolen, or malfunctioning. 

Top


Add a Mobile Device

To add a mobile device, you will need:

To begin, follow the steps listed below:

  1. Go to your MFA Profile on your computer.
    NOTE: If you have already enrolled in multi-factor authentication, you may need to verify your identity before continuing.
  2. Click Manage under Devices & Settings.
    Click 'Manage' under Devices and Settings
  3. Click Add a new device.
    Add a new device
  4. Select Mobile Phone or Tablet. Click Continue.
  5. Select the operating system. Click Continue.
  6. Click I have Duo Mobile Installed.
  7. An Activate Duo Mobile QR code will be displayed.
  8. Open the Duo Mobile app on the device you wish to activate. From your Duo Mobile App, tap the plus (+) icon. A Scan Barcode screen will display on your mobile device, and the camera on your mobile device will activate.
  9. Return to the Activate Duo Mobile page on your web browser. Using the camera on your mobile device, capture the QR code. Click Continue.
    Scan the code
  10. Your device should be added and ready to use.

    To learn more, check out the clip below:
    Add a Mobile Device to your Account

Top


Add a Hardware Token

To add a hardware token, you will need:

To begin, follow the steps listed below:

  1. Go to your MFA Profile on your computer.
    NOTE: If you have already enrolled in multi-factor authentication, you may need to verify your identity before continuing.
  2. Click Manage under Hardware Tokens
  3. Select Register Your Hardware Token, and enter the Token Serial Number (found on the back).
  4. Select the Token Brand, and click Register Device.
    Register Hardware Token
  5. You will receive a message indicating that the hardware token has been successfully registered. You may now use the six (6)-digit passcode generated by the token to authenticate into MFA protected systems.

Top


Add a Phone Number for Callback

To add a phone number for callback, you will need:

To begin, follow the steps listed below:

  1. Go to your MFA Profile on your computer.
    NOTE: If you have already enrolled in multi-factor authentication, you may need to verify your identity before continuing.
  2. Click Manage Devices under Settings & Devices.
  3. Click +Add another device.
    MFA Profile with the add another device button highlighted
  4. Select Landline. Click Continue.
  5. Enter your phone number. Click Continue
    Enter the phone number
  6. Click Call Me. You will receive an automated call. A six-digit code will be given during the call.
  7. Enter the six-digit code in the field and click Verify. Then, click Continue.
    Verify Ownership
  8. The Landline option will be listed and marked as Just Added.
    My Settings & Devices
  9. Click View Devices above the My Settings and Devices window.
  10. The Landline number will now be listed.
    MFA Devices and settings screen with landline highlighted

Top


Generate Bypass Codes

If you do not wish to add a mobile device or hardware token to your MFA profile, you can obtain bypass codes form one of the following resources:

Bypass codes are nine (9)-digit passcodes that you can use to authenticate into systems when a secondary device, such as a phone or hardware token, is unavailable. The codes are used by entering them into the Passcode field of the MFA prompt on your computer or mobile device.

To learn how to generate bypass codes from your MFA profile, follow the steps below:

  1. Go to your MFA profile on your computer.

  2. Select the number of bypass codes you wish to print from the Print Bypass Codes drop-down menu. You may print up to ten (10) bypass codes.  Click Generate Bypass Codes.
    Click 'Generate Bypass Codes'.
  3. The codes will be displayed in a new window. Click Print.

Keep your bypass codes in a secure place that only you have access to. Bypass codes are available for one-time use only and will expire after 180 days.

Top


Frequently Asked Questions

This article and video provides answers to common MFA questions.

Top


Get Support

Contact the Service Desk at itsupport@umd.edu or 301.405.1500 for assistance.

Top