Plan Ahead
Duo Two-Factor Authentication (2FA) offers multiple options to meet your needs when traveling. You may be able to use your regular option if you need to sign in to a protected system while traveling, or you may need to use alternative options depending on your travel plans.
Plan options. Before your trip, plan which Duo 2FA options you will use and enroll in them if needed.
Enroll additional devices. If possible, enroll two devices in case your primary device is unavailable (lost, stolen, not available, dead battery, or malfunctioning).
Consider Using a Hardware Security Key
Hardware security keys such as Yubikey, Google Titan Security Keys, or Feitian security keys are state-of-the-art authentication tools which provide strong security guarantees without requiring mobile network access.
These small tokens can be inserted into a computer, or even tapped on a cellular device to be used to complete the Duo login challenge.
Consider Using Passcodes
If you won't have a reliable cellular or Wi-Fi connection, or even access to a phone while traveling, plan to use passcodes. There are three different ways to get an offline passcode:
Duo Mobile app. Use the Duo Mobile app to generate passcodes on a smartphone or tablet. The app can generate passcodes even when you do not have a cellular or Wi-Fi connection.
Hardware token. You can use a Duo hardware token to generate a passcode. Hardware tokens are available at the OIT Help Desk.
Text message. You will still need a cell phone connection, but a text message will often get through even when you have spotty data coverage. You will receive multiple passcodes in a single text message.
Add a Device For Traveling
If you purchase a phone for use abroad or take a loaner, you can enroll that device in Duo and use it for two-factor authentication when traveling.
Enroll the device ahead of time. To enroll a new device, you'll need to authenticate using whatever Duo option you already have enrolled, so it's best to do that before your trip.
Use what works. If you plan to travel with a basic, non-smart phone, you can authenticate using a phone call or passcodes sent by text message. Another alternative is that you can install the Duo Mobile app on a tablet without a phone number.