FAQs

Multi-factor authentication strengthens access security by requiring at least two methods to verify your identity. These methods can include something you know - like a username and password, plus something you have - like a smartphone app to approve authentication requests.

Multi-factor authentication helps fight against phishing, social engineering and password brute-force attacks and helps to secure your logins from attackers exploiting weak or stolen credentials.

In 2020, UF mandated the use of multi-factor authentication for anyone accessing university-wide systems.

Multi-factor authentication increases account security by augmenting the thing you “know” (your username and password) with a multi-factor authentication platform. UF's vendor is Duo. This allows you to use a mobile phone app and more to protect your personal data and institutional systems.

All Faculty, Staff, Students, and Affiliates must enroll in Multi-Factor Authentication to access University resources. 

UF Affiliations expected/eligible to use Multi-Factor Authentication (GatorLink accounts only):

F’ FACULTY
192 Faculty	221 Consultant Faculty
‘T’ STAFF
193 USPS	195 TEAMS
220 Consultant Staff
‘E’  EMPLOYEE
194 OPS	197 Courtesy Faculty
200 Emeritus	204 Board of Trustee
205 UF Executive	209 SHANDS
213 DSO	217 Athletic Association
218 Foundation Employee	219 Clinical Faculty
236 Recent Employee
‘S’ STUDENT
191 Student	263 UF Online Student
216 Non-Reg Student	261 Non-Reg UF Online Student
224 Newly Admitted Applicant	260 Newly Admitted UF Online Applicant
253 Innovation Academy Student
‘M’ MEMBER
203 Departmental Associate	283 Retired Faculty

Once you are enrolled in Multi-Factor, you will receive a push to your first push device if you simply enter your password.  If you do not have a push-capable device a telephone call will be made to your first-listed phone number asking you to confirm the login.

If you need to specify an alternate method you may also use a passcode, or specify a different push device or phone number by using append-mode on your password.

How to use append mode:

Enter your password and the authentication method you want to use, separated with a comma. It will look something like this:

In place of authentication_method:

Type...	To...
password,passcode	Log in using a passcode, either generated with Duo Mobile, generated by your hardware token, or provided by an administrator. Examples: "mypass123,123456" or "mypass123,1456789"
password,push	Push a login request to your phone (if you have Duo Mobile installed and activated on your iOS, Android, or Windows Phone device). Just review the request and tap "Approve" to log in.
password,phone	Authenticate via phone callback.

You can also add a number to the end of these factor names if you have more than one device registered. For example, push2 will send a login request to your second phone, phone3 will call your third phone, etc.

You can find detailed dates of the roll-out here: https://it.ufl.edu/get-connected/multi-factor-authentication/upcoming-changes/

You can use Touch ID, please visit https://guide.duo.com/touch-id for further information on Touch ID requirements. 

Duo will select the most secure method a user has registered by default; however, during login you can select any other registered device/method. Check https://guide.duo.com/universal-prompt#login-with-the-duo-universal-prompt for the most up-to-date options. Remember that SMS is not enabled as a feature for UF.

A YubiKey is a small, physical security key made by Yubico that provides strong two-factor authentication (2FA) for logging into accounts and systems. Instead of relying solely on passwords or mobile apps, a YubiKey verifies your identity by being physically present — you plug it into a USB port or tap it using NFC (on compatible devices) to confirm your login. Because it uses secure cryptographic protocols (like FIDO2 and WebAuthn), it helps prevent phishing, password theft, and unauthorized access. Many organizations, including UF, support YubiKeys as a secure alternative or backup method for Duo-protected logins.

Click on "My Multi-Factor" link at https://it.ufl.edu/get-connected/multi-factor-authentication/ to manage your devices.

To enroll in Multi-Factor Authentication use My Multi-Factor self-service.

It is highly recommended so you may utilize the Duo Push authentication. You may use a security key or a desk phone in addition to the Duo Mobile App. 

Yes!  It is strongly recommended you define more than one Multi-Factor device in case you don't have your favorite device with you. Consider enrolling a security token (YubiKey) or a tablet.  You may define multiple devices.  Do not enroll another person's device or any shared devices. You should secure and protect your Multi-Factor devices as you would your computer, tablet or other personal or University owned equipment in your care.  Never leave them where someone else could gain access to them without your knowledge.

The app (DUO mobile) can be downloaded from the Google Play Store or the Apple Store for Android / iOS devices. If you have any questions, please call the help desk at (352) 392-HELP (4357) or helpdesk@ufl.edu.

Telephone calls sent to your phone do cost the University money and while it may only be a few cents, it all adds up. A Duo "push" to the Duo Mobile app on a smartphone uses a very small amount of data (less than 2,000 bytes).  If you authenticated 16 times per day resulting in about 500 authentications per month you would use about 1 MB of data.  The average data plan is about 1000 times greater than 1 month of Two-Factor push authentications.

 

Wireless Carrier/Network charges may apply for voice and data on your mobile phone.

You can visit My Multi-Factor and remove the lost token or phone from your account if you have a second registered device. You may also add new devices. If not, then you can contact a Help Desk via phone or in-person for possible assistance.  Identity verification will be required.  Management of devices is an individual's responsibility.  See FAQ item for Backup of the Duo Mobile app.

Apple iOS devices

1. Make sure you are running the latest version of the Duo Mobile App on your current iOS device.
2. Back up your device to iCloud. Nightly iCloud backups will include Duo Restore information. Encrypted iTunes backups will also work. Note: Duo only stores non-sensitive account information on iCloud.

Android Devices

1. Make sure you are running the latest version of the Duo Mobile App on your current Android device.
2. Open the Duo Mobile App.
3. Tap the overflow menu in the top right corner of the main accounts list.
4. Tap Settings.
5. Tap Duo Restore.
6. Turn on Duo Restore.
7. You will then be prompted to select a Google account to store your backup on. Note: Duo only stores non-sensitive account information on Google drive.

Please have a look at this guide about using Duo abroad: Duo Travel Guide

If you are seeing the message “Access denied. Duo Security does not provide services in your current location” in the Duo Prompt, your country may be under restrictions to access DUO. In order to find an up-to-date list and more information, please visit:  DUO OFAC-regulated country list

Please verify that your device is connected to the internet. Your device will need to have a connection to a wireless or cellular network to receive push notifications.  On UF Campus you are strongly encouraged to enable Wi-Fi by visiting https://getonline.ufl.edu using the browser on your smartphone.

If this is a new device with the same phone number, you will need to reactivate your device.

If you still are not receiving Duo Pushes you can contact a Help Desk or your local technical support for further assistance. 

You need to re-activate Duo Mobile using My Multi-Factor.  You should also turn on the Duo Restore feature for the future.  See the FAQ item named "How do I Enable Backups of the Duo Mobile app?"

Duo mobile app support is available for iPhone and Android. Please see the documentation for each type of device:

1. For iPhone: https://guide.duo.com/iphone
2. For Android: https://guide.duo.com/android 

 

If you need any assistance or have any questions about Multi-Factor Authentication please contact us.