Duo offers multiple options to meet your needs when traveling. You may be able to use your regular Duo two-factor option if you need to log in to a two-factor protected system while traveling. Or you may, however, need to use alternative options depending on your preferred option and your travel plans.
- Plan options. Before your trip, plan which Duo options you will use and enroll in them if needed. See:
- Enroll additional devices. If possible, enroll two devices in case your primary device is unavailable (lost, stolen, not available, dead battery, malfunctioning, etc.).
- Hardware Token? If you plan to travel without a smartphone or tablet, consider taking a hardware token. Purchase at Computer Showcase ($25; may be returned for full refund within 45 days of purchase).
- International travel? Restrictions apply for some destinations. See Travel to Embargoed Countries below.
- Remember the Service Center. If you need to, you can phone the ITS Service Center for an emergency bypass passcode. Add the Service Center phone number (734-764-4357) to your contacts list.
Attention Michigan Medicine! Will you need to use the Michigan Medicine VPN with Duo while traveling? See Connect to Michigan Medicine VPN Using Two-Factor (Duo) for instructions.
Consider Using Passcodes
- Use the Duo Mobile app to generate passcodes on a smartphone or tablet. The app can generate passcodes you can use to login when you do not have a cellular or WiFi connection. See Enroll a Smartphone or Tablet in Duo and Using Duo Two-Factor to Log In.
- Get passcodes via text message. You will still need a cell phone connection, but a text message will often get through even when you have spotty data coverage. You will receive a set of 10 passcodes in a single text message. The passcodes are good for 12 hours. See the Enter a Passcode section of Using Duo Two-Factor to Log In.
Add a Device for Traveling
If you purchase a phone for use abroad or take a loaner, you can enroll that device in Duo and use it for two-factor authentication when traveling.
- Enroll the device ahead of time. You'll need to authenticate using whatever Duo option you have enrolled in when you enroll the new device, so it is best to do that before your trip if at all possible.
- Use what works. If the device you will use while traveling is a basic, non-smart phone, you can authenticate using a phone call to it or passcodes sent via text message. You can install the Duo Mobile app on a tablet without a phone number. See Traveling With Two-Factor (Duo) or Options for Two-Factor Authentication (2FA).
The Duo app and hardware tokens are subject to export control regulations. According to federal export control regulations, the Duo app and Duo hardware tokens may not be transported or sent to embargoed nations identified by the U.S. State Department. The following nations are on the embargoed list as of May 2018: Cuba, Iran, the Crimea region of Ukraine, North Korea, and Syria. If you are traveling to any of those countries, delete or uninstall the Duo app from any devices you will take with you and do not take Duo hardware tokens with you.
You can use other Duo options, such as a phone call or passcodes via text message, while traveling in embargoed countries. See Traveling With Two-Factor (Duo) or Options for Two-Factor Authentication (2FA).
Traveling with Technology
For tips and resources to help you when traveling, see Safe Computing: Traveling with Technology.