UC San Diego SearchMenu

Two-Step Login: Additional Devices and Preferences

Learn how to re-name existing devices or add new ones, and tell Duo your preferred method of completing two-step login.

On this page you'll learn how to:

In order to make changes, you'll first need to use an existing, registered device to verify your identity.

Add Another Device 

Use the "Add another device" process to register a second (or third or fourth) device for your two-step login process. The interface will walk you through the process. 

1. Visit the two-step login device management link (https://duo-registration.ucsd.edu) and use Active Directory to log in.

2. Use an existing, registered device to verify your identity through the two-step process. 

add device 1

3. Click Add another device (notated below with red arrow). Follow the prompts to add a device. 

add 2

Set a Default Authentication Method

You have options on how you want to complete two-step login. 

  • The Default Device section lets you toggle between your registered devices. The default device will be the first method used to complete the two-step login process.
  • The "When I log in" section provides options for completing two-step login. You can set a method that's automatic (ie, send a push) or choose each time you attempt a login. 

device setting

 

Reactivate Upgraded Phone (with Same Number)

If you get a new phone with the same number, follow the reactivation process to use it for two-step login. If your new phone has a different number, use the device manager to delete the old phone and use the Add another device process (above) to register the new phone. 

To register your upgraded phone with the same number:

  1. Go to the two-step login device management page (https://duo-registration.ucsd.edu); log in with your Active Directory credentials. 
  2. Complete two-step login process by selecting the Call Me button.
    device management home
  3. Select the Device Options button. Make sure the number you see matches the number of your new phone.
    device options
  4. Select the Reactivate Duo Mobile button.
     reactivate screen
  5. Follow the prompts to reactivate the device; the prompts will be similar to the first time you registered. 

Text Yourself 10 Single-Use Passcodes

If you registered your cellphone as a device for two-step login, you can send yourself a batch of 10 single-use passcodes. This is a good back up in case:

  • Other registered devices aren't available (ie, forgot cellphone)
  • There is no wireless or cellular availability at your location
  • You're traveling and don't want to connect to untrusted networks

To receive a batch of 10 single-use passcodes, follow these instructions:

  1. Visit the device registration portal (must be on UC San Diego network or connected via VPN).
  2. Log in to the portal with Active Directory
  3. Click the green button Enter a Passcode, then click Text me new codes in the blue band that appears at the bottom of the interface. See image below.
  4. Receive passcodes via text. 
  5. Store your passcodes in a secure location, such as a password manager. LastPass is a good choice. 

Note that:

  • You'll need to have registered a cellphone for two-step login before you can receive the batch of passcodes. 
  • The codes can be used in any order.
  • Once a code is used, it is ineligible for future use (Duo tracks used codes).
  • You can request a batch of 10 passcodes anytime. Requesting a new batch invalidates passcodes from a previous batch. Therefore, it's a good idea to delete the text containing older batches

10 single use codes

 

Request a Token

A limited number of tokens (pictured below) are available for distribution. When completing two-step login, enter the temporary passcode shown on the token screen. 

Please keep in mind two things regarding tokens:

  • A passcode can also be generated from within the Duo phone or tablet app. The app-generated passcode is accessible even without a cell or wifi connection. Whether you're on a flight or a ship, traveling internationally or working in a subterranean bunker, if you're using the app and have the device, you should be covered. 
  • Best practices call for registering multiple two-step login devices. Even with a token, you'll want a backup plan for the day you lose it or leave it at home. Therefore, please read up on the various ways to complete two-step login and ensure you have multiple options. 

How to Request a Token

  1. First things first, you'll need to register yourself in our Duo account. Start here: https://duo-registration.ucsd.edu. After logging in via Active Directory, click the green "Start setup" button. At this point we at least have a record of your identity, and can associate it with a token. This is the minimum first step. 
  2. Carry on with registering other devices, per university best practices. 
  3. Request a token from the Service Desk at servicedesk@ucsd.edu or 858-246-4357. Please provide your name, department, mailcode and a brief statement outlining why you're requesting a token. 
  4. On-campus personnel can make arrangements to pick up their token from the Service Desk or have it delivered via campus mail. Off-campus personnel can make arrangements to have it mailed or shipped to their location.  

token

Rename Devices 

Once you've registered multiple devices you may want to rename them - for example, personal cellphone, university cellphone, office landline, home landline, etc. 

1. Visit the device management interface (https://duo-registration.ucsd.edu/) and log in with Active Directory. 

2. Use an existing, registered device to verify your identity through the two-step process. 

login

3. Click the blue Device Options button. 

device options

4. Select the Change Device Button name and type new name in the field. Click Save when done. 

change device name

More Help Using Duo

This guide on the Duo web site provides step-by-step instructions on adding/ managing devices and setting the default authentication method.