This site requires JavaScript to be enabled
An updated version of this article is available

Set up two-factor authentication (2FA) through the Duo Mobile app

85 views

26.0 - Last modified on 01-08-2025 Revised by Joseph Casciano

25.0 - Last modified on 06-13-2024 Revised by Lindsey Pockl

24.0 - Last modified on 06-13-2024 Revised by Lindsey Pockl

23.0 - Last modified on 06-11-2024 Revised by Joseph Casciano

22.0 - Last modified on 06-11-2024 Revised by Joseph Casciano

21.0 - Last modified on 06-11-2024 Revised by Joseph Casciano

20.0 - Last modified on 04-25-2024 Revised by Lindsey Pockl

19.0 - Last modified on 10-26-2023 Revised by Lindsey Pockl

18.0 - Last modified on 09-27-2023 Revised by Lindsey Pockl

17.0 - Last modified on 07-06-2022 Revised by Joseph Casciano

16.0 - Last modified on 07-06-2022 Revised by Kenji Kono

15.0 - Last modified on 07-05-2022 Revised by Kenji Kono

14.0 - Last modified on 06-01-2022 Revised by Joseph Casciano

13.0 - Last modified on 03-22-2022 Revised by Joseph Casciano

12.0 - Last modified on 11-23-2021 Revised by Tamara Will

11.0 - Last modified on 11-23-2021 Revised by Tamara Will

10.0 - Last modified on 11-05-2021 Revised by Joseph Casciano

9.0 - Last modified on 10-12-2021 Revised by Sarah Cooper

8.0 - Last modified on 09-08-2021 Revised by Joseph Casciano

7.0 - Last modified on 09-03-2021 Revised by Kenji Kono

6.0 - Last modified on 09-03-2021 Revised by Jason Obedzinski

5.0 - Last modified on 01-25-2021 Revised by Joseph Casciano

4.0 - Last modified on 01-22-2021 Revised by Kenji Kono

3.0 - Last modified on 01-06-2021 Revised by Joseph Casciano

2.0 - Last modified on 01-06-2021 Revised by Kenji Kono

1.0 - Created on 08-13-2019 Authored by Kenji Kono

Harvard University and Harvard Medical School use two-factor authentication (2FA) through the Duo Mobile app to enhance security.

If you have previously set up Duo Mobile but need to install it on a new mobile phone, refer to this article.

1 – Sign in at the Pulse Connect Secure sign-in page

Go to the Pulse Connect Secure sign-in page. Enter your HMS ID (eCommons) and password to sign in. After signing in, you should see some introductory text. Select Start Setup.

2 – Select the type of device

Select the radio button for the type of device you will use for 2FA. We recommend using a smartphone.

The rest of these instructions assume you are using a smartphone, but the steps are similar for a tablet. The landline option may be less secure but may also be used.

If you want to use a security key, contact the Service Desk at 617-432-2000, itservicedesk@hms.harvard.edu, or in-person on the second floor of Tosteson Medical Education Center (TMEC).

3 – Enter your phone number

Assuming you selected Mobile phone or Landline, enter your phone number in the text field. After entering your phone number, check the box to confirm the number is correct and select Continue.

If the phone number has been used at Harvard Medical School before, you may be prompted to verify ownership of the number via a text message or phone call.

4 – Select the type of phone

We recommend using Duo Mobile with an iPhone or Android smartphone and the Duo Mobile app, which is available for iOS or Android. If you select Other, you may be limited to authenticating on cellular networks and via automated text messages or phone calls.

5 – Install the Duo Mobile app

You may already have Duo Mobile installed for use with HarvardKey. If so, you do not need to redownload the app. Otherwise, visit your smartphone's app store—either the Apple App Store or Google Play Store—to download and install Duo Mobile. You can recognize the app through this icon:

Once Duo Mobile is installed, select I have Duo Mobile installed.

6 – Configure the Duo Mobile app for use at HMS

Note – Internet access is required to complete the next step. See instructions for connecting to Harvard Secure or the HMS private wireless network if you do not have reliable cellular data service.

Open the Duo Mobile app. If prompted, grant the app access to your camera. Point the camera at the QR code for a few seconds. By doing this, Duo Mobile will automatically add Harvard Medical School as an option.

If your phone's camera doesn't work, select Email me an activation link instead, open the email from your mobile phone and open the link in the email. You will be prompted to open the link with the Duo Mobile app to activate.

Once you have added Harvard Medical School to Duo Mobile, you can continue to sign in.

7 – Add additional devices

While not required, adding additional devices will provide a backup if anything happens to your smartphone.

Important Note

Once you have successfully set up DUO, the site will attempt a complete login to HMS VPN. If you have HMS VPN access, you will be directed to the HMS VPN online portal. If you do not have HMS VPN access, you will receive a message that says “You don’t not have access to this resource.” Your level of HMS VPN access does not affect your HMS DUO enrollment.