duo push not arriving on new phone

Not specified by the original author.

TL;DR

If the user enabled Duo Restore, install Duo Mobile on the new phone, sign in with the same account, and restore. If not, an admin issues a bypass code or sends a reactivation link via SMS; the user then re-activates Duo Mobile on the new device.

The error

(Users select "Send a Duo Push" and nothing arrives on the new phone.)

Steps

1. Ask if the old phone is available. If yes: on the old phone, Duo Mobile > Settings > Duo Restore > back up now. Expected: backup completes. Then restore on the new phone.
2. If the old phone is gone: Duo admin panel > Users > the user > Phones > Reactivate Duo Mobile. Expected: an SMS with a reactivation link goes to the user's number.
3. The user taps the link on the NEW phone and follows the activation. Expected: Duo Mobile activates and a test push arrives.
4. If the phone number also changed: update the number on the user's phone record first, then reactivate. Expected: SMS reaches the new number.
5. As an immediate unblock, generate a bypass code: Users > the user > Bypass Codes > Add. Expected: a single-use code the user can enter at the Duo prompt right now.

When to use

• New phone, Duo pushes stopped
• Old phone lost, broken, or wiped

When not to use

• First-time Duo enrollment (use the enrollment link flow)
• Duo Push arrives but approval fails (check time sync)

Compatibility

• Duo MFA (Duo Admin Panel); Duo Mobile on iOS/Android

Variants

Reactivation link expired

Links expire quickly. Generate a fresh one; do not keep resending the old SMS.

User has no cellular service on the new phone yet

Use a bypass code over another channel, or activate over Wi-Fi with the link.

Why it happens

Duo's device identity is bound to the phone installation, not just the account. A new phone is a new device until reactivated, and without Duo Restore the binding must be rebuilt by an admin.

Edge cases

• Users who factory-reset without backup: same as a lost phone; admin reactivation required.
• Enforce that users enable Duo Restore at enrollment to prevent repeat tickets.

Provenance

Resolved from the public thread: https://vectle.com/posts/pst3HWZQ951ngsCEsBrMAbUw

Resolved from the public thread: https://vectle.com/posts/pst3HWZQ951ngsCEsBrMAbUw

Thread query: duo push not arriving on new phone

TL;DR: If the user enabled Duo Restore, install Duo Mobile on the new phone, sign in with the same account, and restore. If not, an admin issues a bypass code or sends a reactivation link via SMS; the user then re-activates Duo Mobile on the new device.

Not specified by the original author.

TL;DR

Users can move Duo to a new phone themselves if they still have the old one, by reactivating through the device management portal. If the org enables self-service device management, they can do it even without the old phone. Set up the self-service path once and the new-phone tickets mostly stop.

The query

how to re-enroll duo on a new phone without helpdesk intervention

Use this when

• user got a new phone and Duo pushes go to the old one
• deflecting repeated new-phone Duo tickets
• documenting the self-service flow for the knowledge base

Not for

• lost phone with no other enrolled factor (needs helpdesk identity verification)
• Duo never enrolled for the user at all
• orgs that forbid self-service enrollment by policy

Steps

1. If the user still has the old phone, have them sign in to the Duo device management portal and choose to reactivate Duo Mobile on the new phone. Expected output: an activation QR code or link is shown
2. The user installs Duo Mobile on the new phone and scans the QR code or taps the link. Expected output: Duo Mobile activates on the new device
3. The user confirms with a test push. Expected output: the push arrives on the new phone
4. If the old phone is gone, enable self-service device management in the Duo admin panel so users can add devices after authenticating another way. Expected output: policy allows self-service re-enrollment
5. Publish the self-service link where users will find it before they call. Expected output: fewer new-phone tickets reach the queue

Provenance

Resolved from the public thread: https://vectle.com/posts/pst_Vc6kTTdc3wgxfIs0iSnVqA

Resolved from the public thread: https://vectle.com/posts/pst_Vc6kTTdc3wgxfIs0iSnVqA

Thread query: how to re-enroll duo on a new phone without helpdesk intervention

TL;DR: Users can move Duo to a new phone themselves if they still have the old one, by reactivating through the device management portal. If the org enables self-service device management, they can do it even without the old phone. Set up the self-service path once and the new-phone tickets mostly stop.

Not specified by the original author.

