Setting up the Duo Mobile app (2FA) for the first time

This article tells how to install and access two-factor authentication (2FA) through the Duo Mobile app. Harvard University and Harvard Medical School use this to enhance security. Specifically, this article provides guidance on setting up Duo Mobile for Harvard Medical School using your HMS account ID.

Note - If you have already used the Duo Mobile app while at Harvard University but have a new phone, refer to the HMS: Transferring Duo Mobile (2FA) authentication from an old phone to a new phone KB article.

Before you begin

To complete this setup, you will need:

• A computer
• Your mobile device

Download the Duo Mobile app through either the Apple App Store or Google Play Store on your mobile device before you begin.

For reference, Duo Mobile's icon is green and looks like:

Step-by-step

To install two-factor authentication (2FA) through the Duo Mobile app:

1. From your computer, navigate to HMS Duo Device Management page. 
   
   
2. Sign in with your HMS account ID and password.
   
   
3. When prompted to "Protect Your Harvard Medical School Account", select Start setup.
   1. If you do not see the "Start setup" message, you may have configured two-factor authentication in the past. Contact the HMS IT Service Desk at 617-432-2000 or itservicedesk@hms.harvard.edu for assistance. Given the security requirements, a phone call may be more straightforward.
      
      
4. On the "Enter your phone number" screen, enter your mobile device's phone number.
   
   
   
   
5. The "Verify ownership" window will appear. Select either Call me or Text me (your preference). You will either receive a phone call or a text message with a 6-digit code to your new device.
   
   
   
   
6. Enter the 6-digit code in step 2. Select Verify. If successful, a green check will appear next to the Verify button. Select Continue. 
   
   
   
   
7. The "What type of phone is...?" window will appear. Select the type of device, then select Continue.
   
   
   
   
8. The "Install Duo Mobile for..." window will appear. Select I have Duo Mobile installed.
   1. If you have not done so already, install the Duo Mobile app on your new device via the Apple App Store or Google Play Store.
      
      
      
      
9. If successful, a QR code will appear on your computer screen. 
   
   
10. On your phone, open the Duo Mobile app.
    
    
11. The "Welcome to Duo Security" screen will appear. Select Continue.
    
    
12. On the "Add your account" screen, select Use a QR code.
    1. If prompted, select Allow to allow Duo Mobile to use your camera.
       
       
       
       
13. Your camera will display. Use your phone to scan the QR code displayed on your computer screen.
    
    
14. If successful, the "Name your account to continue" screen will appear on your phone. Select Next. 
    1. On your computer screen, the QR code will display a green check mark.
       
       
15. The "Name account" screen will appear with the account already labeled as "Harvard Medical School". Either select Save or Done (on your keyboard) to continue. 
    
    
    
    
16. If successful, the "Account linked!" screen will appear.
    1. If you would like to practice using Duo Mobile, select Practice now. Otherwise, select Skip. 
       
       
17. The "Pro Tip" screen will appear. Select the blue Allow Notifications button. 
    1. Note -  You must select "Allow Notifications" in order to allow push notifications to be sent to your phone. 
       
       
18. If prompted with "'Duo Mobile' Would Like to Send You Notifications", select Allow.
    
    
    
    
19. The "Improving your experience" screen will appear. This is your preference; select Continue to allow data collection or select Turn off to disable data collection.
    
    
20. The "Almost there" screen will appear. Select OK.

To verify that Duo Mobile has been correctly installed on your phone:

1. On your computer, select Continue. 
   1. If your screen has "timed out", simply navigate to the HMS Duo Device Management page again. Select Send Push.
      
      
2. A notification should appear on your phone. Tap to open the notification. Select Approve.
   
   
3. If successful, the "Congratulations! You completed your first authentication with Duo." screen will appear on your phone. Select OK.

The "Harvard Medical School" icon should now appear on your Duo Mobile home screen.

Next steps

To set up your Duo Mobile for Harvard University, refer to the HUIT's How to Activate two-step verification KB article. You must also set this up on your new phone in order to access other sites which require your HarvardKey sign in. 

Optional: Add a backup two-factor authentication (2FA) device

A backup authentication method can be helpful in situations like losing your mobile phone. To add a secondary authentication method, refer to the Manage, add, and delete devices on the Duo Mobile app KB article.

ForgotMyID Tool

If you do not know your associated email, HUID, Harvard NetID, or HMS ID, the ForgotMyID Tool can help you find these. If you need further guidance on how to use this tool, visit the ForgotMyID Tool How-To article.

Questions?