Getting Ready for the Duo Sign-In Changes

What is changing

To protect Emerson accounts against the phishing attacks we have seen this year, we are retiring the two least secure Duo sign-in methods: phone calls and text messages.

• Monday, June 15: Phone call authentication will be removed.
• Monday, June 29: Text message (SMS) authentication will be removed.

If you currently sign in with a phone call or a text message, please switch to one of the methods below before these dates. Most people can do this themselves in a few minutes, and this guide walks you through it. If anything goes wrong, the Help Desk can set you up right away.

Choose how you will sign in

You have three strong options. You only need one, but we recommend setting up two.

• Duo Push (recommended): Approve a notification in the Duo Mobile app and enter the short verification code shown on your screen. Works on any iPhone, Android phone, or iPad over Wi-Fi or cellular data.
• Touch ID: If you use a device with a Touch ID sensor, you can approve sign-ins with your fingerprint right in Chrome. No phone required. This is an excellent option, especially for Mac users.
• Security key or passkey: A hardware security key or a passkey saved on your device. These work even with no internet connection.

Activate Duo Mobile on your existing smartphone (most common)

If your phone is currently set up only for calls or texts, you can add the Duo Mobile app to the same phone and the same number. This is the most common setup at Emerson.

Before you begin

Install the Duo Mobile app on your phone from the App Store (iPhone) or Google Play (Android) before you start.

Steps

1. On your computer, open a private or incognito browser window. In Chrome, click the three dots in the top right and choose New Incognito Window.
2. Go to gmail.emerson.edu and log in with your Emerson email and password.
3. At the Duo prompt, click Other options.
4. Click Manage devices.
5. Verify your identity with a method you still have available, such as Text message passcode or Duo Push.
6. In the Device Management portal, click Add a device, then choose Duo Mobile.
7. Enter your phone number (the same number is fine), check the box to agree, and click Continue.
8. At the Download Duo Mobile screen, click Next.
9. A QR code will appear. Open the Duo Mobile app, tap the + in the top right, and scan the code. If you cannot scan it, click Get an activation link instead to receive it by text.

Alternative: use the "I have a new phone" link

If your phone already appears under Manage devices, you can activate Duo Mobile on the same number this way:

1. On your phone's device card, click I have a new phone, then Get started.
2. Duo sends a verification code by text to confirm your number. Enter the code and click Verify.
3. At the Download Duo Mobile screen, click Next (install the app first if you have not).
4. Scan the QR code with the Duo Mobile app, or click Get an activation link instead to receive it by text.

Once Duo Mobile is activated, Duo Push becomes your default sign-in method.

Set up Touch ID on your Mac

Touch ID works on a Mac with a Touch ID sensor, using the Chrome browser. Set it up on each computer you use regularly.

1. On the Mac you want to set up, open a private or incognito Chrome window and go to gmail.emerson.edu, then log in.
2. At the Duo prompt, click Other options, then Manage devices, and verify your identity.
3. Click Add a device and choose Touch ID.
4. Follow the prompt and use your fingerprint to confirm.

Use a security key or passkey

Security keys and passkeys are the most phishing-resistant option and work with no internet connection. To add one, follow the same path: Other options > Manage devices > Add a device > Security key. For details, see Setting Up a U2F Hardware Token.

Setting up Duo for the first time

If you have never set up Duo, or your account was reset, log into gmail.emerson.edu. When you see Welcome to Duo Security, click Get started. At First, add a device, choose Touch ID, Duo Mobile, or Security key and follow the prompts. You can add more methods later.

How signing in works after you are set up

With Duo Push, a 3-digit code appears on your sign-in screen. Open the Duo Mobile app on your phone, tap the request, and enter that code to confirm it is really you. With Touch ID or a security key, you confirm right on your computer.

If you do not have a smartphone, iPad, or Touch ID Mac

We can still help. Email helpdesk@emerson.edu from your Emerson account and we will work with you on an option that fits, such as a security key.

If you sign in and have no available method

Do not worry. Email helpdesk@emerson.edu and we will activate your phone for you right away.