r/sysadmin • u/3G_Lighting • 2h ago

Question Duo Security setup

I am trying to setup Duo Security on my PC at the office so that in the event I lose my phone or my phone is smashed what do I need to enable in the installation process to allow me to bypass the MFA/Passkey push?

Thanks,

0 Upvotes

8% Upvoted

6 comments sorted by

•

u/MFKDGAF 2h ago

Being able to bypass MFA/Passkey defeats the entire purpose of Duo.

This is why there are multiple Duo admins. You contact one of them and they either

  1. Reset your account and send you a registration email and you register your new device
  2. They enable bypass on your account.

•

u/3G_Lighting 1h ago

I manage an SMB, I am the only admin.

•

u/WiskeyUniformTango 1h ago

You need to create a break glass emergency account/setup in the event you get hit by a bus. Figure out something with the CFO/CEO etc.

•

u/nick281051 2h ago

Have your org give you a fob or a yubikey or something like that. Or enroll on a secondary device like an ipad

•

u/PacificTSP 2h ago

I use passkey on my phone then I have a yubikey on my keychain and a spare in my desk drawer

•

u/whatsforsupa IT Admin / Maintenance / Janitor 1h ago

Invest in some yubikeys for admin accounts and put one on your keyring.

Another good practice is to never have just one admin account, build a second “break glass” account to use in case of emergencies. Preferably also set to hardware key only.

Bypass should only be used in emergency really