About USB security keys for Two-Step Login (Duo)

At Indiana University, you can use a USB security key to authenticate with Two-Step Login (Duo). For details about using USB security keys with Duo, see Security Keys and Duo. Alternatively, you can get a single-button hardware token from your campus Support Center; see About single-button hardware tokens for Two-Step Login (Duo).

If you wish to use a USB security key, you or your department will need to purchase one. UITS suggests using a FIDO2 security key, such as the Security Key by Yubico or the YubiKey 5 Series.

  • FIDO2 is a set of authentication specifications that includes Universal Second Factor (U2F) and Client-to-Authenticator Protocol, which is complementary to the W3C Web Authentication (WebAuthn) specification.
  • FIDO2 security keys work with Chrome version 70 or later, Firefox version 60 or later, Safari version 13 or later, Microsoft Edge version 79 or later, and Opera version 54 or later.
  • To use a USB security key, your device must have an available USB port.

If you plan to use your USB security key with a group account, you should add it to your personal IU username first, and then add it to the group account. See Use Two-Step Login (Duo) with a group account.

This is document alnp in the Knowledge Base.
Last modified on 2024-03-15 14:57:57.