MFA-Duo - Platform Authenticators
Platform authenticators are authentication methods built into the device you use to access services and applications protected by Duo. Examples of platform devices would be Touch ID on Mac, Face ID on an iPhone, Windows Hello, and Android biometrics.
Availability of the following Duo login options in the Universal Prompt depends on your browser or browser version.
- Please see the Platform Authenticators section of MFA-Duo - Adding Secondary/Backup Devices for registration instructions.
Touch ID on Mac
In order to use Touch ID with Duo, make sure you have the following:
- A MacBook Pro, MacBook Air, or Magic Keyboard with a Touch ID button.
- A fingerprint enrolled in Touch ID (see how to do this at the Apple Support site).
- A supported browser: Safari or Chrome. Refer to the browser support table.
- iCloud Keychain sync enabled on all the Apple devices you will use with Duo and the passkey you will create during setup.
- If you need to cancel a Touch ID authentication in progress, click or tap the cancel option shown by your browser, outside of the Duo Universal Prompt.
Face ID or Touch ID on an iPhone or iPad
In order to use Face ID or Touch ID on an iPhone or iPad with Duo, make sure you have the following:
- An iPhone or iPad that supports Face ID or Touch ID.
- Face ID or Touch ID already set up on the iPhone or iPad. Learn how to set up Face ID or set up Touch ID at the Apple Support site.
- iCloud Keychain sync enabled on all the Apple devices you will use with Duo and the passkey you will create during setup.
- Depending on the option your device supports, you'll either scan your face to use Face ID while logging in, or you'll scan your fingerprint instead to use Touch ID.
Windows Hello
In order to use Windows Hello with Duo, make sure you have the following:
- A device running Windows 10 or later.
- Windows Hello set up on the device for signing in with a PIN, fingerprint, or facial recognition. Learn how to set up Windows Hello at the Microsoft support site.
- A supported browser: Chrome, Edge, or Firefox. Refer to the browser support table. Note that Chrome Incognito and Edge InPrivate browsing won't work with Windows Hello, but will work with Security Keys.
- Follow your device's prompt to enter your Windows Hello PIN, scan your fingerprint, or use facial recognition to log into Duo.
Android Biometrics
In order to use Android Biometrics with Duo, make sure you have the following:
- An Android device that supports biometrics, like fingerprint or face unlock.
- Facial or fingerprint unlock set up on that device. Go to Settings → Security to change your unlock settings. Refer to the Google support articles Unlock your Pixel phone with your fingerprint and Unlock your Pixel phone with your face, the Samsung articles Set up and use the fingerprint sensor on your Galaxy phone and Use Facial recognition security on your Galaxy phone, or your device manufacturer's support site for examples of how to do this.
- Follow your device's prompt to scan your fingerprint or use facial recognition to log into Duo.