Account Security

Multi-Factor Authentication

All UT Austin systems require multi-factor authentication (MFA) via Duo. MFA adds a second layer of verification to your UT EID login — protecting your account even if your password is compromised. Every student, faculty member, and staff member must enroll before accessing university services.

At a Glance
Required ForAll UT systems
ProviderDuo Security
AudienceStudents, Faculty, Staff
CostFree to enroll

Ways to verify with Duo

Duo supports several verification methods. Enroll more than one so you always have a backup — especially before traveling or replacing a device.

📱
Duo Push Notification
The Duo Mobile app sends a verified push to your iPhone or Android phone. Tap to approve. Works over Wi-Fi or cellular — the most common and recommended method.
Recommended
Wearables
If you have an Apple Watch or other paired wearable synced with the Duo Mobile app, you can approve push notifications directly from your wrist.
Recommended
👆
Apple Touch ID
MacBook Pro and MacBook Air users can authenticate using Touch ID through the Duo Universal Prompt — no phone required when working on a supported Mac.
Recommended
☎️
Phone Call
Duo calls a registered landline or cell phone. Press any key to authenticate. Useful in areas with poor data coverage or when a smartphone isn't available.
🔑
Hardware Token
A physical device that generates one-time passcodes. Yubikeys and Google Titan keys are compatible. Yubikeys are available at a discount from the Campus Computer Store. Duo-branded tokens are available from the ITS Service Desk in Flawn Academic Center.
Available at Campus Store

What to enroll based on how you work

The Information Security Office recommends enrolling at least two methods so you always have a backup. Here's what works best by role.

👩‍🏫 Faculty

  • Smartphone as primary (Duo Push)
  • Duo-branded hardware token as backup — available from the ITS Service Desk at Flawn Academic Center
  • Touch ID if you work primarily on a MacBook
  • Review International Travel Guidelines before overseas trips

🧑‍💼 Staff

  • Smartphone as primary (Duo Push)
  • Office landline as backup for areas with limited cell coverage
  • Hardware token if your work area restricts personal devices
  • Carry your enrolled device when traveling for university business

🎓 Students

  • Smartphone is the recommended and most practical method
  • Enroll a backup method in case your phone is unavailable
  • Transfer the Duo Mobile app when switching devices using account recovery
  • Contact the UT Service Desk if you lose access to your enrolled device

How to enroll in Duo MFA

1. Go to the Device Registration page Visit duo.utexas.edu and sign in with your UT EID. This is the self-service portal where you enroll and manage all Duo devices. New users are prompted to enroll automatically when first accessing a UT system.
2. Add your primary device Select "Add a device" and follow the prompts for your chosen method — smartphone (Duo Mobile app), landline, or hardware token. Download the free Duo Mobile app from the App Store or Google Play before starting if using a smartphone.
3. Enroll a backup method Add a second device or method under "My Settings & Devices." A backup is essential if your primary device is unavailable, lost, or being replaced. Hardware tokens are available from the ITS Service Desk at Flawn Academic Center.
4. Test your authentication Log out and sign back into a UT service to confirm your Duo setup is working. If you encounter any issues, visit the MFA Knowledge Base or contact the UT Service Desk.

Stay protected

⚠️
Watch for "vishing" and MFA fatigue attacks
Be very suspicious of unexpected Duo push notifications — especially if you did not initiate a login. Attackers may call or message you pretending to be IT staff and ask you to approve a push. Never approve a Duo request you did not trigger yourself. If you receive an unexpected push, deny it and report it immediately to security@utexas.edu.

Traveling internationally?

Review the UT International Travel Guidelines before departure. Ensure you have an authentication method that works without a US phone plan — hardware tokens work without Wi-Fi or cellular, and Duo Push works over any internet connection.

Replacing or upgrading your device?

Transfer the Duo Mobile app to your new device before wiping your old one using Duo's built-in account recovery. If you lose access to all enrolled devices, contact the UT Service Desk for assistance restoring access to your account.

Registering a device that isn't a smartphone?

Landlines, tablets, and hardware tokens can all be enrolled in Duo. Visit the Device Registration page at duo.utexas.edu, select "Add a device," and choose the appropriate device type from the options presented.

Using strong, unique passwords?

MFA protects your account even if your password is compromised — but a strong, unique password is still your first line of defense. UT provides 1Password free to all students, faculty, and staff to generate and store strong passwords for every account.

Need help with MFA?

Most enrollment and device management questions are covered in the MFA Knowledge Base. For account lockouts, lost devices, or issues not covered in self-service, contact the UT Service Desk. For security incidents — including unexpected Duo push notifications — contact the Information Security Office directly.