Duo: Creating Backup Codes

If the device you normally use for Duo authentication goes missing or breaks, having backup codes will allow you access to your account. The easiest way to do this is to have Duo text you a list of codes that you can write down and keep in a safe place, like your wallet or your password manager.

If you cannot follow these instructions (your phone cannot receive a text message, or you do not have a phone authenticating your Duo account, for example), please visit or call the ITS Helpdesk at 507-222-5999 for assistance. If you call, please be prepared to coordinate a video call with us so we can verify your identity.

How to Set Up Backup Codes

  1. Go to password.carleton.edu

  2. Find the "Duo Two-Factor Authentication" section

  3. Click on "Manage your phones and devices"

  4. If you see this Duo screen, authenticate as usual
    Duo screen that reads "Enter code in Duo Mobile".

  5. Check to be sure that you have a device capable of receiving SMS codes selected (if you have multiple devices added, check the dropdown menu at the top of the screen and select an SMS-capable device, such as a phone)

  6. The page below should appear. If you do not have a phone authenticating your Duo account this will not appear.

    1.  If Duo automatically pushes to your phone, click "Cancel" at the bottom of the screen

    2. If Duo does not automatically push to your phone, proceed to the next step

at the bottom of the screen: pushed a login request to your deviceā€¦ Cancel

  1. Click on "Enter a Passcode" but do NOT type in a passcode

  2. In the lower right corner, click on "Text me new codes".  This will text a set of one-time use codes to your phone

    • Note: if the device at the top of your Authentication Methods is a landline rather than a cell phone, you may not see this option. Contact the ITS Helpdesk to generate bypass codes for you.

IMPORTANT: Now that you have a list of codes, write them down somewhere that is not your phone. Because these are backup codes, they are for use when your phone or primary device is unavailable. It is important to keep these in a safe place that can be accessed in the absence of your phone or cell service.
  1. You can now click "Send Me a Push" to log in (or you can just close the page)

  2. Once you use them up, you can repeat the steps in order to get more codes

Any new set of codes invalidates all old codes, including unused ones. This includes any time you authenticate with SMS codes. 
Was this helpful?
0 reviews
Report Issue

Details

Article ID: 137067
Created
Fri 8/20/21 10:34 AM
Modified
Fri 2/23/24 4:57 PM

Related Articles (1)

This guide will help you get started with Duo two-factor authentication.

Related Services / Offerings (1)

Get help with account or login issues including passwords, Carleton accounts (single sign on), Duo two-factor authentication, and computer logins.