Reduce Duo Prompts While Maintaining Security: Duo Desktop + Duo Passport Now Available

Completing Duo/multi-factor authentication (MFA) several times a day can interrupt your workflow and slow you down.

To improve the balance between security and usability, Tufts is rolling out Duo Desktop + Duo Passport to the Tufts community by the end of May.

What You’ll Notice

With Duo Desktop + Duo Passport installed:

• You may only need to complete Duo MFA once per workday per device
• Your authenticated session can carry across:
  • Browsers and tabs
  • Duo-protected websites
  • Supported desktop applications

This means fewer interruptions—without reducing security.

Rollout Information

Beginning May 21, Duo Desktop functionality will automatically be pushed to most Tufts-owned devices.

How to Get Started

If you have a Tufts managed machine that doesn't receive the push you can access thru the self-service: by: 

• Open Tufts Self-Service Apps
• Install Duo Desktop
• That’s it—no additional setup required

Once installed, Duo Desktop runs in the background. After you authenticate (with your Tufts credentials) through Tufts systems (e.g., Shibboleth or Microsoft Azure), you should begin noticing fewer MFA prompts.

What Is Duo Desktop?

Duo Desktop is a lightweight application that runs on your device and helps establish trusted sessions.

It works by:

• Verifying your device meets Tufts security standards (e.g., operating system updates, encryption, and password protection)
• Creating a secure key pair (valid for 12 hours)
• Registering that key with Duo to enable trusted authentication sessions

What Is Duo Passport?

Duo Passport enhances Duo Desktop by extending and sharing trusted sessions across your device.

With Passport enabled:

• Your “remembered device” lasts 12 hours
• Trusted sessions work across browsers and applications on the same device
• You avoid repeated MFA prompts throughout the day

When You May Still Be Prompted

You may be asked to re-authenticate if:

• Cookies or cache are cleared
• Your device or IP address changes
• Your device no longer meets security requirements

Important Notes

• Duo Passport does not apply to:
  • Virtual Private Network (VPN) access
  • Virtual Desktop Infrastructure (VDI)
  • Remote server authentication
• If you do not install Duo Desktop, you will continue to receive standard Duo/MFA prompts, and remembered sessions will remain browser-specific.

Learn More

For additional details and FAQs, visit: Duo Desktop & Passport FAQs

Bottom Line

Duo Desktop + Duo Passport is a simple way to:

• Reduce Duo/MFA fatigue
• Save time
• Maintain strong security

Install it today and make your workday a little smoother.

Have questions or need assistance? Please contact the TTS Service Desk by emailing it@tufts.edu or calling 617-627-3376.