Editor's Review
Duo Mobile is the phone half of Cisco's Duo authentication service, and with 50 million installs it is one of the most widely deployed second factors in corporate IT. Your employer or university runs Duo on its side; you install this, enrol once, and from then on logins to email, VPN and internal tools ask for confirmation here.
How the approval works: the usual flow is Duo Push. A notification arrives naming the application and the location of the attempt, and you approve or deny it. Where an administrator has enabled verified push, the screen also shows a number you must type back, which stops attackers from farming blind approvals out of tired users. If the handset has no signal at all, the app still generates a rolling passcode you can type in manually.
More than work accounts: Duo Mobile doubles as a general TOTP authenticator, so personal accounts on Google, GitHub, Amazon or anything else that offers standard authenticator codes can live in the same list. Duo Restore backs those entries up so a new phone does not mean re-enrolling everything by hand.
Where it grates: the app is only as good as the deployment behind it. Some organisations configure short timeouts or frequent re-prompts, and Duo Mobile takes the blame for decisions its users cannot change. Recovery when you lose the phone also runs through your helpdesk, not through Cisco.
Features
Duo Push approvals with the application name and login location shown
Verified push with number matching to blunt push-fatigue attacks
Rolling one-time passcodes that work with no data connection
Standard TOTP support for third-party accounts alongside work ones
Duo Restore backup for moving accounts to a replacement phone
Optional biometric or screen-lock protection on the app itself
Passwordless sign-in where the organisation has switched it on
Pros
Approving a login takes one tap and no typing
Offline passcode generation covers you on planes and in dead zones
Handles personal authenticator codes, so you need not run two apps
Backup and restore removes the worst pain of changing phones
Cons
Prompt frequency and timeouts are set by your organisation, not by you
Losing the enrolled phone usually means a call to an IT helpdesk
Questions people ask
Do I need my employer to use Duo before the app is useful?
For push approvals, yes - the Duo Push flow requires an organisation running the Duo service to enrol you. Without that, you can still use the app as a standard authenticator for personal accounts that issue TOTP codes.
Can I keep personal accounts in the same app?
Yes. Duo Mobile accepts ordinary authenticator QR codes, so accounts such as Google, GitHub or Amazon sit in the same list as your work entries.
What happens if I lose my phone?
Duo Restore can move your accounts to a new device if you set it up in advance. For work accounts, re-enrolment is normally handled by your organisation's IT helpdesk rather than by Cisco.
