Multi-factor authentication (MFA) is security beyond the password and adds an additional layer of protection to our online services. Duo is our two-factor authentication method used for logging into select online services. Duo requires two factors for successful access:

• something a user knows (username and password)

• something a user has (mobile device app, phone, or key)

Unfortunately, individual passwords are compromised on a daily basis via email phishing attempts and other malicious activity. With Duo, it is not likely that an unauthorized user can supply both factors to access Battle Ground Public Schools online services. Duo will increase the level of security for your account and the important and confidential work we all do.

No.  There is no district-related information being used to authenticate your identity. 

No personal data is stored by Duo other than your phone number to identify your app or to send your messages with codes which change at every login.  None are stored on your device.  Duo does not know your password either.

It does not access your other apps or other data on your phone; it only stores a digital certificate that identifies your phone to ensure accurate identification. 

To use the SMS option with Duo for your Windows login, click the "Enter a Passcode" option, then click send Text me new codes"  This will generate a passcode and text it to you.  These codes are good for one hour.  

Passcodes are set to expire in 24 hours and are only good for five uses and cannot be used again. 

Yes.  You can rename your device, add a new device, or update your phone if you login to the Duo Portal.  You can also update your authentication option and manage devices if you choose "Other options" when logging into a Chromebook or your Google account.  For more information, including screenshots, you can access the final step in our step-by-step How to Use Duo Guide.

First, hang up or close your phone and contact the helpdesk immediately to research the issue. 

You will need to contact the helpdesk between the hours of 7 AM and 4:30 PM for assistance before you can login.  They can issue a bypass key which is good for 24 hours and can be used 5 times.  We strongly recommend that you set up a backup access method if you are going to use a hardware key, such as the Duo Mobile Push or SMS option.  

Open the Duo Mobile app on your phone and access the three bar menu on the left side.  Select "Notifications."  This will open your phone's notification settings where you can allow notifications for Duo.  You can also go directly to your phone app notification settings and allow notifications for Duo.  If you are still not receiving push notifications you can try uninstalling and reinstalling the app.

Another option is to open the app to access the approve button instead of using the push notifications.  

Yes, you can enroll using a cell phone without the app.  When you enroll select Other as your type of phone and follow the directions to set up using only Text/SMS messaging.  Duo will send you a text message with a code to use or you can choose to receive a phone call instead that will allow you to use a non-smartphone or will allow you to use Duo without downloading the app.  

 Log into Duo Portal page and "Add a Device", and select the method that works best for you.  It is always a good idea to have more than one option.

No, your information is only used for the Duo login process.

Often times, people log into the same service many times per day. At the first successful login for the day, you can select Remember me for 10 days. For the next 10 days, accessing the specific service from the same computer and Web browser will require only a username and password.  If you are using a mobile device (like a Chromebook) and change to another you may get asked to supply the second factor.  An example of this would be moving from the district network to your home network.

If you delete your Duo Mobile app or restore your mobile device, go to your app store and install the Duo Mobile app once again.  If you don’t see Battle Ground Public Schools as an option in your Duo Mobile app, log into Duo Portal, click "Add a Device", and enroll your phone and the app once again.

All staff and administrators are enabled to use Duo to log into district resources.

You have the ability to enroll and manage the below device types for use with Duo:

• Mobile Phone – push to Duo Mobile app or passcode via text message

• Tablet or iPad – push to Duo Mobile app

• Yubikey USB Token – USB device to press each login

  • It is highly recommended that you enroll more than one device if you choose the Yubikey option.  A great example is to use the phone callback option and have them call your personal cell.

If you lose your phone, or any other mobile device enrolled Duo, contact Helpdesk to resolve the issue.  They can issue a bypass code which is good for 24 hours during which time it can be used at most 5 times.

If you have multiple devices connected to your Duo account and you can still login, you can login to a Chromebook or your Google account to get access to the "Other options" button during the login process.  Click on "Other options" and then select "Manage devices" at the bottom to remove the device that was lost.  For screenshots and more information on this step go to the final step in the How to Use Duo Guide.

Yes, you can still use your mobile phone but the push notification will not work.  You can enter the one-time-use passcode located in the Duo Mobile app to complete the Duo process.  NOTE: This passcode will change with each login attempt.  Just open the app on your phone and click "Show" next to the passcode, then type that 6 digit code into the passcode field on the device prompting you to authenticate.

If you get a new phone log into the Duo Portal and click the "I have a new phone" option under your current device.  Follow the prompts there to update your new phone.  If you want to add a new device to your account, log into the Duo Portal and click the "add a device" option and follow the prompts.

Android:  

1. Open your menu and go to Settings.

2. Select “Apps.”

3. Scroll down and tap “Permissions” or "Permissions Manager."  This may be located under three dots on the top bar of the Apps menu.

4. Find the app to disable the camera and tap it.

5. Tap “Camera.”

6. Find the Duo Mobile app and tap it.

7. Adjust permissions as needed.

Apple:

1. Open your menu and go to Settings.

2. Select "Privacy"

3. Scroll down and tap "Camera"

4. Find the Duo Mobile app and click the toggle switch next to it to disable it

 Contact the Help Desk immediately if your phone is lost or stolen. The Help Desk will disable it for authentication and assist you with registering another device. 

Yes. The passcode option on the Duo app does not require WIFI or cellular connectivity, it even works on airplane mode. To use this option, open the Duo app on your smartphone, and tap "Show" to obtain a passcode. Enter the passcode into the Duo prompt when logging in.

The minimum supported operating system version for Duo Mobile version 4 on Android devices is Android 8. Duo Mobile was removed from the Play Stores for Android 6 and earlier versions. Users are encouraged to upgrade to the latest version of Android supported by their phones and install the current Duo Mobile release from the App Store if running Android 8 or later.

The minimum supported operating system version for Duo Mobile version 4 on Apple devices is iOS 13. Duo Mobile was removed from the App Stores for iOS 11 and 12 and earlier iOS versions. Users with compatible devices are encouraged to upgrade to the latest version of iOS and install the current Duo Mobile release from the App Store.