Every time you tap Approve on a Duo push notification, you’re doing more than logging in — you’re confirming that you’re you.
Pitt Passport and Duo multifactor authentication work together to protect your account from unauthorized access, even when someone else has your password. It’s one of the most effective security measures available, and it’s running quietly in the background every time you access a Pitt service.
Here’s a closer look at what Duo is doing for you — and a few ways to make sure it’s working as well as it can.
🔒 Know Who’s Logging In
Multifactor authentication (MFA) is one of the most effective security measures available. That’s because while passwords can be guessed, stolen, or leaked, MFA helps to confirm the person logging in is really the person who owns the account.
🔓 Teach Duo How to Trust
Every time you log in from your personal laptop or phone, Duo is paying attention. If you check the “Remember me” box when approving a push notification, Duo will recognize that trusted device for the next 24 hours. That way, you're not reaching for your phone every time you open a new Pitt service during a single day.
“Remember me” should only be used for devices that are truly yours — never on shared or public computers, like in a computing lab or on a borrowed device.
📵 No Signal? No Problem
If you’re ever in a situation that requires you to log in with spotty Wi-Fi, Duo has your back. On the Duo login screen, select Duo Mobile Passcode. Then, open the Duo Mobile app, tap University of Pittsburgh, and it generates a one-time passcode you can use to log in without any internet connection at all.
📲 Add a Backup Device
Duo doesn't have to live on a single device, and it's better when it doesn't. You can register a tablet, a second phone, or even a landline as a backup — so a lost phone or a cracked screen doesn't leave you locked out at a critical moment. To set it up before you need it, head to accounts.pitt.edu > Login & Security > Add/Manage Pitt Passport Devices.
🚨 Random Notifications Aren’t Random
Duo doesn’t send you random notifications. That means that any notification you receive from Duo is initiated by someone who is trying to log into your account. If you’re actively logging in, that person is you. But if you receive a Duo push notification at any other time, that could be someone trying to break into your account.
If that happens, don’t panic. Deny the Duo request, report it as fraudulent to the Technology Help Desk, and change your password immediately. Then, you can thank Duo for giving you a heads up.
🔄 Updates Make Duo Stronger
Like any security tool, Duo Mobile works best when it's up to date. Updates keep the app running smoothly and help ensure you're protected against the latest threats. If you have automatic updates turned on, you're set. If not, a quick check in the App Store or Google Play is all it takes.
It's easy to tap through a Duo notification without a second thought. But that simple tap allows Duo to verify your identity to make sure your Pitt account is accessed by the right person each time you log in.
— Pitt Digital
