Duo Universal Prompt

The Duo Universal Prompt: A New Look for Multi-Factor Authentication

 

On Aug 14, 2023, UMBC changed the look and feel of the Duo prompt used for Multi-Factor Authentication. These changes made authentications more secure, streamlined, and accessible.

In this article:

What Is Changed?

Comparing the Traditional and the Universal Prompt

 

 

What Is Changed?

With the new Duo Universal Prompt, you see a new, streamlined authentication experience.

Traditional Prompt

Universal Prompt

Traditional Prompt

Universal Prompt

What to Expect

The first time you use Duo to authenticate, Duo will choose the most secure method from the devices you've previously added.

You can use that method, or choose a different method through the new prompt's Other options link.

After that first authentication with the new prompt, Duo will by default use the method you used most recently—though you can always click the Other options link and choose a different method from those you have set up. (For more about setting up devices to use with Duo, visit How do I manage my devices in Duo?)

 

Comparing the Traditional and the Universal Prompt

While the prompt styles differ in appearance, the Universal Prompt offers the same features as the Traditional Prompt, though organized differently. 

To Use Other Authentication Methods

Instead of the Traditional Prompt's device dropdown menu and green buttons, the new prompt's cleaner design shows your current prompt request.

To use a different method, at the new Universal prompt, click Other options to see the full list of authentication methods available to you.

Traditional prompt - selecting a different method

vs. Universal prompt

Traditional prompt - selecting a different method

vs. Universal prompt

For more about setting up devices to use with Duo, visit How do I manage my devices in Duo?

Reduce the Number of Times You Need to Authenticate

Instead of checking the Traditional Prompt's Remember me for 30 days box, the Universal Prompt will ask if you would like it to Trust this browser after you authenticate. If you click the Yes, this is my device button, you will not need to authenticate with Duo when you log in with this browser for the next 30 days, unless your browser cache has been cleared.

After you have used the Yes, this is my device option for the first time with a particular browser and device, a Trust browser checkbox will appear directly in the prompt itself.

 

 

 

Never use the "Yes, this is my device" option when signing in using a public computer or a device that does not belong to you.

Never use the "Yes, this is my device" option when signing in using a public computer or a device that does not belong to you.

 

Use Your Existing Duo Mobile App

If you already use the Duo Mobile App(link is external) version 4.0+ on your smartphone, the Duo Universal Prompt will not require you to change it or upgrade.

The Duo Prompt Has a New Web Address

The Universal Prompt will appear on Duo’s website, duosecurity.com, rather than a UMBC website, as the Traditional Prompt did. 

This difference does not change the safety of using the Duo authentication prompt—Duo’s site is as secure as the Duo Traditional Prompt's UMBC-based page.

 

As always, be diligent about security. If you are ever prompted to authenticate by a website that is not located on the duosecurity.com/ or umbc.edu/ domains, or if you receive any Duo prompt or notification you did not initiate yourself, contact the DoIT Security Office(link sends e-mail) immediately. 

As always, be diligent about security. If you are ever prompted to authenticate by a website that is not located on the duosecurity.com/ or umbc.edu/ domains, or if you receive any Duo prompt or notification you did not initiate yourself, contact the DoIT Security Office(link sends e-mail) immediately. 

 

Learn More

For full details about Duo's Universal Prompt, visit the vendor webpage, Duo Universal Prompt(link is external).