Multi-factor Travel Guide

Body

This guide is for those who are traveling either domestically or internationally and require access to New School services protected by multi-factor authentication. Please review this guide BEFORE traveling to ensure that you are prepared.  

On this page: 

  • Before you travel 

  • Decide which devices to use 

  • Decide what multi-factor authentication methods to use 

  • Set up your devices 

  •  While you travel 

  • Travel scenarios & what to do 

  • Getting support 

  • Countries where Duo multi-factor is unavailable 

 

Before You Travel 

Decide which devices to use 

When deciding which devices to use for travel keep in mind that certain multi-factor options only work with certain connection options. 

Device options 

  1. Use your current phone with an international cell plan that can receive calls/texts. 

  1. Use your current phone but switch SIM cards for your international plan. 

  • Please make sure you are using the Duo Mobile App and not relying on an SMS-only setup. Since your phone number changes with your SIM, Duo would send SMS codes to your old number unless updated. 

  1. Get a new phone abroad [Requires most planning]  

  • The best way to do this is to get your new phone soon after arriving and contact IT Central for setup assistance. 

  1. Use a wifi enabled device [i.e. phone or tablet]  

You should set up your tablet on WiFi with the Duo Mobile App before you leave, then while abroad, you would need WiFi and use Duo Push or use the Mobile App passcodes. 

  1. Use a security key 

Device Options 

Duo Push Notification 

Phone Call 

Duo Generated Passcode 

Duo SMS Backup Passcodes 

Security Key 

Current Phone 

✓ 

✓ 

✓ 

✓ 

 

Current Phone; different SIM card 

✓ 

✓ 

✓ 

✓ 

 

Getting a new phone abroad 

✓ 

✓ 

✓ 

✓ 

 

Wifi Enabled Device (i.e. phone or tablet) 

✓ 

 

✓ 

✓ 

 

Security Key  

 

 

 

 

✓ 

Decide what multi-factor authentication methods to use 

While traveling, you may need to use different multi-factor options depending on the cellular or wifi availability.  

Multi-factor option 

Cell Service 

WiFi Access 

No connectivity 

Duo Push Notification 

✓ 

✓ 

Phone Call 

✓ 

Duo App Generated Passcode 

✓ 

✓ 

✓ 

Security Key 

✓ 

✓ 

✓ 

Duo SMS Backup Passcodes (generated prior to travel) 

✓ 

✓ 

✓ 

Set up your devices 

Once you’ve decided which devices and multi-factor methods to use during travel it is time to set your devices. 

Make sure you set up your device prior to travel. We recommend you set up multiple devices and multi-factor options to have as a backup. 

Minimum Recommendations 

Download and Activate the Duo Mobile app 
The Duo mobile app is the most effective tool for using multi-factor authentication during travel. 

The Duo Mobile application can be used to generate passcodes on airplanes or in remote regions where Duo Push, SMS-delivered passcodes, or phone callback may be unavailable or difficult to use due to lack of Internet or cellular service.  

The app can also send Duo Push notifications when wifi or an Internet connection are available to your authentication device. If you can access the Internet from your mobile device, you can receive push notifications.  

Generate SMS Backup Passcodes 
Before you leave, you can use your existing Duo setup to send yourself a text message with ten backup codes. The passcodes are one-time use (cross them out as you use them). All ten codes expire after 14 days. Use these codes to access Duo-protected systems before setting up your new device. Keep in mind that if you create a set of backup codes and then create a second set later, the first set will expire. 

We strongly advise you to obtain a new set of backup passcodes every 14 days. Set a reminder on your phone or calendar to ensure that you remember to do this. Generate your first set of codes before leaving the United States. 

Backup passcode tips 

  • Backup codes should be stored in a secure but accessible location (such as a locked drawer or cabinet) while not in use. 

  • Do not store backup codes with your primary MFA device since losing them together is the same as having no backup. 

  • Generating new backup codes will invalidate your previous backup codes. 

  • Backup codes will expire after 14 days. 

  • Each code can only be used once so we recommend crossing them off as you use them. 

Additional Options 

Set up a Security Key  
If you have a Security Key, please make sure you set it up prior to travel.  

