Skip to main content

The following login options are enabled for use at Penn. Only login options a user has previously enrolled will appear in the user’s “Other Options” menu within the Duo Mobile app. To add, rename, or delete devices after moving to Duo Universal Prompt, use the Duo Device Management Portal.

Note:Beginning February 23, 2027, Penn will retire SMS and phone callback in favor of more secure Two-Step Verification methods. If you currently use SMS or phone callback as your primary form of two-step verification, please visit the Duo Device Management Portal and register an alternative method, such as the Duo Mobile app or a security key. If you don't have access to any alternative methods of Two-Step Verification, please contact your local IT support provider to discuss your options.

Login OptionUsed ForNotes
Duo Push
Send to phone_push (iOS)
  • Smartphone
  • Tablet
  • Pushes a login request via the Duo Mobile app
  • User clicks to approve
  • Must acknowledge a push as it occurs before requesting another push
  • Duo documentation on using Duo Push
Duo Mobile passcode
Enter a code from the Duo Mobile app
  • Smartphone
  • Tablet
  • Generates six-digit passcode via the Duo Mobile app
  • Do not have to be online (no phone or internet service needed)
  • Duo documentation on using a Duo Mobile passcode
Security key
Use a hardware security key
  • YubiKey
  • Feitian
  • User purchases own security key (e.g., YubiKey at Amazon, Yubico website)
  • Self-registration
  • Plugs into USB port on device and has button to click when prompted; some security key models also support Near-Field Communication (NFC)
  • Can be used for Penn or non-Penn MFA
  • Good backup option when traveling
  • Duo documentation on adding a security key or using a security key
Hardware token
Enter a code from your hardware token
  • Duo fob
  • SafeID fob (only previously registered)
  • Penn will provide (Tech Center in Library)
  • Support provider registration
  • Generates passcode
  • Only works with PennKey MFA 
Touch ID
Use Touch ID on this device
  • MacBook Pro
  • MacBook Air
  • Magic Keyboard with a Touch ID button  
  • Supported browsers: Safari or Chrome
  • Fingerprint and Touch ID must first be configured on Mac device before using with Duo (see Apple Support site for instructions)
  • iCloud Keychain sync must be enabled on all the Apple devices used with Duo (see Apple Support site for instructions)
  • Duo documentation on adding Touch ID or using Touch ID
Bypass code
Enter a code from your IT help desk
  • PennKey Support Provider
Text message passcode
Send to "phone 1" (***-***-****)
  • Non-smartphone
  • Smartphone

Note: Penn is retiring the use of text message passcodes for two-step verification. New text message registrations are no longer possible in Duo. If you currently use text or phone callback as your primary form of two-step verification, please visit the Duo Device Management Portal and register an alternative method, such as the Duo Mobile app or a security key.

Phone call
Call "phone 1" (***-***-****)
  • Non-smartphone
  • Smartphone

Note: Penn is retiring the use of phone callback for two-step verification. New text message registrations are no longer possible in Duo. If you currently use text or phone callback as your primary form of two-step verification, please visit the Duo Device Management Portal and register an alternative method, such as the Duo Mobile app or a security key.

  • Phone call from Duo to registered phone with voice instructions
  • Press “*” (asterisk) to verify or “3” to report fraud
  • Duo documentation on using phone for phone call