How to use Touch ID

Touch ID is Apple's fingerprint recognition system, found on recent iPhones, iPads, and Mac computers. Touch ID can be used as a second-factor option with Duo at Caltech. It is considered one of the most secure options, and also can be very convenient.

Note: Touch ID is a platform authenticator, meaning that it must be on the same device you are using to access a system protected by Duo. For example, if you are logging in to a Duo-protected system on your Macbook laptop then you can use the Touch ID on that Macbook to complete the second factor authentication. You can not use the Touch ID on your iPhone to complete the second factor authentication for your laptop. Platform authenticators are only supported in browser-based applications. They can not be used in command-line or Windows login authentications.

How Touch ID works

Touch ID can only be used with browser-based applications. After you log in with your username and password, Duo prompts you to "Use Touch ID to sign in". Tap the Touch ID button.

How to set up Touch ID

1. Navigate to the Duo Device Management Portal.
2. Select "Add a device" then select "Touch ID" and "Continue"
3. When prompted to "Use Touch ID", tap the Touch ID button.

How to authenticate using Touch ID

1. Log in to a Duo-protected service using your username and password
2. Duo will prompt you to "Use Touch ID to sign in". If you do not see the this prompt, Duo may have defaulted to a different authentication method. Click "Cancel" then "Other options" and then "Touch ID" to manually select this option. If you do not see "Touch ID" in the list of options, you have not set up this method yet. Refer to the instructions above.
3. Tap the Touch ID button