Set up Phone for Phone Calls 
While this is an option for authentication, we highly recommend against using the phone call method as a multi-factor authentication alternative as it is highly unreliable, particularly in travel settings. 

If you do decide to use phone calls as an authentication method, please ensure that you have a backup plan using one of the minimum recommendations above. 

Things to keep in mind: 

  1. Use your current phone but switch SIM cards for your international plan.  

Switching SIM cards will change the phone number you are using for your device. In order to set this up properly you will need to make sure that you are using the Duo Mobile App and not relying on SMS-only setup as the SMS codes will be sent to your domestic number unless it is updated.  

Prior to travel provide IT Central with information about the international phone number associated with the new international SIM card so it can be manually registered to your multi-factor profile. Then when you're in your destination country, reactivate your phone using Duo Mobile

  1. Get a new phone abroad [Requires most planning]  

  • If this is the option you are choosing, ensure that a secondary multi-factor option is set up prior to travel. We recommend using either the Duo mobile app set up on your regular smartphone or tablet with wifi enabled capabilities or send yourself backup passcodes no more than 2 days prior to travel to have available for when you are setting up your new phone. You should then purchase the new phone within 14 days of arriving at your destination and use either the device with Duo Mobile activated or one of the backup codes to set up the new device with multi-factor. 

 

While you Travel  / Travel Scenarios & What to do 

Scenario (1/6): You will be connected to a Wi-Fi network 

  • Required: Internet connection 

  • Not required: Phone service 

Alternative solutions:  

  1. Use Duo mobile app to generate passcode 

  1. Use a Security Key if you have one 

  1. Use one of your backup codes if you have them 

Scenario (2/6): You will be traveling by airplane  

  • Not required: Internet connection & phone service 

Alternative solutions:  

  1. Use Duo mobile app to generate passcode 

  1. Use a Security Key if you have one 

  1. Use one of your backup codes if you have them 

Scenario (3/6): You will have access to your US phone that can only use wifi (no cellular). You will also have access to an international phone. 

  • Make sure your US phone is registered to use Duo Mobile prior to travel. If your phone is currently registered to receive phone calls only, download Duo Mobile and change your registration type. Then, once at your international destination add your international phone to your multi-factor profile at multifactor.newschool.edu. You will have to have your US phone connected to wifi available during the international phone setup in order to receive the multi-factor push notification.  

  • Please note: Duo multi-factor can store multiple numbers. Do not remove your existing US phone number. This way you can still use your US phone when you return to the US. 

  • Required: Internet connection 

  • Not required: Phone service 

Alternative solutions:  

  1. Use Duo mobile app to generate passcode 

  1. Use a Security Key if you have one 

  1. Use the Phone call back where cellular is available 

  1. Use one of your backup codes if you have them 

Scenario (4/6): You will use your regular phone and swap out the US SIM card for the SIM card you’ll use in your destination country. You will also swap the US SIM card back into the phone when you return to the US. 

  • Prior to travel provide IT Central with information about your international phone so it can be manually registered to your multi-factor profile. Then when you're in your destination country, reactivate your phone using Duo Mobile

  • Required: Internet connection 

  • Not required: Phone service 

Alternative solutions:  

  1. Use Duo mobile app to generate passcode 

  1. Use a Security Key if you have one 

  1. Use the Phone call back where cellular is available 

  1. Use one of your backup codes if you have them 

Scenario (5/6): You won’t have access to any phone 

  • If your trip is shorter than 14 days, you can send yourself SMS backup codes prior to travel. You should then copy or print those codes and keep them in a safe place to be used during travel. 

  • Required: Have access to backup codes generated prior to travel or a Security Key 

  • Not required: Internet connection & phone service 

Scenario (6/6): You’ve already left the US and did not register an international phone 

Get Support 

You can reach out to IT Central for support during our hours of operation.  

Please remember that IT Central are required to identify you before providing service, especially when assistance is provided to users outside the United States.  

Countries where Duo Security is unavailable 

There are certain countries where Duo Security is unavailable. If Duo Security is unavailable you will see a message like this “Access denied. Duo Security does not provide services in your current location”. Please plan accordingly. 

 

Details

Details

Article ID: 407
Created
Fri 12/13/24 9:26 AM
Modified
Mon 1/13/25 3:13 PM