Misplaced blame
After reading the negative reviews, I’ve come to the conclusion that people seriously need to take a moment to understand HOW 2FA works, WHERE and WHAT the roles/responsibilities lie and are for each vendor (eg Coinbase vs Duo), and WHY 2FA is important. Is the app perfect? No. Does it work well for what it was designed to do? Yes. Can it be improved? Yes.
Here is my wishlist to improve the usability of the app, hopefully the devs are reading! (1) I have well over 50 tokens (many from the same service), please introduce folders or a way to organize/group tokens. (2) Allow for custom icons instead of restricting it to just the ones you’ve decided to include; this would also help me find tokens more quickly. (3) Allow for token access from a widget on the lock screen (either display passcode or tap to immediately open the token in the app).
Here is my wishlist to improve the usability of the app, hopefully the devs are reading! (1) I have well over 50 tokens (many from the same service), please introduce folders or a way to organize/group tokens. (2) Allow for custom icons instead of restricting it to just the ones you’ve decided to include; this would also help me find tokens more quickly. (3) Allow for token access from a widget on the lock screen (either display passcode or tap to immediately open the token in the app).
Show less
Handles an annoying task with aplomb
I hate the time required to perform two-factor authentication, and so was dreading when my institution began to require it. I was pleasantly surprised that the Duo app handles this task rapidly, much more so than any other app-based or text-based method I’ve used. Usually within about 2 seconds, I can approve a request with a single tap of my Apple Watch (the notification includes an “approve” button) or via two taps of my phone. I wouldn’t hesitate to switch to this system for any other account I use.
EDIT: looking in another review, it appears that I could also be quickly approving with a single swipe or 3D-touch and tap from my phone. Perhaps a brief blurb instructing this within the app would be helpful because I would have been doing so all along!
EDIT: looking in another review, it appears that I could also be quickly approving with a single swipe or 3D-touch and tap from my phone. Perhaps a brief blurb instructing this within the app would be helpful because I would have been doing so all along!
Show less
Interface, interface
As far as working as a 2fac this app is fine, it does that. The issue with it is that it’s a really simple app but has an annoying interface. If the buttons for the push notification could be moved to a more thumb friendly location that would be great. It’s just a screen with 2 buttons, there’s no reason to make me adjust my grip on the phone so I can reach the accept button. I should be able to pick the phone up and hit the button in one motion. Not pick the phone up fumble with the position in my hand then hit the button. It’s annoying and unnecessary. The whole screen is there to use for this purpose and is empty. The buttons are large but the phone screen is also large and it puts the buttons out of comfortable reach for one hand use. Stack them in the middle or something. Maybe a flick gesture, or both, I dunno.
Show less
A great option for 2FA
Seeing all the low ratings based on a business’ or university’s decision to apply additional security to their networks, I had to add my two cents. It is 2FA, not Duo, about which most are railing. If you don’t like 2FA, rid the world of hackers and thieves that will use every available means to get into any network they can. Until you accomplish that, accept the fact that for those trying to secure a network, 2FA is a necessary precaution, much like a deadbolt on a door. And Duo is a good method for applying 2FA. We primarily use Duo Push for accessing our systems and it works very well.
Unrelated note: Duo works much better than this rating system, which will tell you after the fact that a nickname has been used but won’t suggest one that hasn’t been...
Unrelated note: Duo works much better than this rating system, which will tell you after the fact that a nickname has been used but won’t suggest one that hasn’t been...
Show less
Universities should reconsider
This service has added hours of frustration to my life on several occasions. Fortunately my graduate program posts grades on a different site from my university account, so I have mostly avoided signing on to the university site at all since it started requiring Duo. However, right now I really need to see my tax forms from my on-campus job, as well as my financial aid package for the summer. The Duo app was failing to send push notifications to my phone, so I deleted my account from the app and tried to re-add my phone number. Naturally, Duo is unable to add my phone number or provide any helpful support. Setup seems to be impossible unless you are able to contact an administrator, and as PT student I am almost always in class during my university’s office hours, so it is quite difficult to get IT help. As annoying as this service is to me, I am sure the IT people on campus hate it even more. Duo should either stop targeting universities, or consider providing its own 24 hour customer support. Perhaps some users appreciate the added security, but universities should really provide an option for students to opt out.
Show less
Works as it should
Whenever I attempt to log in to my firm’s resources, I must enter a password. Before approving the login, I am notified within seconds of the request and have large buttons to either approve or deny the login. It works well, and I’ve dealt with really clunky systems for two-factor authentication before.
