Settings

General
Custom Branding
User Communication
Notifications
Enrollment
Admin Role Permissions
Phone Calls
SMS Passcodes
Lockout and Fraud
Telephony Credits
User Deletion
Duo Mobile App
Logging
Early Access Features

General

Account ID
DAZ2JSJ2RBL9AHLAGRNL
Account Name
Country/region
This country/region will be used to format dates and times in the Admin Panel.
Preferred timezone
This timezone will be used when displaying timestamps in the Admin Panel.

Custom Branding

Customize the branding your users see in the Duo Prompt and other Duo feature areas. Accent color and background are not supported by the traditional prompt.

Your draft branding changes aren't currently published to anyone. When you're ready, you can change your publishing settings below.

Current branding Live

Verify your identity

Secured by Duo

Draft branding Editing

Verify your identity

Secured by Duo
Logo
PNG file only, transparent background is best
Accent Color
#
Publishing

User Communication

Default language
This is the language users will see in the traditional prompt regardless of browser setting.
Custom message

Add information for users to reach your help desk when they're having trouble. This message will be displayed when users select the "Need help?" link in the authentication prompt and in the "Need help?" section of Duo Desktop.

Translation 1
0 / 200
Links (Universal Prompt only)

Notifications

Email
Note: Users must have an email address associated with their account. Visit the Users page to view, add, and edit email addresses.
Push notification

Enrollment

Enrollment experience

Invitations for users to enroll in Duo. They can be sent individually, in bulk, or through directory sync.

Logo
Subject
Message
Revert to default
Enrollment link
Expires after being emailed to the user

Admin Role Permissions

We've launched Custom Admin Roles to give you more control. New non-default permissions can no longer be configured here, but you can manage these and more by creating a custom admin role.
Bypass status User manager
Bypass codes expiration Help desk
Clear step-up Beta
Enrollment emails

Phone Calls

Outgoing caller id
Optional. If set, automated calls will appear to come from this number. This does not apply to text messages.
Phone callback keys
Valid keys: 0-9, #, or *. Fraud attempts are reported in the logs.

SMS Passcodes

SMS message prefix
This description will be sent with every batch of SMS passcodes.
SMS batch size
The number of passcodes to be sent in each text message. You may specify up to 10 passcodes.
SMS expiration
SMS auto refresh

Lockout and Fraud

Notification email

Multi-factor authentication

Email administrators when users or admins report fraudulent activity or when users get locked out due to failed login attempts.

Unenrolled users
days after a user is created in Duo
Failed attempts
Set a user's status to Locked Out after consecutive failed attempts
Frequent attempts
Blocking this type of Duo Push activity can prevent authentication fraud. Blocked attempts will be reported in the Authentication Log as Frequent attempts.

Telephony Credits

Low-credit alerts

This number will automatically update to a proportion of your allowance.

Low-credit alert email
Specify the email address to notify when telephony credits are low. If left blank, all administrators will be notified.
Max credits per action
Specify the maximum number of telephony credits allowed per phone call and SMS. Default: 20 credits.

User Deletion

Inactive users
Users will be sent to the trash after days of inactivity
You can choose to automatically send users to the trash if they don't authenticate for a set period of time.
Trash duration
Permanently delete users from trash after days
Users can be manually or automatically moved to trash depending on your settings.

Duo Mobile App

Passcodes

Duo Mobile supports the use of both time-based one-time passcodes (TOTP) and hash-based message authentication code (HMAC) one-time passcodes (HOTP).

Current setting: TOTP will be generated for all users. HOTP will only be generated for users who do not meet app requirements.

Configuration

Devices with Duo Mobile 4.49.0 or newer will generate TOTP codes. Devices with older versions will continue generating HOTP codes.

Security Checkup
Security Checkup helps users identify and remediate issues — such as disabled screen lock or out-of-date OS — that may compromise security or block authentications. This feature requires Duo Mobile 3.16.x or newer.
Usage analytics
Muted Push

To help prevent push harassment, Duo can pause Duo Push notifications temporarily.

This setting requires Duo Mobile 4.40.0 or newer.
Instant Restore
Instant Restore allows users to reconnect Duo-protected accounts when they get a new device.

Logging

Log retention
You can choose to automatically and permanently delete authentication, telephony, and administrator action log entries older than a certain number of days.

Early Access Features

Enable beta and experimental features for your organization. These features are still under development and may change or be removed. Your feedback helps us improve them.

Status
Phase
Advanced Reporting Dashboard Beta

Access a redesigned reporting experience with customizable widgets, real-time data visualizations, and exportable PDF summaries.

AI-Powered Policy Suggestions Beta

Let our AI engine analyze your environment and recommend security policies tailored to your organization's risk profile.

Bulk User Management Actions Beta

Perform bulk operations on users such as group assignment, status changes, and credential resets from a single interface.

Device Health Check v2 Beta

Enhanced device posture checks with granular OS patch-level verification, disk encryption status, and firewall state detection.

Webhook Event Streaming Alpha

Stream authentication and admin events to your own endpoints in real time for custom integrations and SIEM ingestion.