Add a New Device to Two-Step Login
How to add a new device (smartphone, tablet, hardware token, or USB security key) to use when authenticating with Two-Step Login
This article applies to: Two-Step Login
Log Into the Device Management Portal
To add a device, you need to access the management portal.
- From the Cornell Manage Your Two-Step Login webpage, click the Manage Devices button, OR
- Go to https://cornell.login.duosecurity.com/devices, OR
- During a Duo authentication request, click Other Options in the prompt, then click Manage Devices at the bottom of the list of currently enrolled devices.
After you authenticate with Two-Step Login, you will be taken to the portal.
To add a new device:
At the Device Management portal, click the Add a Device panel.
On the Select an Option screen, click one of the available methods.
For more information about which kinds of devices you can use, visit Choose Your Authentication Device.
Add Another Phone or A Tablet
If you want to add a second mobile device, you will need to download the Duo App on that extra device. Once you have the app installed, click the option and follow the steps to add a new device.
Add A Hardware Token
The process for adding a hardware token is different—for details, visit Hardware Tokens for Two-Step Login.
Add a Security Key
A security key is a small device that plugs into a USB port on your computer. When you are prompted to authenticate with Two-Step Login, you will tap a button on the security key to confirm your login. To use this option, you must :
- purchase a supported security key, such as the Yubico security key.
- have a current version of Chrome, Safari, Firefox, or Edge browser installed on your computer.
If you have met those requirements, then:
- Select Security key on the Select an option screen.
- Make sure your security key is inserted into a USB port on your computer, then click Continue.
- When you see the Use your security key with duosecurity.com screen, press or tap the button on your USB security key.
- After your USB security key has been added to Two-Step Login, click Continue.
Add Touch ID
To use this method, you must have:
- A Mac device with a Touch ID button.
- Your fingerprint enrolled in the Apple Touch ID program.
- Chrome version 70 or later. (Safari and other browsers are not supported for this authentication method.)
If you meet these requirements:
- Select Touch ID on the Select an option screen
- Click Continue on the Touch ID information screen.
- Verify your identity in the Duo enrollment prompt using Touch ID or your password.
- Place your finger on the Touch ID button in the Touch bar on your Mac computer.
- When Duo confirms that your Touch ID method has been enrolled in Two-Step Login, click Continue.
Add Windows Hello
To use this method, you must have:
- A Windows 11 device that supports PIN, fingerprint, or facial recognition (not all PCs do)
- The latest version of Chrome, Edge, or Firefox
If you meet these requirements:
- Select Windows Hello on the Select an option screen.
At the prompt, select .
At the prompt, select .
Scan your fingerprint when prompted by Windows Security.
Windows will confirm your passkey has been saved. Select .
- Be aware that the Windows Hello method does not support CUVPN, RDP, or SSH authentication.
- You must set up Windows Hello per browser. If you set it up in Chrome, for example, it won’t automatically work in Firefox or Edge.
Support Contact:
Cornell IT Service Desk
Normal Business Hours: Monday-Friday, 8am-6pm (Eastern Time)
Open a ticket (24x7 support)
Emergency Service Disruptions: After Hours Support
Comments?
To share feedback about this page or request support, log in with your NetID