About USB security keys for Two-Step Login (Duo)

At Indiana University, you can use a USB security key to authenticate with Two-Step Login (Duo). For details about using USB security keys with Two-Step Login (Duo), see Security Keys and Duo. Alternatively, you can get a single-button hardware token from your campus Support Center; see About single-button hardware tokens for Two-Step Login (Duo).

To see how this works, view a video about using a USB security key with Duo.

If you wish to use a USB security key, you or your department will need to purchase one. UITS suggests using a FIDO2 security key, such as the Security Key by Yubico or the YubiKey 5 Series.

  • FIDO2 is a set of authentication specifications that includes Universal Second Factor (U2F) and Client-to-Authenticator Protocol, which is complementary to the W3C Web Authentication (WebAuthn) specification.
  • FIDO2 security keys work with Chrome version 70 or later, Firefox version 60 or later, Safari version 13 or later, and Opera version 54 or later.
  • To use a USB security key, your device must have an available USB port.

If you plan to use your USB security key with a group account, you should add it to your personal IU username first, and then add it to the group account. See Use Two-Step Login (Duo) with a group account.

This is document alnp in the Knowledge Base.
Last modified on 2020-05-29 10:32:24.