How to use Duo while traveling internationally

Duo keeps your Swarthmore account secure anywhere in the world, but not all of your second-factor devices may be available to you during your travels abroad. The most common issues people run into relate to phone service, which means you may not have access to receive the Push, Call Me, or SMS Text Message options on your app-enabled smartphone or mobile phone. However, there are still other options for you using the devices you already may have registered as well as some other devices you can add before leaving for your trip.

NOTE:  in Duo, a "Passcode" is numerical and is NOT the same as your password

App-Enabled Smartphones (and Tablets)

Many people may have a smartphone with the Duo Mobile app set up as one of their devices to access their account through Duo. While this is great, international travel with a US phone can be costly, but you can still use the passcode generation option on the app (with your phone set on Airplane Mode to keep from getting charged for any calls, texts, or internet service) to generate any passcodes needed to log into your account. You can do the same with any app-enabled tablet devices. As long as the app on the tablet was set up and registered before traveling abroad you will still be able to generate passcodes without needing wifi or data service. Just remember to put it on Airplane Mode to make sure to avoid any accidental data charges.

If you purchase an international SIM card to use while traveling, please be aware that it will change the phone number of your phone, so it will no longer be considered a registered device with Duo. You will have to add the new number (and re-pair the app, if you wish to use those features) to your Duo account. To add the new number requires adding it as a new device, which requires you to authenticate with a device already registered with Duo, so please keep this in mind.

If you have a separate phone that you use for international travel you can add it to your Duo account as an additional device at any time. Adding or editing devices requires that you authenticate with a device that is already registered with your account.

Hardware Tokens

There are two types of hardware tokens currently available at Swarthmore. A hardware token is a small device made to be carried on a keyring so you can keep it with you at all times. Depending on what types of computers you will be working with and what you may be working on while traveling, you may prefer one device over another. Below is a description of each type of hardware token we offer. Please note that we are asking you to choose only one of these hardware token options if you feel you need one. They are available at the Help Desk in Beardsley Hall Rm 110.

U2F Token

Duo allows you to register a security key as a second-factor device. This token is a small device designed to carry on a keychain that plugs into a USB port on your computer. One of the security key brands provided by the college is YubiKey. If you have a newer Macbook, you may be required to use a USB-C to USB adaptor to use this option. While on the Duo screen, you will plug in your YubiKey to an available USB port on your computer. The key symbol on the token will begin to blink, and once it does you will touch the key symbol. Once Duo has recognized that the YubiKey has been touched you will be authenticated and given access to your account.  

Passcode Generator

There is another hardware token option available called a passcode generator (or digipass token). This is a small device designed to carry on a keychain that generates a 6-digit one-time use passcode when you push the green button on the device. These tokens need to be registered to you by the Help Desk. While on the Duo screen during login, you can click on the "Enter a Passcode" button - even if you did not select the token from the device dropdown menu. Anywhere that offers the "Enter a Passcode" option will accept a passcode from any registered device of yours that generates a passcode, including your digipass token. Once you enter the passcode, click the "log in" button and you will be given access to your account.

NOTE:  in Duo, a "Passcode" is numerical and is NOT the same as your password.