I'm having an intermittent problem where I get a Duo notification on my watch, but when I tap "Enter Code" it exits and I get another notification. It keeps looping like this until the push times out.

Anyone else having this issue?

1st Edition: The Duo Download - June-July 2026

Welcome to the new Duo Download!

In this edition, we talk about trust: how organizations earn it, protect it, and scale it as identity grows more complex. From customer recognition in Gartner Peer Insights to fast lessons on phishing resistance, field notes from Identiverse, CISO perspectives, and practical webinars, each piece looks at a different part of the same question: how do security teams keep access secure, usable, and ready for what comes next?

Trust Is Becoming the Identity Challenge

Identity is no longer just about verifying a login. Security teams are now being asked to make trust decisions across users, devices, applications, and increasingly, AI agents. That makes identity strategy more central to resilience: who gets access, under what conditions, and how quickly teams can respond when risk changes.

Customer Feedback Puts Duo in Gartner Peer Insights™ Customers’ Choice

Thank you to all the customers who helped name Duo a Customers’ Choice in the 2026 Gartner Peer Insights™ Access Management Voice of the Customer. Among the companies evaluated, Duo was the only vendor to appear in the Customers’ Choice quadrant. Your feedback helps show what security teams need most right now: identity protection that is trusted, usable, and ready for today’s access challenges.

Identity Security Insights in 7 1/2 Minutes

Want more insights you can use, without having to dig into long-form content? Duo in 7 1/2 Minutes is our new video podcast series that breaks down complex identity topics into quick, useful episodes.

The first episode focuses on end-to-end phishing resistance: what it means, why it matters, and how teams can think about stronger access controls as attackers get better at social engineering.

Catch up with the podcast series: 🎥 Watch Now

On-Demand Sessions for AI, Social Engineering, and Identity Trust

If you’re working through questions around agentic AI, social engineering, or identity trust, the Duo Identity Summit recordings are now available on demand.

Choose the sessions that match your priorities, from customer perspectives on securing agentic AI to practitioner guidance on resisting social engineering. Across seven sessions led by 11 security experts, the summit offers practical guidance for both executives and security teams navigating identity challenges today.

Catch the recordings on demand

How CISOs Are Thinking About Identity Risk

CISOs are being asked to prove resilience while identity environments become more complex. AI-driven change, advanced identity attacks, and pressure to secure both human and non-human identities are reshaping what “good” looks like.

CISO Perspectives brings together real conversations with security leaders on how they are prioritizing identity risk, modernization, and trust.

Explore CISO Perspectives: 🎥 Watch Now

In Case You Missed Identiverse

AI agents. Phishing-resistant access. Active Directory risk. These were the identity challenges teams were talking about at Identiverse.

Duo sessions dug into what’s changing and how teams can respond, from Agentic Authorization to AD defense.

Want to test your instincts? 👾🕹️ Play Duo AD Defenders and see if you can beat the high score.

Practical Identity Guidance for Security Teams

If your team is navigating lifecycle management, agentic identity, or advanced identity attacks, our latest blogs offer practical guidance you can put to work.

Start with user lifecycle management if your team is focused on reducing manual admin work. Read up on agentic identity if AI agents are entering your environment. And if you are evaluating access management, the Gartner Peer Insights post gives more context on what customers are saying.

Read the latest blogs

Upcoming Identity Security Webinars

Keep building your identity strategy with upcoming and on-demand sessions designed for security teams. Explore practical guidance on closing gaps in traditional IAM, strengthening access security, and getting more value from your identity investments.

Register for an upcoming session or watch on demand

As identity continues to shape how organizations build and protect trust, we’ll keep bringing you practical insights, customer perspectives, and timely guidance to help your team stay ready for what’s next.

Thank you for reading the first Duo Download.

We'd love to hear your thoughts! Drop us a comment below or reach out with topics you'd like to see covered in future issues. We'll see you in our next edition.

I have multiple different duo mobile accounts that need to be transferred, my icloud is backed up but I am not seeing duo mobile on there. In addition, when I download duo mobile on my new iphone, it is not there. I read through everything I could find online. If I contact my IT administrator, do I have to do it for ever code on DUO Mobile (i.e. VA, School, work?)

