Setting up Duo Mobile on a New Phone from Backup

Overview

Duo Restore allows Duo Mobile accounts to be restored from a smart phone's cloud backups (iOS or Android). This article covers how to set up Duo Restore and use it to recover Duo Mobile accounts. Purdue Career Accounts and Purdue Fort Wayne Accounts are Duo-protected and not considered third-party accounts.

Instructions

Setting up Duo Restore (iOS)

1. Make sure you are running the latest version of the Duo Mobile App on your current iOS device.
2. Back up your device to iCloud, with iCloud Keychain enabled to use Instant Restore. Nightly iCloud backups will include Duo Restore information. Encrypted iTunes or Finder backups will also work.

Due to how apps are automatically backed up in iOS, the backup functionality of Duo Restore is always on for iOS users who have iCloud enabled and they will not see a notification indicating their information is being backed up. However, whether an account can be restored depends upon Duo Restore being enabled by the administrator in the Duo Admin Panel or whether you've set a recovery password for reconnecting third-party accounts.

Setting up Duo Restore for Third-Party Accounts (iOS)

Purdue's Career Accounts are Duo-Protected, which means the following steps are not necessary for backing up your Purdue Career Account for Duo Mobile. However, if you choose to use Duo Mobile for authentication for third-party accounts (Instagram, Facebook, Snapchat, etc.), please follow these steps to set up Duo Restore for third-party accounts.

Be sure to enable third-party account backup and restore if you use Duo Mobile to generate passcodes for logging into applications like Instagram, Facebook, Snapchat, or other web services. Duo Mobile cannot recover access to those accounts without a backup. If you become locked out of those services and don't have a backup of your accounts in Duo Mobile, you'll need to contact the support team for that application (or perform the account recovery process for each of those third-party applications).

When Duo Mobile detects you have a third-party account, you'll be prompted to create a recovery password. Tap Enable Now to set one.

Enter a recovery password that has 10-128 characters. Do not lose this password! You'll need to provide it again to recover these accounts. Duo cannot recover this password for you. Be sure to store it securely. If you lose this password you'll need to manually reconnect your third-party accounts by visiting each of those services individually and following their 2FA setup process.

If you didn't enable backups for your third-party accounts when you added the first one, you can do it at any time.

1. Open Duo Mobile and tap the menu icon to access Settings.
2. Tap the Backup third-party accounts option to enable.
3. Enter and confirm a 10-128 character recovery password.

Remember, Duo Support can't recover your third-party accounts for you or reset your third-party recovery password.

Restoring Duo Mobile Accounts (iOS)

To use Instant Restore you must have previously backed up your device with iCloud (with iCloud Keychain on) or an encrypted iTunes or Finder backup. Additionally, your organization's Duo administrator must have enabled the Instant Restore feature.

1. Sign in to iCloud on your iOS device and restore from an iCloud, iTunes, or Finder backup.
2. If using iCloud, enable iCloud Keychain. This could be the same device as before, or a brand-new one.
3. Download the Duo Mobile app on your new device. Be sure to install the app published by Duo Security LLC.
4. Open Duo Mobile and tap Continue on the welcome screen.
5. Duo Mobile locates your backed-up Duo-protected accounts in your restored backup and restores them to the app on your device. When complete, you're taken to the accounts list in the app.
6. Duo also sends a push notification stating that accounts were activated on a new device to your old one. If you receive the new phone activation notification and you didn't just perform a restore, tap No. This deactivates your Duo accounts on both the original and replacement devices and alerts your organization's Duo administrators about the fraudulent reactivation.
   If you did initiate the restore to a replacement device, tap Yes to dismiss this notification and deactivate the accounts on your original device.

The Duo Mobile accounts list shows your restored Duo accounts, and you may use them to log into Duo-protected services with Duo Push or a generated passcode.

This process doesn't reconnect any third-party accounts. You'll still need to provide your third-party account recovery password before you can use those accounts to generate passcodes.

Watch the instant restore process for iOS: https://guide.duo.com/duo-restore?wvideo=svxe61p4zd

Restoring Third-Party Accounts (iOS)

1. Restore your new or reset iOS device from your iCloud, iTunes, or Finder backup.
2. Open the Duo Mobile app on your new device and tap Continue on the welcome screen.
3. Duo Mobile will attempt to automatically restore any third-party accounts. In the event that an automatic restore isn't successful, Duo Mobile will prompt for the recovery password you created when you enabled third-party account backup.

When you return to the accounts list after a successful third-party accounts restore, you'll be able to tap your third-party accounts to generate passcodes for logging into those services.

Note that this doesn't reconnect your Duo-protected accounts. You'll still need to perform the Instant Restore steps before you can use those accounts to log in to Duo-protected services with Duo Push or Duo Mobile passcodes.

Watch the instant restore process for third-party accounts on iOS: https://guide.duo.com/duo-restore?wvideo=qm2nf64kxc

Setting up Duo Restore (Android)

If you have Google account backup disabled or your device does not have a PIN, pattern, or password screen lock, please see Enabling Duo Restore for the legacy Instant Restore flow. Automatic backups require that your device has a PIN, pattern, or password screen lock. You may need to update your screen lock settings before continuing.

1. Locate the Google Backup settings page in your device's settings. Navigation to the Google backup setting can vary by phone manufacturer. For example, on Pixel devices navigate to Settings → Google → Backup. You must create Google backups for Duo Mobile backup and restore from cloud to work. Backup services offered by other vendors, such as Samsung Cloud backup, will not work for Duo Mobile backup and restore.
2. If you haven't already enabled app data in your backup, select the checkbox next to Other device data to include Duo Restore information in your backup. Tap Confirm.

