Get a Passcode from a Hardware Token

Acquire and enroll a hardware token that will display a passcode with a simple button push.

If you encounter a problem using a hardware token to log in, see some possible causes and solutions.

If the token generates anything other than a passcode, it is considered defective. While Duo's policy is to replace a defective token for up to six months after purchase, unfortunately, since the Cornell Store purchases tokens in bulk, by the time a user purchases a token from them, the warranty has expired. The only solution for a defective token purchased from the Cornell Store is to buy a new one or ask your department to replace the token.

For more information, see Duo Security's Guide to Two-Factor Authentication.

Log in with a Hardware Token Passcode

If your most recent Two-Step Login authentication used your hardware token, or if you have selected Hardware token from the Other options to log in list, then the Duo prompt will show the Enter your passcode screen. Then:

1. Generate a passcode using your hardware token.
2. Enter the passcode on the Duo prompt as indicated.
   
    
3. Click Verify.

Get an SMS Passcode via Text Message

To generate passcodes by SMS, you will need a device enrolled that can accept text messages. If needed, you can add a new device from this screen before you get your passcodes using the steps below: 

1. From Two-Step Login's Duo prompt, click Other options, then select Send text message passcode.
2. You will receive a text message with a passcode on the text-capable phone you have set up with Two-Step Login.
3. The Duo prompt will show the Enter your passcode screen. Enter the passcode you received by text on the prompt as indicated.
   
    
4. Click Verify.
5. If you need to have the passcode sent again, click Send a new passcode and look for the new passcode on your phone. If you need to use a different authentication method, click Other options and select a method from the list.