All MIT faculty and staff need to sign up for Duo by September 30th

September 22, 2015

What is it?:  Duo, is a two-factor authentication application that uses cellphones, landlines and smartphones as an "Approve" or "Deny" system to identify users. Two-factor authentication is an effective and increasingly common way of safeguarding against security attacks, particularly related to financial data.  You may already use something like it with your bank.

Do I Need It?:  After September 30th, all Touchstone-enabled web applications at MIT will require Duo.  This includes Atlas, Stellar, Dropbox, Request Tracker, and more. You will use Duo whether you are accessing these websites from work or home. Yes, you need it!

How Do I Set Duo Up?: You will need to sign up for Duo online and then register at least two devices.  These devices will usually be your cellphone and your desk phone.  You can also register your home phone if you do work from home. If you don’t use a cellphone, BE-IT can help you set up a USB hardware token to generate one time passcodes for use with Duo.  Here are the step by step instructions:

First - Sign up for Duo

  1. Go to
  2. Login via Touchstone
  3. Click Manage Touchstone two-factor Settings
  4. Choose Enable Duo for Touchstone (Recommended)
  5. Click Submit

Next - Register your devices:
How to Register a Smart Phone for Duo two-factor authentication
How to Register a non-smart Phone for Duo two-factor authentication

If you still need help, contact BE-IT