The New Okta Hardware Token (Yubikey)

Do you currently use a hardware token with Duo? If you have an older smartphone, have no smartphone at all, or frequently travel where Internet service is unavailable, you may currently have a Duo token like the one pictured below. If you are wondering what will happen to it when Okta replaces Duo in Spring Break 2025, read on.

Duo D-100 hardware token

Okta enrollment has already begun for some employee groups, and new groups will continue to enroll through the spring. If you’ve used a hardware token in the past, you may have guessed that the Duo token will not work with Okta. Information Technology has tested hardware tokens for use with Okta, and we recommend a new device called a Yubikey.

What is a Yubikey?

A Yubikey is a small USB device that plugs directly into your computer and provides a code to Okta when you touch the Yubikey with your finger. It is small and portable, and it will fit on most keychains. There are versions available that plug into USB-A or USB-C ports.

Do I need a Yubikey?

If you currently use an older Duo token, you need a Yubikey as a replacement to use with Okta. Also, note that SMS (codes sent via text message) will not be an acceptable factor to authenticate Okta logins, so if you do not have a smartphone that will run Okta Verify, you need a Yubikey.

If neither of these things applies, you may still want a Yubikey if you travel frequently or as a backup way to authenticate your Okta logins if your smartphone fails.

How do I get a Yubikey, and is there a cost?

Any employee is eligible to receive one free Yubikey device during employment. Any student who currently has a Duo D-100 token registered with their Duo account is also eligible to receive one free Yubikey device. Eligible individuals may visit the JMU knowledge base for details. Other individuals may purchase a Yubikey from the JMU Bookstore.