When you approve a Duo Push request for passwordless login, you will need to perform biometric or PIN/passcode verification to finish approving the login request. Your phone's security settings must require biometric identification (like Face ID or fingerprint), PIN entry, or passcode entry to unlock the device.

Duo Push: This lets you approve a login request pushed to Duo Mobile on your Android or iOS device instead of entering a password.They can move from one system you use to access services and applications protected by Duo to another, such as a USB security key you unplug from one laptop and plug into another. Roaming authenticators: These authentication devices are WebAuthn FIDO2 security keys with biometric or PIN verification, like those from Yubico or Feitian.You will need to use your username and password to log in on that second computer, and complete Duo two-factor authentication to access the application, or to set up Windows Hello for passwordless on the new computer. If you were to set up Windows Hello to log in to Duo Passwordless on one computer, then switch to a different Windows computer, Windows Hello on the second computer won't log you in to Duo. When you set up one of these methods, it's effective only for the system where you set it up. Examples of platform devices would be Touch ID on Mac, Face ID on an iPhone, Windows Hello, and Android biometrics. Platform authenticators: These are authentication methods built into the device you use to access services and applications protected by Duo.Supported Authenticatorsĭuo supports these passwordless authenticators: If you change devices, access an application that doesn't use Duo Single Sign-On, or if the passwordless verification method isn't available when you are logging in to an application - such as if you forgot your registered security key, you are using a different browser that doesn't have your push cookie, or you've closed your laptop so you can't scan your fingerprint - then you will enter your password to log in to the application. Instead of typing your password on the Duo SSO login page, you'll use your device to verify your identity. Log in From a Different Device or Browserĭuo Passwordless works with applications that use Duo Single Sign-On (SSO).Passkeys with Apple Devices and Browsers.Face ID or Touch ID on an iPhone or iPad.

Fido2 windows hello