Overview
The Duo 2FA solution offers a number of convenient and easy-to-use features and options to suit the range of uses and needs of the entire York community. The following is a summary of the available methods.
Duo Mobile App - "Push" Authentication
This is the preferred method as it is both highly secure as well as being most convenient for those with a smartphone. Once set up, validating your logins is a simple one-touch action. To use it, install the Duo Mobile app from the Apple or Google app store. It is available at no charge for Android 8.0+ and iOS 12.0+. (If you do not see the app, your device may not meet minimum system requirements) Requires an active data or cellular data connection to work.
Duo Mobile App - "Passcode" Authentication
This uses the same app as the "push" method, but instead of the one-touch validation, you make use of the passcode provided by the app. The advantage of this method is that it will work even without an active data or cellular connection.
Duo Hardware Token
A Duo hardware token is small fob that generates passcodes for Duo access. This works similarly to the Duo Mobile passcode option above, but without the need for a smartphone; although you do need to keep your token handy, usually on your keychain. It is available via the York Bookstore. For staff and faculty, please note the coupon code provided on the Bookstore page to obtain one at no charge. Students who require assistance getting a 2FA token can email duomfa@yorku.ca for a special discount code.
Note: Token shipping and delivery may take 2-4 weeks, and your 2FA activation period will be extended to ensure you are not required to set up 2FA prior to having the token.
Passcode via Text Message
If the Duo Mobile app is not compatible with your phone and the hardware token is not suitable, you can enable passcodes via text message. When validating, you will receive a passcode that you can use; this requires cellular service availability. Email request to askit@yorku.ca and provide your Yorku.ca email address, employee or student number and phone number.
Validation by Phone Call/Landline
If you do not have or do not wish to use a smartphone or cellphone, and a hardware token is not suitable, you can enable phone call validation. When validating, you will receive a call to the registered phone number you provide, and you will need to confirm using phone keypad. This method will work with any cellphone or landline phone. Email request to askit@yorku.ca and provide your Yorku.ca email address, employee or student number and phone number.
Second-factor criteria comparison & Assurance levels
| 2FA authentication method | Assurance level | Self-serve 2FA Setup? | Phone number required? | Cellular network connection required? | Wi-Fi connection required? |
| Duo Mobile App | High | Yes | No | No | No (Only for 2FA Setup) |
| Duo Hardware token | Moderate-High | No | No | No | No |
| Text Message | Low | Yes | Yes | Yes | No |
| Phone Call/Landline | Low | Yes | Yes | Yes (or landline) | No |
Back to FAQ page
