Set up 2FA for your HMS account using the Duo Mobile app

This guide explains setting up two-factor authentication (2FA) using the Duo Mobile app for HMS accounts. This additional layer of security helps protect your HMS resources.

Note – If you already use Duo Mobile at Harvard University but have a new phone, refer to the Transferring Duo Mobile authentication to a new phone article.

Prerequisites

Before starting, ensure you have:

• A computer
• Your mobile device

Install the Duo Mobile app on your mobile device from the Apple App Store or Google Play Store.

Set up 2FA with Duo Mobile

1. Open a web browser on your computer and navigate to the HMS Duo Device Management page.
2. Sign in with your HMS credentials.
3. When prompted with "Protect Your Harvard Medical School Account," select Start setup. If this message doesn't appear, contact the HMS IT Service Desk at 617-432-2000 or itservicedesk@hms.harvard.edu.
4. On the "Enter your phone number" screen, provide your mobile device's phone number and select Continue.
   
   
5. Choose a verification method: Call me or Text me.
   
   
   
   
6. Enter the 6-digit code received via your selected method and select Verify. A green checkmark will appear after the code is validated. Then select Continue.
7. On the "What type of phone is this?" screen, select your phone type (for example, iPhone or Android) and choose Continue.
   
   
   
   
8. On the "Install Duo Mobile" screen, confirm that you have installed the app by selecting I have Duo Mobile installed. If not installed, refer to the Prerequisites section above.
   
   
   
   
9. Open the Duo Mobile app on your phone. When the "Welcome to Duo Security" screen appears, select Continue.
10. Select Use a QR code on the "Add your account" screen and scan the QR code displayed on your computer screen. If prompted, allow the app to access your camera.
11. When the "Name your account" screen appears, confirm that it is labeled "Harvard Medical School." Then, select Save or Done to proceed.
    
    
    
    
12. After naming your account and saving, a Pro Tip screen may appear. You can select Practice now to try a sample Duo prompt or Skip to continue.
13. You may next encounter an Improving your experience screen. Choose Continue if you wish to send anonymous usage data, or Turn off if you do not want to share data.
14. A prompt will appear to Allow Notifications. Select Allow to permit Duo Mobile to send you push notifications when you authenticate.
    
    
    
    
15. Complete the setup process by following any remaining prompts on the Duo Mobile app and your computer.

Verify your setup

1. On your computer, select Send Push from the Duo Device Management page.
2. Approve the notification on your mobile device to authenticate the setup. If the session times out, restart the process from the Duo Device Management page.

After set up, the "Harvard Medical School" icon will appear on your Duo Mobile home screen:

Next steps

• To enable Duo Mobile for Harvard University accounts, refer to HUIT's guide on activating two-factor authentication (2FA).
• Add a backup 2FA method by following the Manage, add, and delete devices on Duo Mobile article.
• If you do not know your associated email, HUID, Harvard NetID, or HMS account ID, the ForgotMyID Tool can help you find them. For a walkthrough of how to use this tool, see the ForgotMyID Tool How-To article.