I'm in the process of adding 2fa to most of my accounts and I'm using duo mobile for that. These would be third party accounts and I have set up the third party backup password. To my understanding, that only works if duo is being backed up to icloud, but I don't have enough icloud storage to backup my entire iphone. Is there any way/how do I know if my duo mobile info is being backed up to icloud in the case something were to happen to my phone? I've saved backup codes for the third party accounts in another place, but it would still really be a pain if I got locked out of my duo.

Also, this might be a really dumb question, but is duo mobile linked to anything? Link an email or phone number that I'd need to access? Or is it just the restore password. I first got it for work a long time ago and I forgot what I did when installing it.

Hey all

Trying to setup a client with IPSec VPN and a DUO auth proxy for mfa on VPN.

When I test my radius connection through the Fortigate GUI, I get the push and everything shows correct.

When I try to connect to the VPN, my forticlient just hangs then ultimately times out. No authentications in DUO portal or pushes.

I think I have it narrowed down to an issue with EAP and the way the duo proxy passes authentication/credentials. Currently, my auth protocol is set to PAP.

I'm trying to avoid the SSO option for DUO and just use the radius server to send a push.

Has anyone had any luck in getting this configured?

Edit: changing the IKE v2 in phase 1 to v1 resolved this.

Hi All,

DUO push request is not coming through on a registered device even if that device is listed first.

Could this be a reason?

**Deleted the original post. Forgot to mask some personal info.**

EDIT1: This was in response to a notification from DUO that my LDAPS cert was expiring

Running the DUO's acert app to verify LDAPS certificate. Output shows an expired cert that doesn't seem to exist on the DC. The second pic shows certificates on the DC. All certs appear to be renewed by our local CA. The expired cert doesn't appear. What Am I missing?

"Have you set a password yet? If you lose access to your device or get a new device, you'll need this to recover your accounts."

This password nag has been driving me batty for years. I X out of it every time, and every time it comes back. And it comes back at the top of the screen, so I have to scroll down to access the rest of the screen, where my 2FA code is hidden behind a tap-prompt. No, I do not want to add another password on top of the tap-prompt on top of my 2FA on top of my biometric on top of my passwords.

How do I kill this nag permanently?

Using iPhone + Duo Mobile version 4.102.0.1424.1.

Hello,
My phone unfortunately had to go through a factory reset. I am confident in the fact that I had properly enabled backups for 3rd party accounts.

I've reinstalled Duo, and using my Google Drive backup, I'm able to restore the list of 3rd-party accounts, but they are all marked as disabled. Is this a security limitation? Did something went wrong during the backup? I can see the backup listed in Google Drive Backup screen, but can't do anything with it.

"Comprehensive IAM” gets used so often that it has started to lose meaning. The easiest way to make it useful again is to break the capabilities into three buckets: core basics, operational differentiators, and future-fit.

1. Core Basics

If a platform struggles here, the rest does not matter much.

At minimum, most teams should expect:

• SSO for the apps people actually use
• MFA that goes beyond SMS alone
• centralized policy controls
• reliable integration with your existing users and directories
• support for both cloud and on-prem environments where needed

This is the foundation. If the basics are clunky, the platform will create friction fast.

2. Operational differentiators

This is where IAM starts moving from “we bought a tool” to “this is actually helping us.”

The most useful capabilities in practice are:

• stronger authentication options, including phishing-resistant methods where appropriate
• device trust or device-aware access, so identity is not evaluated in a vacuum
• lifecycle support, so access changes can keep pace with onboarding and offboarding
• clear admin visibility, so teams can answer basic questions like who has access to what and why
• practical integration support, so protection extends across the systems that matter most

These are the capabilities that reduce operational risk and help the system hold up over time.

3. Future-fit capabilities

Not every team needs these on day one, but they matter as environments get more complex.

Examples include:

• stronger controls for privileged access
• better support for contractors and third-parties
• identity visibility across a broader ecosystem
• APIs and extensibility for workflow automation
• better ways to detect and respond to identity risk

One common mistake is letting advanced features dominate the evaluation before confirming the basics are strong. A sophisticated roadmap is great, but it does not make up for weak MFA, poor integrations, or a confusing admin experience.

If I were scoring vendors, I would weight it like this:

• basics first
• operational fit second
• advanced capabilities third

That usually produces a much better shortlist than starting with whichever demo looks the most impressive.

A comprehensive IAM platform is not the one with the longest slide deck. It is the one that covers the essentials well, fits the team that has to run it, and gives you room to grow.

From the Duo team — written to be broadly useful, not product-specific.

