Introducing Okta: The new way to verify your identity with HarvardKey

Over the next year, the University will replace Duo with a new authentication service called Okta for HarvardKey identity verification. Okta offers enhanced authentication methods that improve security while making sign-in faster and easier.  
 
You can learn more about Okta below or find more information on our website.  

If you have any questions or need help, you can contact the HUIT Service Desk or your local IT support. 

What is Okta?

Okta is Harvard’s new multi-factor authentication (MFA) service to verify your identity when you sign in to HarvardKey, replacing Duo. By spring 2026, all HarvardKey users will be required to use Okta.   

When and how will I switch to Okta?

In February, you linked your Duo account to Okta. The next step is to set up Okta on the devices that you use to sign in to HarvardKey.  

• You will be contacted by HUIT or your School’s local IT support with a specific deadline to set up Okta, and instructions on how to do so.
• If you want to set up Okta sooner, you can do so at your convenience by following these step-by-step instructions.    

What are the benefits of switching to Okta?

Okta’s FastPass feature enables you to verify your identity using your device’s built-in security mechanisms—including fingerprint or facial recognition or device-specific PINs—instead of entering your HarvardKey password. Sometimes known as “passwordless” authentication, this makes signing in faster and more secure. Learn more.  
 
Okta also supports alternative authentication methods, including push notifications and hardware tokens (e.g. YubiKeys).

Where can I learn more?

You can find more detailed information and FAQs about this change, including an explanation of how FastPass (“passwordless”) authentication works, on our website.