Duo Mobile - Enrolling Biometric Based Auth with Duo Using Passkeys

Overview

You can register your devices biometrics to be used during login as an alternative to push notifications. This can only supplement having an already hardware token or smartphone.

Supported Devices

• Windows 10 or later, with Windows Hello available and configured. Chrome/Edge officially supported. For help getting started with Windows Hello see this article.
• macOS 13 and Safari or Chrome
• iOS 16 and iPadOS 16 or later
• Android 10 and later

Procedures

1. Login to the Duo device self-service site on your biometric enabled device. Open a web browser and go to: https://mfa-ss.auth.rpi.edu
2. Login to Duo with your RPI email address and password. 

[Sign in screens, first showing a box to enter a RPI email, the second is asking for your password, third is a verified push example]

3.  Your currently enrolled devices such as mobile devices with the Duo app installed will show up well as the option to add a new device. The Duo mobile app doesn't provide a passkey, so you will need to click “Add a device”

[Screen showing a registered phone and a button to add a device.]

4.   At the 'Select an option' page, click on "Face ID / Touch ID", "Windows Hello" or "Android Biometrics". If no option exists, then its possible your device or browser is not supported. Check the supported devices list.

[A screen showing a list of options for setting different external authenticators up]

5.  Your device will prompt you to authenticate with your chosen method and then it will return you to the Duo page. 

6.  You should see a message the registration was successful

References/Links 

• Setting up Windows Hello

Last Reviewed:   09-Sept-2025