Skip to main content

When to Deny a Two-Step Login Request

If you get a request you weren't expecting, don't accept it.

This article applies to: Two-Step Login


Only approve Duo (Two-Step Login) prompts when you generated the request. Select Deny if it doesn't match your current activity or location. If it seems suspicious, select Yes to report it to the IT Security Office.

Do not approve a Two-Step Login prompt if

  • You are not expecting it.
  • It's not for an app you are starting to use right now.
  • It shows a different location from where you are.

Duo displays the app name and place of the login attempt. If it doesn't match what you are doing and where you are, select Deny.

If you deny a Duo request, you'll be asked "Was this a suspicious login?"

  • Choose Yes if you suspect someone is trying to access your account.
  • Choose No if you selected Deny by accident.

If another person tries to use your password, when  you receive a Duo Push notification on your mobile device, click Deny, then confirm the suspicious login by clicking Yes

Your Location and Privacy

Duo does not track your exact location. It only records broad geographic data for the city or country where the login originated, such as Ithaca, NY. Duo only records a location at the time of the login attempt.

About this Article

Last updated: 

Sunday, February 5, 2023 - 12:31pm

Was this page helpful?

Your feedback helps improve the site.

Comments?