UC San Diego SearchMenu

Additional Devices & Preferences

Learn how to re-name existing devices or add new ones, and tell Duo your preferred method of completing two-step login.

Important reminder: In order to add additional devices or make changes, you'll first need to use an existing, registered device to verify your identity!

You're strongly recommended to register multiple devices with Duo because:

  • There may come a time when your primary device is not available.
  • To add a device, you must first log in in using a registered device. For example, if you've only registered your cell phone and it's not available, you won't be able to register a second device without help from the Service Desk. 

Expand all

Add another device

The Duo interface walks you through the process of registering a second (or third or fourth) device for your two-step login process.

First, visit the two-step login device management link (duo-registration.ucsd.edu) and use Active Directory to log in.


Use an existing, registered device to verify your identity through the two-step process.

add-device1.png


Click Add another device (notated below with red arrow). Follow the prompts to add your device.

add-device2.png

Reactivate an upgraded phone (with the same phone number)

If you get a new phone with the same phone number, follow the reactivation process below to use it for two-step login.

If your new phone has a different phone number, use the device manager to delete the old phone and use the Add another device process (above) to register the new phone.

To register your upgraded phone with the same number, go to the two-step login device management page (duo-registration.ucsd.edu) and log in with your Active Directory credentials.


Use an existing, registered device to verify your identity through the two-step process.

add-device1.png


Select the Device Options button. Make sure the number you see matches the number of your new phone.

device-options.png


Select the Reactivate Duo Mobile button.

reactivate-1.png


Follow the prompts to reactivate the device; the prompts will be similar to the first time you registered.

Rename devices

Once you've registered multiple devices you may want to rename them — for example, "cellphone" or "office phone" or "home landline."

Visit the device management interface (duo-registration.ucsd.edu) and log in with Active Directory.


Use an existing, registered device to verify your identity through the two-step process.

add-device1.png


Click the blue Device Options button.

device-options.png


Select the Change Device Name button and type a new name in the field. Click Save when done.

change-device-name2.png

Single-use passcodes to use as a backup plan

If you registered your cell phone as a device for two-step login, you can send yourself a batch of 10 single-use passcodes. This is a good backup method in case:

  • Other registered devices aren't available (if you forgot your cell phone and don't have it with you)
  • There is no wireless or cellular availability at your location
  • You're traveling and don't want to connect to untrusted networks

To receive a batch of 10 single-use passcodes:

  1. Visit the two-step login device management link (duo-registration.ucsd.edu) and use Active Directory to log in.
  2. Click the green button Log In, then click Text me new codes in the blue band that appears at the bottom of the interface. See the screenshot below.
  3. Receive passcodes via text.
  4. Store your passcodes in a secure location, such as a password manager. LastPass is a good choice. 

Note that:

  • You'll need to have registered a cell phone for two-step login before you can receive the batch of passcodes. 
  • The codes can be used in any order.
  • Once a code is used, it is ineligible for future use (Duo tracks used codes).
  • You can request a batch of 10 passcodes any time. Requesting a new batch invalidates passcodes from a previous batch. Therefore, it's a good idea to delete the text containing older codes.

10-codes-SMS.png

Request a token

A limited number of tokens (pictured below) are available for distribution. When completing two-step login, enter the temporary passcode shown on the token screen.

Two important notes regarding tokens:

  • A passcode can also be generated from within the Duo phone or tablet app. The app-generated passcode is accessible even without a cell or WiFi connection. Whether you're on a flight or a ship, traveling internationally or working in a subterranean bunker, if you're using the app and have the device, you should be covered.
  • Best practices call for registering multiple two-step login devices. Even with a token, you'll want a backup plan for the day you lose it or leave it at home. Therefore, please read up on the various ways to complete two-step login and ensure you have multiple options.

How to request a token:

  1. First things first, you'll need to register yourself in our Duo account.
    • Start here: duo-registration.ucsd.edu
    • After logging in via Active Directory, click the green Start setup button.
    • At this point we at least have a record of your identity, and can associate it with a token. This is the minimum first step.
  2. Carry on with registering other devices, per university best practices.
  3. Request a token from the Service Desk at servicedesk@ucsd.edu or (858) 246-4357. Provide your name and a brief statement outlining why you're requesting a token.
  4. Make arrangements to pick up your token from the Service Desk, AP&M building, Room 1313 (8 a.m. – 4:30 p.m. Monday – Friday)

UC San Diego DUO two-step token device showing a passcode in the display window

Set a default authentication method (or choose each time you log in)

You have options for how you want to complete two-step login. 

  • To access your settings, visit the two-step login device management link (duo-registration.ucsd.edu) and use Active Directory to log in.
  • The Default Device section lets you toggle between your registered devices. The default device will be the first method that Duo uses to complete the two-step login process.
  • The When I log in section provides options for completing two-step login. You can set a method that's automatic (for example, send a push to your mobile phone) or you can choose a method each time you attempt a login. 

devicesettings.png

Remember for 7 days

You can tell Duo to remember your computer for seven days, so you'll only need to complete the two-step login procedure once a week or so. Note that this applies per machine. For example, if you set your laptop to remember for seven days, you'll still have to complete two-step login if you use a campus lab computer later that day.

This is not recommended for use on public or shared computers.

For VPN connections, this option is not available. You'll need to complete two-step login each time you connect to VPN.

How to tell Duo to remember your computer:

  • If you have your preferences set to choose a two-step device each time you log in, simply check the box next to Remember me for 7 days before choosing your two-step device.
  • If you have Duo automatically complete two-step through a preferred device:
    • Click Cancel in the blue bar before completing two-step on your device
    • Click the box next to Remember me for 7 days
    • Choose a device via which to complete two-step login (see screenshot below)

cancel-remember-me.png

Expand all