MFA Backup codes can be generated and stored in a secure location as a backup to your regular MFA authentication devices.
Please note the following:
- MFA Backup codes are valid for a single use or a maximum of six months after being generated.
- Generating new codes will invalidate any previously generated codes.
- It is recommended that backup codes be generated every time a UMS password is changed.
Generate New Backup Codes
- Login to the UMS MFA Toolbox page.
- Click on the "Backup Codes" tab.
- The text currently shown should be "You currently have 0 active backup codes".
- Click on the button for "Generate Bypass Codes".
- A pop-up will appear with the text "This will invalidate all current backup codes. Continue?".
- Click "Yes" to delete the old back codes and generate new ones.
- The page will redirect to a Duo Mobile code generation page.
- Chose either one of the options of a "Duo Push" or "Passcode".
- The page will then be redirected back to the UMS MFA Toolbox page.
- 10 backup codes should now be listed on the page.
- If one chooses, click on the button for "Print Codes" to print the codes.
- Follow instructions on printing the codes using a web browser of your choice.
Delete Current Backup Codes
- While on the UMS MFA Toolbox page.
- Click on the "Delete Codes" to delete the currently generated backup codes.
- A popup will appear with the text "This will delete all current backup codes. Continue?".
- Click "Yes" to delete the old back codes.
- The page will redirect to a Duo Mobile code generation page.
- Chose either one of the options of a "Duo Push" or "Passcode".
- The page will then be redirected back to the UMS MFA Toolbox page.
Environment
- Duo Multi-factor Authentication