The Duo Universal prompt allows you to add, delete, or modify your registered devices directly from the Duo prompt. You may also add biometric authentication from the Duo prompt. If you have a device running on Windows 10 or later, you will have the option to set up Windows Hello to authenticate with Duo Universal. To use Windows Hello with Duo, in addition to the system requirement, make sure you also have the following:
- Windows Hello set up on the device for signing in with a PIN, fingerprint, or facial recognition. Learn how to set up Windows Hello at the Microsoft support site.
- A supported browser: Chrome, Edge, or Firefox. Refer to the browser support table. Note that Chrome Incognito and Edge InPrivate browsing will not work with Windows Hello, but will work with Security Keys.
To set up Windows Hello follow these steps.
- Open the Duo Universal prompt by going to a two-factor authentication (2FA) protected website. After authenticating using your CNetID or UCMEDID and password, you will be taken to the Duo Universal prompt page.

- Choose the Other Options link. It will take you to the list of Registered devices and options that you have enrolled in 2FA.

- The final option on your list of options is Manage Devices. To access the Duo manage devices dashboard, you'll need to verify your identity by using one of your current 2FA devices.

- Once you have authenticated, you'll be taken to your Duo manage devices dashboard, which will include all your currently registered methods of authentication that can be added, modified, or deleted plus the option to Add a device.

- Choose Add a device. Then select Windows Hello from the options. Read the Windows Hello information and select Continue.

- Follow the Windows Hello instructions to verify your identity by entering your PIN, scanning your fingerprint, or pointing your face to your camera.

- When you receive confirmation that you added Windows Hello as a verification method, select Continue.

- The next time you log into this Duo Universal application from the Windows system where you set up Windows Hello for passwordless login, you'll enter your username. Then instead of entering your password, you can choose Windows Hello to verify your identity. Select Log in at any University website that requires sign-in with your CNetID.

- Follow your device's prompt to enter your Windows Hello PIN, scan your fingerprint, or use facial recognition, just like you did when you set up Windows Hello in Duo. Successful Windows Hello verification logs you in without entering a password, and Duo Universal will send you to the application as a logged-in user.