Duo Security Frequently Asked Questions

2-Step Verification helps protect your account from unauthorized access should someone manage to obtain your password. Even if a password is cracked, guessed, or otherwise stolen, an attacker can’t sign in without access to the user’s additional verification. After logging in with your username and password, you’ll be prompted to verify your identity—the second step—using something in your possession, such as a mobile phone with the Duo Mobile App, Duo Backup Code or Duo Token.

ATTENTION: The College is currently beginning the process of migrating and requiring all users to use Duo Security for 2-Step Verification

• All alumni and students not enrolled for courses began receiving an enrollment prompt on 12/19/22
• Students enrolled in courses are being prompted in segments for Duo prompt enrollment as of 1/16/23

All users are required to enroll to protect their personal data and improve overall security by enabling 2-Step verification. Many other Colleges and Universities have implemented 2-Step verification, as have most major service providers such as Google, Facebook, and Twitter. Please consider enabling 2-Step verification not only for the College but also for your other personal accounts.

The College has partnered with Duo Security to provide all users with the best 2-Step Verification experience possible. All users will be prompted to enroll in Duo Security when they log in to delaGATE. The primary method for securing your account using Duo Security is the Duo Mobile smartphone application.

Apple device running iOS 15 and higher (iPhone 6s and below is not compatible) (As of May 2023)
Android device running Android 11.0 or higher (As of May 2023)
You must have a lock screen enabled with security provided by a passcode, pattern lock or biometric login (touch ID/face ID)
You must download the free Duo Mobile App. Apple iOS – dccc.edu/duoapple and Android – dccc.edu/duoplay)
Your device must not be rooted or jailbroken.

Duo Mobile cannot access things like your contacts, photos, text messages, and emails. Duo Mobile does not perform any GPS tracking and does not require access to GPS. Please review this article for more information:

A physical hardware token is available for sale at all of the College’s Bookstore locations and via the College’s online storefront.

Students with financial insecurities who are in need of a Duo Token (D-100) should complete a Duo Token Financial Assistance Form, which the Student Resource Center will evaluate.

The Duo Token (D-100) costs $20 and has a lifespan of approx. two years. The Battery cannot be replaced.
The Duo Token cannot be transferred to another user once registered with DCCC’s system.
The Duo Token is non-returnable and non-refundable
Duo Tokens purchased at the College’s bookstore will only work with the DCCC Duo System.

Please follow the instructions found here to register your token. Duo Tokens are immediately activated once registered in the system.

Currently, the College does not support YubiKey’s Duo Security System for Students or Adjunct Faculty. All users are able to register a YubiKey as a Duo Security Key; however, it will not work when attempting to log in to the College’s computers, which use the Duo Windows Client. OIT does not provide support for any YubiKey unless it was provided to an employee by the College

Many College students and staff are already set up for 2-Step Verification and use Duo Mobile to generate an authentication code. The app is currently operating in ‘Third-Party’ mode, which does not provide the required level of protection. Please follow the enrollment steps to set up your device with Duo Mobile. Once set up, you can delete the ‘Third-Party’ token from the Duo Mobile app for delaGATE.

Watch the video below for step-by-step instructions on how to enroll your account in 2-Step Verification.
You can enlarge this video by clicking the box icon in the lower right-hand corner once the video starts.
You can enable HD by clicking the setting gear, clicking quality, and change to 1080

How to Enroll in Duo Security when prompted during delaGATE Login:

How to Enroll in Duo Security using the delaGATE Account Management Page (Not Prompted at Login):

1. Click Deny and then Yes, as it was a suspicious login.
2. Contact the IT Support Center and let us know that you received a fraudulent push.
3. We strongly advise that you change your password, as it is possible that it has been compromised.

Please contact the IT Support Center at 610-359-5211

All applications that use delaGATE for authentication. 2-Step Verification is also required to login into Employee computer systems and for all remote access by employees.

No. There is no option to disable it.

Please note that OIT cannot disable 2-Step Verification on any account. If users cannot access the account, they must follow the 2-Step Lockout procedure to gain access to the account.

Your account will lock after too many failed attempts to authenticate. The lock-out will automatically be removed after a period of time.

Users with 2-Step verification should always have a backup mode configured. All users must print a list of one-time-use verification codes during the enrollment process, as outlined in the video above.

If you do not have access to your backup verification codes, you should contact the OIT Support center during regular operating hours (Monday – Thursday, 7:30 a.m. – 10 p.m. EST, Friday, 7:30am to 5:00 pm and Saturday, 8 a.m. – 4:30 p.m. EST).

You may come in person to the IT Support Center at Marple with a valid Government Issued Photo ID or Passport or remotely by connecting to a Zoom video session, with Video enabled with a valid Government Issued Photo ID or Passport.
You will also be asked a series of authentication questions.

The Duo Mobile application uses a very small amount of data to send push notifications. If you received 500 push notifications per month, that would equate to 1 MB of data usage. Less than loading one web page to your mobile device. You may disable push notifications if you do not want to use any data; however, you will have to manually enter a code from the app as a passcode to log in. Data fees may be incurred during the installation of the application and during any updates if auto-update is enabled. We recommend connecting your device to the College wifi system when on campus.

The Duo Mobile app can generate passcodes with no Internet or data to generate codes. We recommend connecting your device to the College wifi system when on campus to ensure the best user experience.

If you are migrating between Apple and Android, you should log in prior to disposing of your old phone and add your new device. If migrating between similar devices and you have cloud backups enabled, you can use Instant Restore. Please see the videos below:

Please review this video if you’re migrating from iPhone to iPhone:

Migrating from Android Phone to Android Phone:

There are two reasons you could be getting this message. To better secure your accounts, users may not connect from TOR endpoints or networks used to anonymize or proxy traffic. In many cases, using a VPN to obscure your location will cause an ‘Access Denied’ message. Disable your VPN and try again.

In order to comply with U.S. regulations, Duo blocks authentications from users whose IP address originates in a country or region subject to economic and trade sanctions enforced by the U.S. Office of Foreign Assets Control.

OFAC restrictions relevant to Duo currently apply to the following countries or regions:

• Cuba (CU)
• North Korea (KP)
• Iran (IR)
• Sudan (SD)
• Syria (SY)
• Crimea region (43)
• Donetsk region (14)
• Luhansk region (09)
• Sevastopol region (40)