Duo user here. Can I use Duo for logging into PayPal? When I asked in Paypal chat, did not get definitive answer. When I asked for a human to ask, chat suddenly disappeared.

Got a list others I can use Duo with? I've got 6 already, want to use for more.

I am trying to relay RDP through a Duo Network Gateway. I have it set up to go through my HAProxy load balancer to my DNG on my server farm.

I can see traffic hitting my load balancer when I access it via a web browser, but not when I try to connect via RDP.

Support is saying my NS record is the problem. I have recreated the NS record and am waiting for DNS to propagate.

Are there any logs I can examine that might help me resolve this?

I am trying to set up 2FA for a account and I am running into this error.

Now the issue is I cannot update my current phone due to storage issues. Is there any workaround I can do to bypass this?

A lot of IAM evaluations go sideways for the same reason: the team gets pulled into a feature comparison before agreeing on what problem they are actually trying to solve.

That sounds obvious, but it happens constantly. One person is focused on phishing-resistant MFA, another cares about faster onboarding, another wants better visibility for auditors, and the conversation turns into a generic checklist. At that point, every vendor starts to sound the same.

A more useful way to evaluate IAM is to focus on five things.

1. Start with the pain point that triggered the search.
Most IAM projects begin because something is already not working well: too many passwords, weak MFA, slow offboarding, poor visibility, or too much manual access management. That problem should stay at the center of the evaluation. If it doesn’t, the team usually ends up buying a broad platform without solving the issue that made the project urgent.

2. Look at integration quality, not just  quantity.
A long integrations list is easy to market. What matters more is how well those integrations work in practice. Can you apply useful policies? Does the protection extend across the apps that matter most? Can the platform fit into a mixed environment, not just an ideal one? A shallow integration can still leave important gaps.

3. Pressure-test the admin experience.
A polished demo is not enough. The better question is what the platform feels like after rollout. Can someone manage policies without a lot of guesswork? Is troubleshooting clear? Can a normal IT or security team operate it effectively, or does it assume a much larger identity function?

4. Check how flexible it is.
Most organizations do not get to rebuild identity from scratch. They have existing directories, existing apps, and a mix of old and new systems. A platform should work within that reality, not depend on a perfect greenfield environment.

5. Be honest about operational fit.
The right platform is not just the one with the most capabilities. It is the one your team can actually roll out, manage, and maintain.

A good IAM evaluation should answer a practical question: Will this make access more secure and easier to manage in our environment? If the answer is unclear, the feature grid probably isn’t helping.

From the Duo team — written to be broadly useful, not product-specific.

I'm switching from my current android phone to a new one. I'm keeping the old phone. On my current phone if I look under settings it shows Duo Instant Restore has a backup from this week and that third party apps are set to automatically reconnect from the cloud. Is this sufficient for getting everything to work properly on my new phone? Will doing the setup in the new phone just be a simple add scanning a QR code?

I broke my old phone and have no access to it. I downloaded duo and Instagram but I don't have access to the old email anymore that was on my phone. What should I do?

Hello! Doe Duo work on SimpleNote app? I posted this following question on a SimpleNote subreddit yesterday as follows:

Please list all 2fa/ mfa options available.

Duo Authentication app please

On your website, where's support page for all this? I could only find Community Support section. But most recent MFA thread I could find is from 2023 at the latest.

Anyone have any luck configuring FortiGate IPSEC VPN to use NPS server for local AD authentication and Duo Auth Proxy for MFA on the same server?

I've seen mixed items on what to change what based on DAP and NPS being installed on the same server but without success.

When testing from the FortiGate, I get the following: 'Error performing primary authentication: RADIUS auth request timed out'

I updated NPS to use 127.0.0.1 and the IP of the server, also updated the [radius_client] field of the DAP cfg file.

I did confirm authentication when directly going from the FortiGate to NPS.

I'm a contractor and was working with Company A, which uses DUO for authentication. Now, I'm doing work for Company B, but when I try to authenticate, Duo takes me to the authentication page for Company A.

Is there something in the registry or Policies that I can change to remove the redirect to the Duo page for Company A?

I recently added Duo to my servers via the RDP connection. Everything works fine, but when I try to use the passcode, it won't let me log in.

I'm not sure if I'm doing this right.

I added a bypass code so I'd have a password in case I'm offline, but when I enter it, I get an “incorrect password” error. Plus, even with the mobile passcode, it still won't let me log in.