Duo Multi-Factor Authentication (MFA) adds a second layer of security on top of your password. After you sign in with your CWID and password, Duo verifies it's really you by sending a notification, code, or call to a device you own. Even if someone steals your password, they can't get into your account without this added level of authentication.
Who has to enroll?All FHDA users — students and employees — must enroll in Duo MFA to access MyPortal.
How do I get support for Duo MFA?If you are experiencing issues, you can get assistance with Duo setup, device enrollment, and other technical troubleshooting by emailing [email protected] or calling 650-469-8484.
Duo MFA FAQs
What do I need to enroll in Duo MFA?
- A computer to sign in to MyPortal
- A mobile phone (iPhone with iOS17+ or Android 12+ recommended) with the Duo Mobile app installed (you can find the app on the Google Play Store or Apple App Store)
- Your CWID and MyPortal password
What if I don't have a smartphone?
You can enroll a regular mobile phone or landline to receive SMS passcodes or phone calls instead of push notifications. Choose Phone number at the "First, add a device" screen during enrollment.
Can I use only Touch ID?
You can, but it's strongly discouraged. Touch ID only works on the one device it was set up on, so you'd be locked out from any other computer. Always pair Touch ID with Duo Mobile or a phone number as a backup.
How long does enrollment take?
About 3–5 minutes if Duo Mobile is already installed on your phone.
I already use Duo Mobile for another organization. Do I need to install it again?
No. The Duo Mobile app holds multiple accounts. Just complete the FHDA enrollment in MyPortal and the app will add a new "FHDA" account alongside any of your existing ones.
Do I have to scan a QR code?
Usually yes, but Duo may skip the QR code step automatically if it can verify your phone another way. If you go straight from "Verify passcode" to "Added Duo Mobile", that's normal.
The QR code expired before I could scan it. What should I do?
Click "Back" on. the computer browser, then reenter the QR code step to refresh it. Scan with the Duo Mobile app right away, as the codes typically expire within a few minutes.
Should I add a backup method?
Yes. Always enroll at least two methods. (for example, Duo Mobile and Touch ID, or Duo Mobile and a second phone number). If you lose ot replace your primary device, the backup keeps you from being locked out.
What happens when I log in to MyPortal now?
You enter your CWID and password as usual, then approve a Duo prompt — usually via a push notification you tap on your phone. After that you're sent to the MyPortal homepage.
What does "Yes, this is my device" / "Trust this browser" do?
It tells Duo to skip the prompt on this specific browser for 15 days. After 15 days, or on a different browser or device, you'll be prompted again.
I tap "Yes, this is my device" but Duo prompts me again the next day. Why?
Most often, the browser is clearing cookies (private/incognito mode, "clear on exit" settings, or strict privacy extensions). Duo's trust cookie can't survive a cookie wipe.
No push notification arrived on my phone. The screen shows a 6-digit passcode instead. What should I do?
That's Duo's fallback. If that happens, open the Duo Mobile app, find your FHDA account, and type the 6-digit passcode shown on the computer into the app. It happens when push delivery fails (for example, a poor network connection, notifications turned off on your device, etc.)
Why are my login options suddenly limited (only Verified Push or Bypass Code)?
Duo flagged the login as higher-risk — for example, a login from overseas or an unfamiliar Internet Protocol (IP) address. The limited options are extra protection. Use Verified Duo Push (which makes you confirm a number on screen in the app).
How do I add another device after I've already enrolled?
- Sign in to MyPortal in an incognito browser or private window (so the Duo prompt appears).
- At the Duo prompt, click "Other options" → scroll down → click "Manage devices".
- Verify your identity, then click "Add a device" in the Device Management Portal.
I just got a new phone. How do I move Duo to it?
- Open the Device Management Portal (above).
- Click I have a new phone on your old device's card.
- Follow the prompts to scan a new QR code with the Duo Mobile app on your new phone.
Helpful Tip: Do this before wiping or returning your old phone, since you need it to authenticate into the device-management portal.
How do I rename or delete an old device?
In the device-management portal, click the Edit (pencil icon) on the device card. From there you can rename it or remove it. Don't remove your only device — you'll be locked out.
The Duo prompt is skipped and I land straight on MyPortal — how do I get to the Device Management Portal?
If that happens, your browser is currently trusted. Open an incognito browser or private window and sign in there — the prompt will appear and you can reach the "Other options" and then "Manage devices" screens.
The Duo Mobile app is installed but I'm not getting push notifications.
- Make sure notifications for Duo Mobile are enabled in your phone's settings.
- Check that the app has network access (via Wi-Fi or cellular data).
- As a fallback, type the 6-digit passcode shown on the MyPortal screen into the Duo Mobile app.
I'm overseas or on a Virtual Private Network (VPN) and my login options are limited.
That's intentional — Duo restricts methods on higher-risk logins. Make sure to use the Verified Duo Push – the app shows a number you confirm.
I tap the green check on the push but nothing happens on the computer.
Refresh the MyPortal browser tab. If the Duo timer expires before you approve, the prompt is invalidated and you will need to start the login over.
Can I disable Duo for my account?
No. Duo is required for all FHDA MyPortal access for all students.