Platform authenticators are passkeys stored on your device used for logins from that same device. It is recommended that you set up additional authentication methods for when you are not on the device with the registered platform authenticator.
Supported platform authenticators include:
Touch ID on Mac
In order to use Touch ID with Duo, make sure you have the following:
Touch your Mac's Touch ID sensor when prompted to log in to the application. If you aren't able to access the Touch ID sensor (such as when you close and dock your laptop), then you can choose to type in your Mac login password instead to verify.
Log in to the Duo Self-Service Portal with your MyID and password. If you have an existing method, authenticate with Duo, then select Add a device.
In the Add a device options, select Touch ID.
Click Continue.
You will be prompted by your Mac to scan your fingerprint.
Once you have finished scanning, you have completed adding Touch ID as an authentication.
Face ID or Touch ID on an iPhone or iPad
In order to use Face ID or Touch ID on an iPhone or iPad with Duo, make sure you have the following:
- An iPhone or iPad that supports Face ID or Touch ID.
- Face ID or Touch ID already set up on the iPhone or iPad. Learn how to set up Face ID or set up Touch ID at the Apple Support site.
- iCloud Keychain sync enabled on all the Apple devices you will use with Duo and the passkey you will create during setup.
Log in to the Duo Self-Service Portal with your MyID and password. If you have an existing method, authenticate with Duo, then select Add a device.
Select Face ID / Touch ID from the Add a device list.
Tap Continue for the Set up Face ID / Touch ID screen.
Tap Add Passkey to prompt the Face ID or Touch ID scan.
Scan your face or fingerprint.
You will receive a confirmation screen that Face ID / Touch ID has been added.
Windows Hello
In order to use Windows Hello with Duo, make sure you have the following:
- A device running Windows 10 or later.
- Windows Hello set up on the device for signing in with a PIN, fingerprint, or facial recognition. Learn how to set up Windows Hello at the Microsoft support site.
- A supported browser: Chrome, Edge, or Firefox. Refer to the browser support table. Note that Chrome Incognito and Edge InPrivate browsing won't work with Windows Hello, but will work with Security Keys.
Log in to the Duo Self-Service Portal with your MyID and password. If you have an existing method, authenticate with Duo, then select Add a device.
Select Windows Hello from the Add a device menu.
Click Continue.
You will be prompted by Windows to save a passkey to your device. Click Continue.
You will then be prompted to scan your fingerprint or face or to enter your PIN.
Once you have finished entering your PIN or biometric scan, you have completed adding Windows as an authentication.
Android Biometrics
In order to use Android Biometrics with Duo, make sure you have the following:
Log in to the Duo Self-Service Portal with your MyID and password. If you have an existing method, authenticate with Duo, then select Add a device.
Select Device verification from the Add a device list.
Tap Continue for the Set up device verification screen.
Follow your device instructions for verification with face or fingerprint scan.
You will receive confirmation that the device was added.
