Duo MFA: Updating Your Authentication Method
May 21, 2026
As previously announced in our October 2025 update, the "Phone Call" method for Duo multi-factor authentication has been officially retired to ensure compliance with modern security standards, provide better reliability for users, and meet current liability requirements.
If you have been affected by this change, you may have received email notifications over the past few months with instructions on adding an alternate authentication method. If you haven't made the switch yet and find yourself locked out, don't worry—getting back into your account is a straightforward process!
Step 1: Accessing Your Device Management
When you reach the Duo login screen, you may see a prompt for a phone call that no longer works, a 'bypass code,' or a push notification to an old device. To fix this:
-
Click "Other Options."
-
Select "Manage Devices" from the list.
-
You will be asked to authenticate before you can add a device. If you do not have a working authentication option, you will need a bypass code or a reactivation link (see Step 2).
Step 2: How to Get a Bypass Code or Activation Link
If you are locked out because your old MFA method is gone, you have a few ways to get back in:
-
Self-Service Bypass Code: Go to and select the "Forgot Password" option. This process allows you to verify your identity without MFA. Once in, navigate to the "Security Settings" tab and select "Generate One-Day Passcode."
-
Contact Support: Your campus IT Helpdesk can help you activate Duo mobile! Depending on your previous authentication methods, we may be able to simply send an activation code via text or email, or we may generate a 24-hour bypass code for you to complete the device management process on your own. In either case, please don't hesitate to reach out!
Step 3: Choosing a New Authentication Method
Once you have authenticated into "Manage Devices," we recommend setting up one of the following:
| Method | Best For... | Important Notes |
| Duo Mobile Push | Most Users | Fast, secure, and works via the Duo app on your smartphone. |
| Security Keys | Highest Security | Physical USB-A or USB-C keys. NookTech provides these for free to UAF students (available for pickup or mail-out), other campus IT helpdesks may also offer security keys or hardware tokens. |
| Passkeys | Convenience | Uses your device's biometrics (TouchID/FaceID). Note: These are device-specific; please research if your device supports this before enabling. |
Step 4: Verify Your New Method
Once you have added your new device, it is important to test it to ensure you aren't caught off-guard later!
-
Open a new private browser window or log out of your current session.
-
Go to a UA site like and attempt to log in.
-
Verify that your new Push, Security Key, or Passkey works as expected.
Note on Passcodes: At the end of the mobile app setup, you may see a 6-digit HOTP passcode generated in the app. You generally do not need this for daily logins; it is primarily a backup for times when your phone does not have an internet connection to receive a Push notification.
Need Help?
If you run into trouble or need a security key mailed to you, please reach out!
|
UAF NTS Service Desk |
Email: uaa.techsupport@alaska.edu Phone: (907) 786-4646 Toll-Free: (877) 633-3888 Monday - Friday 7 a.m. - 6 p.m Saturday Closed Sunday 10 a.m. - 2 p.m |
Email: uas.helpdesk@alaska.edu Phone: 907-796-6400 Monday - Friday: 8:00 am - 5:00 pm Saturday - Sunday: Closed |
Pro Tip: Don't wait for a deadline! Setting up the Duo Mobile app or another authentication option today is the easiest way to ensure you always have access to your University account and services.