Duo Security Reviews and details

Social recommendations and mentions

• A list of SaaS, PaaS and IaaS offerings that have free tiers of interest to devops and infradev

  Duo.com — Two-factor authentication (2FA) for website or app. Free for ten users, all authentication methods, unlimited, integrations, hardware tokens. - Source: dev.to / 3 months ago

• Additional computer log-in protection

  You could use Duo - https://duo.com/. It can be set to require MFA when logging in locally or only when logging in via RDP (or both). It's free for up to 10 users. Source: 11 months ago

• [Data-Mining] Upcoming tunnels from the May 23 patch

  A quick google tells me that Duo is a 2FA service from Cisco. Maybe that's what Anet is using to manage the 2FA in the launcher behind the scenes? Source: 11 months ago

• what do you use for ssh brute force protection: fail2ban or sshguard ? or something else ? for ubuntu and fedora

  I have Duo (https://duo.com) enabled on my internet facing SSH server. It sits behind sslh on port 443 and uses public key authentication only. Source: 12 months ago

• Duo MFA with Serverless API Gateway for authentication

  Our organization uses Duo, which is an MFA tool that competes with Okta. I created a serverless application with API Gateway and Lambda that gives users access to Salesforce resources where they can directly update records. This was a workaround for getting around Salesforce community clouds expensive community licenses. Source: about 1 year ago

• Can i use Windows Server 2019 Evaluation version for personal use?

  Use Duo for accessing with RDP. https://duo.com. Source: about 1 year ago

• Duo for Bitwarden 2FA

  Little known secret - you can set up a free Duo account for personal use. Go to duo.com and register for a trial with your personal email. When the trial ends you get to keep the lowest tier features with 10 users. You could choose to use this to secure your personal Bitwarden and any other services that support it. Source: about 1 year ago

• free-for.dev

  Duo.com — Two-factor authentication (2FA) for website or app. Free for 10 users, all authentication methods, unlimited, integrations, hardware tokens. - Source: dev.to / over 1 year ago

• Considering switching from iPhone.

  But "Duo" has become a somewhat confusing name. It is also the name of the cybersecurity app Duo. I'm guessing the security app had the name first, and Google failed to see that picking Duo as a name for their Facetime alternative might be a bad idea. I assume that's at least part of what's behind this change. Source: over 1 year ago

• Block IP after X unsuccessful login attempts (RDP or SSH)?

  Highly recommend Duo Security. It's a 2FA solution with integrations for RDP, SSH, and virtually any other network app/platform. Easy to set up and free for home use (under 10 users). Source: over 1 year ago

• Port forwarding to non-3389 (internet-facing) port --> RDP port with secure password & lockout - is it safe for small home lab (2-3 computers) or am I going to get ransomwared inside of a week?

  Add 2 factor authentication using DUO for free 1)Register a duo account https://duo.com/ 2)Download and install DUO for windows RDP 3)Set the server, client key and secret key 4) create the user in DUO admin using the same username as your AD account and send DUO registration link to your cell phone. Source: over 1 year ago

• Vaultwarden log/alerts?

  If you're looking to integrate MFA, consider Duo. It's got a free plan and integrates with Vaultwarden OOB. I use it for a self hosted vaultwarden instance and it was super-easy to get WAF. Source: almost 2 years ago

• Vaultwarden log/alerts?

  I am using DUO as MFA, there its just a push message that I need to approve login. https://duo.com/ (free under 10 users). Source: almost 2 years ago

• Best practicices on proper AD and Win Server security

  For 2FA for Windows logins, you are going to need software like Duo (https://duo.com/). For cloud-based 2FA, you need an identity provider, like Azure AD or Okta. If you wanted a non-cloud solution, you could look into smart-card authentication, but I've never seen it properly implemented. Source: almost 2 years ago

• macOS 2fa

  I've (very recently) asked myself the same question. The solution I implemented was https://duo.com/. Source: almost 2 years ago

• Securing management VLAN

  For years, I've been wondering what people do to secure access to their mgmt VLAN. Personally, I'm looking into using the free tier of duo.com for 2FA for a jump box or bastion. Source: almost 2 years ago

• What's everyone's approach to Windows Hello, can we disable it but manually require 2fa for the first login to a new machine?

  Owned by Cisco https://duo.com/ if you want traditional Password + MFA for the workstations then DUO is a great option. Iirc once you install the DUO windows agent it disable all cred providers except the password cred provider. So WH4B will be auto disabled once DUO is installed. Source: about 2 years ago

• Connecting to machine without static IP

  Create duo account. Setup your machine to use duo. Steps differ if you are targeting unix/windows. You can instead use google authenticator but I am not fan of adding 6 digits for each login. AFAIK Microsoft authenticator doesn't support non-windows systems otherwise Microsoft Authenticator also uses passwordless 1 tap authentication. - Source: dev.to / about 2 years ago

• How about this 2FA solution for RDP logins on Win10?

  I use Duo (https://duo.com/) - they have a free tier which does push notifications etc. Super simple to set up and use and very user friendly (in my opinion anyway). Source: about 2 years ago

• What's the biggest missing piece of the puzzle in the self-hosted universe?

  Duo Security alternative, with a similar set of features (Windows/macOS/Linux 2FA clients, SMS fallback, convenient mobile apps, centralized user management). Source: about 2 years ago

• Optimal Solution [Novice Labber]

  For RDP, I'd recommend a RDP gateway with MFA solution like, for example, DuoSecurity (https://duo.com/). You can have that for free and it's very easy to setup. You can plug Duo into OpenVPN server as well, and deploy it on Windows RDP session hosts and on Linux servers for SSH, which allows for more secure setup. Source: about 2 years ago