Set up a platform authenticator


Follow these steps to set up a platform authenticator for Duo two-factor authentication (2FA) at the University of Washington. Once you set up your platform authenticator, you can use it to sign in with 2FA while on the configured device.

What is a platform authenticator?

A platform authenticator is a device specific function that stores secrets. It uses the device's built-in features, like biometric sensors, to verify authentication using those stored secrets. You can learn more about the technical details at https://www.corbado.com/glossary/platform-authenticator.

Requirements

Not all devices support platform authentication. Your device must support a type of platform authentication that is also supported by Duo. For a list of compatible device configurations, refer to Duo supported Platform Authenticators. Additionally, platform authenticators only work on the specific device where they are set up. For example, if you set up biometrics on your phone, you can't use that phone's platform authenticator when signing in on your computer.

Set up your security key

In your browser

Follow these steps using a compatible browser:
  1. Navigate to https://identity.uw.edu/2fa
  2. Sign in with your UW NetID and password.
  3. If you haven't already, agree to the Duo terms of service.
  4. Click the "Manage 2FA Devices" button.
  5. If this is your first 2FA device, read the brief information to "Protect Your University of Washington Account". If you already have a device set up, sign in with one of your 2FA devices and click "Add a device".
  6. Select the Platform Authentication option that is available for your device. This may appear as FaceID/TouchID, Android Biometrics, or Windows Hello.
  7. Click Continue.
  8. A pop-up window will open. If it does not, you may need to temporarily adjust your browser settings to allow a pop-up window.
  9. Follow the prompts to register your platform authenticator.
  10. Set up is complete. Duo will show "My Settings & Devices". Note: the 'check enrollment' button will not work correctly if the only enrolled device you have is a security key. If you reach the device management screen after enrolling the device, you've successfully completed the enrollment process. On this screen you can change the name of your device or add another device (recommended).

What's next?

Now that you have set up your device, you're ready to sign in with 2FA when it's required. We also recommend setting up one other device in case you lose your primary device. Need help? See 2FA FAQs or contact us for support.