How to activate Duo two-step verification

Starting spring 2025, the University will replace Duo with Okta for MFA to securely access HarvardKey-protected resources. Okta is available to all HarvardKey users. Learn more about getting started with Okta.

These instructions are for any Harvard user who needs to set up two-step verification for the first time.

If you've already set up two-step verification for HarvardKey and you have a new phone or device, use these instructions for adding two-step verification to a new device.

 

Identify Your Activation Interface

As we update our two-step activation process, you may encounter one of two interfaces.

• Harvard's Custom Interface: If you are activating two-step from the HarvardKey claiming Success screen, proceed to the instructions for Harvard’s two-step activation interface

• Duo's Native Interface: If you are are activating two-step from the Manage Your Account & Services page in HarvardKey Self-Service, proceed to the instructions for Duo’s two-step activation interface

 

Activation Instructions: Harvard’s Custom Interface

Step One: After Claiming, Activate Two-step

Immediately after you successfully claim your HarvardKey, click the blue Activate Two-step button at the bottom of the Success screen to continue.

If you have departed from the Success screen, or do not know how to find this page, please follow the instructions for Duo’s two-step activation interface.

Step Two: Choose Your Verification Method

Choose from the tabs the device you'd like to use to authenticate when using two-step:

• Smartphone
• Tablet
• Other Phone (Landline or Basic Phone)

Then click Continue

Step Three: Add Your Chosen Method

Once you choose how to verify your identity, you will next complete the setup steps for that method.

Set Up Smartphone

1. Enter your smartphone number, confirm, and name the device. Click Continue.
   1. You should see a QR code shown on-screen.
2. Download and install Duo Mobile on your phone or tablet from the Google Play Store or Apple App Store.
3. Once you open the app, your camera should automatically open. If not, tap the "+" icon (iOS) or "key +" icon to open your camera.
4. Hold your device up to the computer screen to scan the barcode. Once the barcode is recognized, you will automatically advance to the next screen.

Set Up Tablet

1. Name the device. Click Continue.
   1. You should see a QR code shown on-screen.
2. Download and install Duo Mobile on your phone or tablet from the Google Play Store or Apple App Store.
3. Once you open the app, your camera should automatically open. If not, tap the "+" icon (iOS) or "key +" icon to open your camera.
4. Hold your device up to the computer screen to scan the barcode. Once the barcode is recognized, you will automatically advance to the next screen.

Set Up Other Phone

1. Enter your phone's details. Click Continue
2. Set up should be complete. It is highly recommend you now add a backup device, in case you ever lose or can't access the smartphone you just added. Use these directions for adding a second device to Duo to get started

Once you finish setting up your chosen verification method, your device can be used to log in to Duo-protected applications.

Step Four: Add a Backup Method

It is highly recommended you now add a backup device, in case you ever lose or can't access the smartphone you just added. Follow the directions in the article Add or Manage Devices After Two-step Activation to get started.

 

Activation Instructions: Duo’s New Interface

Navigate to Duo’s Device Management page

1. Go to the site key.harvard.edu
2. Scroll down to Manage Your Account & Services and click on Set Up & Manage Your Two-step Verification
3. When prompted, sign into HarvardKey

Video Overview

Step One: Introduction

Logging into a Duo-protected application enabled for self-enrollment takes you to the device management page to enroll. Click Next to begin the setup process.

 

Step Two: Choose Your Verification Method

Verification options will vary by device. Choose the device type in the list that matches your desired authentication experience. Duo recommends the most secure option available to you, so it's a good idea to set up that method first if you have a device that supports.

This is an example of the options on a MacBook with Touch ID available:

If you want to understand how each login method works, click on the link for your chosen method below. This will take you to Duo's instructions for a detailed explanation.

• Touch ID Login Experience: Use the fingerprint sensor on Apple MacBooks, Magic Keyboards, or iPhone.
• Face ID Login Experience: Use the face scanning feature on iPhone.
• Windows Hello Login Experience: Use your Windows Hello PIN, scan your fingerprint, or use facial recognition on Windows devices.
• Device Verification (Android Biometrics) Login Experience: Use Android Biometrics on Android devices.
• Duo Mobile Login Experience: Approve Duo Push verification requests on iOS or Android devices, or generate a one-time passcode from the Duo Mobile app.
• Security Key Login Experience: Tap a WebAuthN/FIDO2 security key. Requires Chrome, Safari, Firefox, or Edge.
• Phone Number Login Experience: Receive a one-time passcode in an SMS message or approve a login attempt with a phone call from Duo.

Step Three: Set Up Your Chosen Method

After selecting how you want to verify your identity, you'll move forward to set it up.

Duo will walk you through the steps, but if you want detailed set up instructions, click on the link for your chosen method below. This will take you to Duo's instructions for a detailed explanation.

• Set Up Touch ID
• Set Up Face ID
• Set Up Windows Hello
• Set Up Device Verification (Android Biometrics)
• Set Up Duo Mobile
• Set Up Security Key
• Set Up Phone Number

Step Four: Add a Backup Method

It is highly recommended you now add a backup device, in case you ever lose or can't access the smartphone you just added. Follow the directions in the article Add or Manage Devices After Two-step Activation to get started.

 

Still need help?

If you need help getting two-step verification set up, submit a ticket or call 617-495-7777.