1. If you already have Google account backup enabled you should see Apps included in the "Backup Details" information.
2. If you just enabled Google backup, tap Back up now to create your first system backup before continuing to the next step.
3. At this point, you can also choose to enable account recovery for your third-party accounts. Open the Duo Mobile app and navigate to Settings → Duo Instant Restore.
4. Tap Automatically reconnect third-party accounts from cloud to enable. This will include third-party accounts in your Duo Restore information. 

Nightly Google backups will include Duo Restore information. To see the last time a successful backup occurred, open the Duo Mobile app and navigate to Settings → Duo Instant Restore. Automatic backups require that your device has a PIN, pattern, or password screen lock.

If you created a Google Drive backup using the old Duo Restore toggle, you can still access this backup to perform an Instant Restore.

Restoring Duo Mobile Accounts (Android Instant Restore)

To use Instant Restore, you must have previously included Duo Mobile app data in your Android device backup. Automatic backups require that your device has a PIN, pattern, or password screen lock. Additionally, your organization's Duo administrator must have enabled the Instant Restore feature. Third-party accounts will also be restored if third-party backup was enabled on the old device.

1. Sign in to your Google account on your new device during device setup.
2. During setup of your new Android device you should choose to restore your old device backup from the cloud.
3. Download and open the Duo Mobile app on your new device. Be sure to install the app published by Duo Security LLC.
4. Duo Mobile locates your Duo-protected and third-party accounts in your backup and restores them to the app on your device. When complete, you're taken to the accounts list in the app.

If you created a Google Drive backup using the old Duo Restore toggle and know the recovery password you set when enabling Duo Mobile backup, you can still access this backup to perform an Instant Restore.

Recovering Duo-Protected Accounts with Instant Restore (Legacy)

To use Instant Restore you must have previously backed up your Duo Mobile accounts to Google Drive. Additionally, your organization's Duo administrator must have enabled the Instant Restore feature.

You must have access to Duo Mobile on your old Android device in order to use Instant Restore to restore your Duo-protected account backup to your new device. If you can't open Duo Mobile on your old device, for example, if your phone was lost or damaged, contact your Duo administrator to discuss your account recovery options.

1. From your new Android device, download the latest Duo Mobile app from the Google Play Store. Be sure to install the app published by Duo Security LLC.
2. Open the Duo Mobile app on your new device.
3. Tap I have existing accounts from the welcome screen.
4. Duo Mobile will check for a previous backup in Google Drive. Select the Google account you used when initially setting up Duo Restore.
5. You'll be asked if you have your old phone. Tap Yes, continue setup to continue.
6. Open Duo Mobile on your old phone, and tap the menu icon in the top right to open Settings.
7. Locate the "Connect a new phone" settings item, and tap View QR code to display a QR code on the screen.
8. Return to your new phone, and tap Scan QR code in step 3, then scan the QR code shown on your old phone to complete account restoration.
9. Duo Mobile locates your backed-up Duo-protected accounts and restores them to your device, showing a success message when complete.

The Duo Mobile accounts list shows your restored Duo accounts, and you may use them to log into Duo-protected services with Duo Push or a generated passcode.

This process doesn't reconnect any third-party accounts. You'll still need to provide your third-party account recovery password before you can use those accounts to generate passcodes.

Recovering Third-Party Accounts

1. From your new Android device, download the latest Duo Mobile app from the Google Play Store. Be sure to install the app published by Duo Security LLC.
2. Open the Duo Mobile app on your new device.
3. Tap I have existing accounts from the welcome screen.
4. Duo Mobile will check for a previous backup in Google Drive. Select the Google account you used when initially setting up Duo Restore.
5. If Duo Mobile finds a valid backup in your Google Drive, it restores your previously backed-up accounts. If your backup includes third-party accounts, enter your recovery password when prompted.

When you return to the accounts list after a successful third-party accounts restore, you'll be able to tap your third-party accounts to generate passcodes for logging into those services.

Note that this doesn't reconnect your Duo-protected accounts. You'll still need to perform the Instant Restore steps before you can use those accounts to log in to Duo-protected services with Duo Push or Duo Mobile passcodes

Enabling Duo Restore (Legacy Android)

1. Open Duo Mobile and tap the menu icon in the top right to open Settings.
2. Tap Duo Restore in the "General" settings.
3. On the "Duo Restore Settings" screen, tap to enable the Backup accounts with Google Drive.
4. Select the Google account to use for Duo Restore and grant Duo Mobile permission to store the backup in your Google Drive.
5. At this point, you can also choose to enable account recovery for your third-party accounts by tapping Automatically reconnect third-party accounts. If you don't enable this now, Duo Mobile will remind you later when you add your first third-party account.
6. When prompted, enter and confirm a recovery password that has 10-128 characters. Do not lose this password! You'll need to provide it again to recover these accounts. Duo cannot recover this password for you. Be sure to store it securely. If you lose this password you'll need to manually reconnect your third-party accounts after restoring Duo Mobile on a new phone by visiting each of those services individually and following their 2FA setup process.

Recovering Accounts Manually

If there is not an available backup to recover your Purdue Duo-protected accounts, please follow the instructions in this article to recover your Purdue account manually: Article - How to set up a new phone f...

If there is not an available backup to recover your third-party accounts (Instagram, Facebook, Snapchat, etc), tap Reconnect within Duo Mobile and you'll see the options to Scan a QR code or Enter activation code. Tap Scan QR code and scan the QR code from your third-party account 2FA setup screen

This information was obtained from Duo's guide on Duo Restore: Duo Restore - Guide to Two-Factor Authentication · Duo Security

Still need help?  Click the 'Purdue IT Request' button to start a ticket.