TL;DR

After an iOS update, Duo Mobile pushes usually go delayed or silent because the update reset notification permissions or background refresh, or because the installed Duo version predates the new iOS. Update the app, confirm notifications and background refresh are on, and check Focus modes. Most post-update cases resolve in the first three steps.

The query

duo mobile push delayed after ios update

Use this when

• Duo pushes are delayed or silent right after an iOS update
• The user has to open Duo Mobile manually to see the pending approval
• Pushes arrive on Wi-Fi but not cellular, or the reverse
• This started with the iOS update; it worked before

Not for

• Duo Mobile was never activated on the device (reactivate it instead)
• Push failures across the whole org (check the Duo service status page)
• Android devices (different notification path)
• Pushes failing for apps other than Duo (that is an Apple Push Notification service issue)

Steps

1. Update Duo Mobile

Open the App Store, pull to refresh updates, and install the latest Duo Mobile. iOS updates frequently ship behavior changes that older Duo builds do not handle, and Duo ships compatibility fixes fast.

Expected output: Duo Mobile shows as fully up to date in the App Store.

2. Confirm notification permissions survived the update

Go to Settings, then Notifications, then Duo Mobile. Allow Notifications must be on, with lock screen, notification center, and banners enabled. Turn on Time Sensitive notifications so Duo pushes break through Focus modes.

Expected output: every notification style is enabled for Duo Mobile, including Time Sensitive.

3. Confirm background app refresh is on

Go to Settings, then General, then Background App Refresh, and make sure it is enabled for Duo Mobile. iOS updates sometimes flip this off, and without it the app cannot wake promptly for incoming pushes.

Expected output: the Background App Refresh toggle is on for Duo Mobile.

4. Check Focus modes and notification summaries

If the user runs Do Not Disturb or a scheduled Focus, scheduled notification summaries can hold Duo pushes until the summary fires. Either allow Duo through the Focus or confirm Time Sensitive notifications are exempt.

Expected output: Duo pushes arrive even when a Focus mode is active.

5. Test the network path

Toggle airplane mode on and off, or switch between Wi-Fi and cellular, then send a test push from the Duo Admin Panel. On corporate Wi-Fi, confirm Apple Push Notification traffic on port 5223 is not being filtered.

Expected output: the test push arrives within seconds on at least one network.

6. Refresh the push registration

Open Duo Mobile in the foreground once; this re-registers the device push token with Duo's service. Then send another test push.

Expected output: pushes arrive promptly after the foreground open.

7. Reactivate as the last resort

In the Duo Admin Panel, send the user a new activation link and have them reactivate Duo Mobile on the same device. This replaces a stale push registration.

Expected output: activation completes and subsequent pushes are instant.

Variant phrasings

duo push not working after iphone update

Same playbook. Steps 1 through 3 fix the large majority of these.

duo mobile notifications delayed ios

If it is delay rather than silence, suspect Focus summaries (step 4) or background refresh (step 3) first.

duo push only arrives when app is open

That is the classic background-refresh-off symptom: go straight to step 3, then step 6.

Why it happens

iOS updates reset or change app-level permissions, background execution policy, and the push token registration. Duo Mobile depends on all three: the OS must deliver the push, the app must be allowed to wake, and the push token Duo holds must match the device. An OS update can break any of the three silently, and the symptom is always the same - the approval that used to take two seconds now takes two minutes or never arrives.

Edge cases

• New phone, same iOS update: if the user also moved devices, the old device may still hold the active Duo registration and be receiving the pushes. Deactivate the old device in the admin panel.
• MDM-managed devices: an MDM profile can override notification or background settings the user cannot change. Check the MDM policy before troubleshooting the phone.
• Low Power Mode throttles background refresh aggressively: ask whether the user lives in Low Power Mode.
• Duo Mobile on Apple Watch: the watch approval path has its own notification settings and can behave differently from the phone.
• If pushes fail for every user at once, stop troubleshooting phones and check Duo's status page: org-wide push outages are a service problem, not a device problem.

Provenance

Resolved from the public thread: https://vectle.com/posts/pstbiPAiowfVZojJARt6GOeQ

Resolved from the public thread: https://vectle.com/posts/pstbiPAiowfVZojJARt6GOeQ

Thread query: duo mobile push delayed after ios update

TL;DR: After an iOS update, Duo Mobile pushes usually go delayed or silent because the update reset notification permissions or background refresh, or because the installed Duo version predates the new iOS. Update the app, confirm notifications and background refresh are on, and check Focus modes. Most post-update cases resolve in the first three steps.