All active Faculty, Staff, Students, Prestudents, Affiliates (Including Postdocs), and Emeritus are required to enroll in MFA. Former students/alumnus, former faculty/staff, and retirees are not required to enroll in MFA, but may elect to enroll in MFA. However, once enrolled, there is...

To strengthen authentication to UH online resources. Important transactions and data require a second line of defense and verification. UH Usernames and passwords can be compromised (via malware or phishing). Having another authentication factor is highly desirable, especially for services that...

Yes, you can enter a code generated by the Duo Mobile app. When you are at the MFA authentication screen, click Other Options. On the next screen, click Duo Mobile passcode. Open the Duo Mobile app on your smartphone or tablet. Depending on your version of the Duo Mobile app, you will...

Information provided as part of the MFA service will only be used for this service. Access to this MFA information is provided to a limited number of service administrators within ITS, for the sole purpose of supporting the MFA service, which includes following up on received reports of...

The amount of data that a Duo Push request uses is very small. 500 Duo Push requests will use approximately 1 MB of data in total. This is roughly equivalent to loading one webpage on your smartphone. You may also refer to this Duo support article for more information:...

You can register your office and/or home landlines to use to authenticate. Please review UH Login Multi-Factor Authentication (MFA) - Adding Devices for more details. You may also purchase a Yubikey hard token from the ITS Site License office. Please review UH Hard Tokens for more details.

Please refer to the following Duo knowledgebase article for information on using Duo MFA in China: https://help.duo.com/s/article/2094

Yes, ITS strongly recommends you register at least two devices. Please review the Ask Us article UH Login Multi-Factor Authentication (MFA) - Adding Devices for information on registering more than one device.

You can authenticate by phone call to a cell phone or landline, via the Duo Mobile app on a smartphone or tablet, or by SMS text message. You may also authenticate via a Yubikey hard token purchased from the ITS Site License office. Please review UH Hard Tokens for more details on Yubikey hard...

Yes, your normal text messaging charges would apply.

No. You must purchase a Yubikey hard token from the ITS Site License office. Please review UH Hard Tokens for more details on Yubikey hard tokens. Only these tokens are supported with UH Login MFA.

If your new phone has the same phone number as your previous phone, you can reactivate the Duo Mobile app on your new phone. Please see the Ask Us article UH Login Multi-Factor Authentication (MFA) - Managing Devices for more information. If you did not retain the same phone number, and you have...

Once you have obtained a replacement mobile phone, if it has the same phone number, there may be different steps to take depending on which authentication method you use: Actions to take if your mobile phone is stolen If using Duo Push method If using Phone Call or SMS Passcodes methods ...

SSO allows you to be automatically logged into other sites using UH Login for up to 2 hours after the initial login. Some sites may require that you enter your UH Username and password every time you want to login there. This a security feature of UH Login that websites may use to ensure that no...

Yes, provided that you ensure the correct person is answering the authentication phone call. The first person to register the phone number can follow the directions for Landlines in the article, UH Login Multi-Factor Authentication (MFA) - Getting started with your first device. The second,...

I log in and out of a service using UH Login several times a day. Do I have to do the MFA authentication each time? Some services will allow you to do the MFA authentication once every 7 days. If the service allows this, after authenticating, you will see a screen asking Is this your device and...

On your device, go to the Home screen (the one with all the icons), and tap on the Settings icon. Scroll down and tap on About phone or About tablet. Some information will appear. If one of the lines of information says Android with a version number, you have an Android device. If you do not see...

As of May 10, 2019, Duo has resolved the issue and phone call authentications to +86 numbers are no longer being blocked. See https://help.duo.com/s/article/5001 for more information.

Yes, you can. Please go to the MFA Device Registration Page. After you click on the Enter a Passcode button, there will be a blue line at the bottom of the window. Within this blue line, click on the Text me new codes button, and you will be sent a new set of 10 passcodes, regardless of whether...

If you are getting a "The request timed out (-1001)" error message when trying to use Duo Push, try the following steps: Within the Duo Mobile login screen, click on Other Options. Click on the Duo Mobile passcode button. On your mobile device, go into the Duo Mobile app, and click on...

Please contact the ITS Help Desk as soon as possible. If, after a 3-week period, the UH hard token has not been found, it will be removed from the system and can no longer be reinitialized. You will then have to purchase a new UH hard token for use with UH Login MFA.

Yes. The University of Hawaii is a member of the InCommon Federation. There are a growing number of Service Providers that are members of the InCommon Federation. These providers allow you to use our Web Login Service for authentication so that you may access the information and resources that...

In most cases, no. A UH hard token is specific to one person and cannot be transferred to someone else. The exception is department purchased UH hard tokens. Departments may submit a memo on department letterhead, signed by the department's dean/director/chair, requesting a transfer of a...

This could mean that your UH Username and password have been compromised. You should change your password immediately by going through the One-Step Password Change process. If you are authenticating via phone call, press 9 on the keypad to report fraud. The login will be denied and an email will...

If you have a question that isn't answered in these FAQs, please contact the ITS Help Desk.