Enrolling for Duo two-factor authentication

New staff and students at the University of Leeds are automatically enrolled in Duo, the University’s two-factor authentication (2FA) system. Duo adds an extra layer of security to your account and requires setup before you can access protected systems such as Microsoft 365 and Minerva.

This guide explains how to enrol for Duo and which devices you can use.

1. Before You Begin

You will need your University credentials (username and password).
Check your personal email for instructions on setting your password and accessing your account.
Recommended device: Mobile phone with Duo Mobile app (available on Apple and Android app stores.)

2. How to Enrol for Duo

Watch this video quick start guide, or follow the steps below to enrol. If you can't see the video, view it directly on the Duo guide.

Go to https://www.microsoft365.com/?auth=2 or log in to Minerva.
On first login, you will be prompted to register for:
- Self-Service Password Reset (SSPR)
- Duo Two-Factor Authentication
When Duo setup begins:
- Click Start Setup.
- Select your device type (mobile phone recommended).
- Click Duo Mobile (Recommended).

3. Setting Up Duo Mobile

Duo Mobile is available for iOS 15 or newer and Android 11 or newer.
It works with Wi-Fi or mobile data and can generate passcodes offline.
1. Enter your University username followed by @leeds.ac.uk.
2. Click Next, then Get Started.
3. Select Duo Mobile (Recommended) option
4. Select your country and enter your mobile number (without leading zero).
  - For tablets without phone service, click I have a tablet.
5. Confirm your phone number.
  - If the number is linked to another Duo account, verify ownership via SMS or phone call.
6. Install Duo Mobile on your device > Scan the QR code shown on screen to complete setup
7. If you're using the same device that the QR code is showing on, you won’t be able to scan it. Just choose “Get an activation link instead” and enter a personal email address, and activation link will be emailed to you.
8. Check your personal email for your activation link (if you have not received the activation link email, please check your spam folder) if you have not received the email please click on the link "Send another email"
9. You will receive an email saying "To activate the app, click and open this link with Duo Mobile" Click on this link
10. You will be presented with the screen below asking you to "Activate Duo Mobile" Click this.
11. This will add your device into the Duo app.
12. If you have scanned the QR code, this will add your device to your Duo app. click "Save "
13. You will then be presented with a screen confirming you have added your device to Duo, Click "Continue"
14. You will then be asked to log in with Duo Click "Log in with Duo"
15. You will be presented with a three digit code on your device screen, Enter the three digit code into your Duo notification.
16. Once you have entered the code, you will then be asked if this is your Device, Click "Yes,this is my device"
17. You will then be told you have successfully MFA'd into Duo.

You can now log in to Duo-protected applications with Duo Push or with a Duo Mobile passcode.

4. Other Authentication Methods

If you cannot use Duo Mobile:

SMS text message
Hardware token

See: Duo – Choosing and Using Your Authentication Device.

5. Troubleshooting

If you cannot see the video guide, view it directly on the Duo website.
If your phone number changes or you lose access to your device, contact the IT Service Desk.

💡 FAQs

Q1: Do I need Duo before accessing University systems?
A1: Yes, Duo must be set up before logging into protected services like Microsoft 365 and Minerva.

Q2: Which devices can I use for Duo?
A2: Mobile phones (recommended), tablets, or hardware tokens.

Q3: What if I don’t have Wi-Fi or mobile data?
A3: Duo Mobile can generate offline passcodes.

Q4: Can I use Duo on older devices?
A4: Duo Mobile requires iOS 15+ or Android 11+.