Lots of student complaints about having to use two-factor here. Take it up with the schools, cause the app works as it should. [Best old man voice:] You kids these days don’t know how easy you have it. In my day, before smart phones, we had to walk around with a fob on our keychains that had a randomly generated number on it that cycled every 15 seconds. We had to (get ready for it) manually enter the eight digit number from the fob into the computer within that 15 second window, and if you mistyped a single number, it’s be too late; you’d have to wait for the next eight-digit number to appear and race to enter that one before it too expired. That’s what we were doing when we weren’t busy walking 20 miles in the snow each way to and from school—even in the summer—and working in the coal mines after classes.
Lots of student complaints about having to use two-factor here. Take it up with the schools, cause the app works as it should. [Best old man voice:] You kids these days don’t know how easy you have it. In my day, before smart phones, we had to walk around with a fob on our keychains that had a randomly generated number on it that cycled every 15 seconds. We had to (get ready for it) manually enter the eight digit number from the fob into the computer within that 15 second window, and if you mistyped a single number, it’s be too late; you’d have to wait for the next eight-digit number to appear and race to enter that one before it too expired. That’s what we were doing when we weren’t busy walking 20 miles in the snow each way to and from school—even in the summer—and working in the coal mines after classes.
Show less
Use for all my clients
I am a IT consultant with several clients and over the years I’ve watched as the security surface has changed.I can sit there and watch through packet monitors hackers constantly trying to get into Networks everywhere it’s really bad. I started using to go as a secondary factor authentication product to help alleviate the chances of intrusion into Networks and it is greatly improved security everywhere for all my clients. Or use it on VPNs RDP websites everything and do not see the problems that are listed in the negative reviews here. The best part of this is if we get a duo push and you didn’t initiate it, it is a way to tell me that credentials have been compromised and I can immediately changed what else do you need...
Written using voice to text excuse any typos.
Written using voice to text excuse any typos.
Show less
The worst app I have ever used
Once upon a time I could log into my school accounts with the click of a button. Then last year, that all changed. The entirety of my school was forced to download Duo and it forever ended ease of logging in. Instead of just having us choose stronger passwords or maybe having better security on the site we use, now it is of utmost importance that we have a second device on us every time we have to log in to our account. If you needed to access any part of your student account without having your phone on you it would be worthless to try. Not only this, but each different device you log into can only remember you for a maximum of 30 days!! And don’t even think about forgetting to check that tiny box because it will make you do it all over again even if you only logged out for a few seconds. The app stopped pushing notifications as well so you have to actually go into the app and find the option to approve a requests Honestly, I cannot believe that the University of Alabama encouraged the use of this app. I would rather have my account hacked and every piece of information stolen than ever have to use Duo again.
Show less
Push doesn't work, no way to remove
When my school introduced 2fa, I started the sign up process to see what it would entail, but was no longer interested as soon as I saw it was with duo and not google Authenticator, since this 2fa isn't required of me. (Also, the App Store wouldn't load.) However, despite not having the app downloaded nor saying that I had it, when I tried to log in I couldn't, because it wasn't "registered to the Duo system"?? I was forced to download this stupid app so I could log in, and had to submit a ticket to IT to have them remove it from my account. The push function also doesn't work, which is the only thing it has over Google Authenticator. I use Google Authenticator because it has a desktop app, and if I can't log in because I don't have access to my phone, with gmail I can also send a text to myself that will push to my laptop. Having duo would have meant there was no way to access my google drive that's connected to my school account without my phone, and that's something I need for my orgs and classes.
Show less
Great App
This is a fantastic app. I use it for basic integrations for SSH, SFTP and Windows Server RDP Login. The app does precisely what it says it will do.
My only request would be the ability to pull down the notification from the top of the screen and approve it. For example, if I want to access my SFTP server in a file app on my phone, I go to that app, then attempt to access my server. Once DUO notifies me of the login and gives me the attempt to approve or deny, I have to tap the notification and leave the current app. When I do that, the session closes and after I’ve clicked “approve” and go back to the app, it has closed out of the session. So I either have to access it from a device other than my phone, or disable duo.
Thank you for the hard work!
My only request would be the ability to pull down the notification from the top of the screen and approve it. For example, if I want to access my SFTP server in a file app on my phone, I go to that app, then attempt to access my server. Once DUO notifies me of the login and gives me the attempt to approve or deny, I have to tap the notification and leave the current app. When I do that, the session closes and after I’ve clicked “approve” and go back to the app, it has closed out of the session. So I either have to access it from a device other than my phone, or disable duo.
Thank you for the hard work!
Show less
