If a token has been lost or stolen, please report this to the ITS Service Desk by submitting an IT request so that the token can be recorded as lost. This ensures it can no longer be used to access your UQ account or resources.
To continue accessing UQ websites and resources without a token you can generate a temporary MFA passcode that is valid for a limited time period, e.g. 8 hours, by accessing the MFA Management portal:
- When asked to MFA,select 'Need help?'
- Click the MFA recovery link: https://identity.uq.edu.au/mfa/recovery/login
- Log in with your UQ username and password.
- Enter your date of birth, then click ‘Continue’.
- Answer the security questions that appear, then click ‘Continue’.
- Under 'Device management', remove the lost, stolen or damaged Duo token.
- Under 'Temporary MFA passcode', click 'Generate passcode'.
- Select the number of hours you will need access for and click 'Generate passcode'.
- Write or print the passcode on a piece of paper and keep it with you; the code will be valid for any MFA authentication within the specified time period.
You can order a replacement Duo token through UQeMarket using catalogue number 080010. However, the Duo Mobile app (using your smartphone) is the most convenient way to use MFA for most people and may be preferable to using a token.
You can register your smartphone for MFA by installing the Duo Mobile app and activating via the MFA Management portal.
FAQs
What do I do if my YubiKey or Duo token is lost, stolen or damaged? If a token has been lost or stolen, please report this to the ITS Service Desk by submitting an IT request so that the token can be recorded as lost. This ensures it can no longer be used to access your UQ account or resources.
What happens if your Yubikey is stolen? ›
If you lose your Yubikey, you can still use your phone authenticator app, but you cannot create a backup Yubikey. However, Yubikey also provides methods to recover your account, so you can get a replacement. An advantage to Yubikey is that it comes on a USB that cannot be identified.
How do I activate MFA on my mobile device UQ? ›
How do I activate MFA on my mobile device?
- On your mobile device, download the Duo Mobile app from Google Play (Android) or the App Store (iOS).
- On your computer, go to the MFA Portal. ...
- Enter your date of birth and click 'Submit'.
- Click 'Add a new device'.
- Select the type of device you wish to add:
What do I do if I lose or break my yubikey? A. You will need to submit a work order to IT to replace your yubikey. Your account will be moved into a temporary group so that you can access your applications while waiting to receive the replacement key.
What happens if you lose your USB security key? ›
What happens if I lose it? When you set up your security key, you also set up backup methods you can use in case you lose your key. These include an authenticator app that lives on your phone, and a set of printed one-time recovery codes.
Is Duo compatible with Google Authenticator? ›
Duo 2FA does not provide support for software OTP applications like Google Authenticator, Authy and FreeOTP. However, you can use the Duo Mobile App with other online services and web applications.
Where do I get the QR code for Duo Mobile? ›
When you enroll in Duo for the first time and choose to add an Android device or use Duo Push, you're shown a QR code to scan with the Duo Mobile app to complete activation. Launch Duo Mobile and tap Set up account. To proceed with adding your initial Duo account to Duo Mobile, tap Use a QR code.
How do I see who has MFA enabled? ›
Option 1 Using Microsoft Entra Admin Center
- Sign-in to the Microsoft Entra admin center.
- Go to All Users residing under Identity»Users and select Per-user MFA. ...
- In the list of users, view the multi-factor authentication status field to see the current MFA status for each user.
Enable or disable YubiKey
- Access YubiKey management. Click “YubiKey management” in the menu on the left side of the screen.
- Enable or disable. Click the “Enable/Disable” toggle on the right of the YubiKey to change the status. Click “o*k” on the confirmation message.
You should store your YubiKeys separately and in a safe place. If you lose your YubiKey, Apple will not be able to help you access your account. There is no recovery method if you lose both of your YubiKeys. Apple answered it.
We at Yubico always recommend having more than one YubiKey. This way, one key can be used as a primary key, and the other can be used as a spare. Please note that for security reasons, the firmware of our products does not allow stored secrets to be read, meaning it is not possible to “clone” or "duplicate" a YubiKey.
What is the life expectancy of a YubiKey? ›
A Yubikey will essentially last forever, and if you stay clear of the insanity that is Passkeys its Webauthn element can support an infinite number of websites. Portability: I have a smartphone, a work laptop, a home laptop, and a home desktop. My Yubikey has USB and NFC, so it can trivially be used with all of them.
