Traveling with Duo Two-Factor Authentication (2FA)

Owned by Max Parmer
Oct 04, 2024
2 min read

Plan Ahead

Duo Two-Factor Authentication (2FA) offers multiple options to meet your needs when traveling. You may be able to use your regular option if you need to sign in to a protected system while traveling, or you may need to use alternative options depending on your travel plans.

  • Plan options. Before your trip, plan which Duo 2FA options you will use and enroll in them if needed. 

  • Enroll additional devices. If possible, enroll two devices in case your primary device is unavailable (lost, stolen, not available, dead battery, or malfunctioning).

Consider Using a Hardware Security Key

Hardware security keys such as Yubikey, Google Titan Security Keys, or Feitian security keys are state-of-the-art authentication tools which provide strong security guarantees without requiring mobile network access.

These small tokens can be inserted into a computer, or even tapped on a cellular device to be used to complete the Duo login challenge.

Consider Using Passcodes

If you won't have a reliable cellular or Wi-Fi connection, or even access to a phone while traveling, plan to use passcodes. There are three different ways to get an offline passcode:

  • Duo Mobile app. Use the Duo Mobile app to generate passcodes on a smartphone or tablet. The app can generate passcodes even when you do not have a cellular or Wi-Fi connection. 

  • Hardware token. You can use a Duo hardware token to generate a passcode. Hardware tokens are available at the OIT Help Desk.

  • Text message. You will still need a cell phone connection, but a text message will often get through even when you have spotty data coverage. You will receive multiple passcodes in a single text message. 

Add a Device For Traveling

If you purchase a phone for use abroad or take a loaner, you can enroll that device in Duo and use it for two-factor authentication when traveling.

  • Enroll the device ahead of time. To enroll a new device, you'll need to authenticate using whatever Duo option you already have enrolled, so it's best to do that before your trip.

  • Use what works. If you plan to travel with a basic, non-smart phone, you can authenticate using a phone call or passcodes sent by text message. Another alternative is that you can install the Duo Mobile app on a tablet without a phone number.