Duo Authentication for Windows Logon adds Duo two-factor authentication to these Windows and Windows Server logon scenarios: - Local or domain account logins - Logins at the local console and/or incoming Remote Desktop (RDP) connections - Credentialed User Access Control (UAC) elevation requests (e.g. Right-click + "Run as administrator") in v4.1.0 and later Duo's Windows Logon client does not add a secondary authentication prompt to the following logon types: - Shift + right-click "Run as different user" - PowerShell "Enter-PSSession" or "Invoke-Command" cmdlets - Non-interactive logons (i.e. Log on as a Service, Log on as Batch, Scheduled Tasks, drive mappings, etc.) - Pre-Logon Access Providers (PLAPs) such as Windows Always On VPN - RDP Restricted Admin Mode
What's new in 6.0.0.4198
General Availability of Offline Access for Passwordless OS Logon.
Adds the Duo WinLogon Support Tool, a graphical diagnostic application for collecting logs, viewing log files, checking Duo connectivity, and validating time synchronization.
Updates the PowerShell support script (Winlogon-Diag.ps1) to remove the dependency on Internet Explorer, update the connectivity check to use Invoke-RestMethod, add GPO registry key collection, RDP and NLA status reporting, UAC and policy analysis output, and remove legacy Windows 7/Vista code paths.
Adds support for GoTrustID security keys for offline authentication.
Adds the EnableSSPRFix registry value to permit Microsoft Entra ID Self-Service Password Reset (SSPR).
Removes support for TLS 1.1 and earlier. Connections to Duo's cloud service now require TLS 1.2 or later.
Migrates cryptographic operations from legacy CAPI to CNG and from DPAPI to DPAPI NG to support FIPS compliance requirements.
"Remember Me" is now disabled during cross-session UAC elevation and password reset flows.
Fixes and enhancements for password reset during Windows logon.
The executable installer now displays the VC++ Redistributable installer if not already present, allowing the user to control any required reboot before Duo setup continues.
The installer now enforces OS version compliance, permitting installation only on Windows 10 and later or Windows Server 2016 and later. This matches the stated supported operating systems.
Corrects an issue where trusted sessions did not work correctly when multiple users had active sessions on the same machine.
Improvements to Bluetooth adapter detection and BLE connection stability.
Duo Authentication for Windows Logon version history
5.3.0.2497Apr 2, 2026
Beta of Offline Access for Passwordless OS Logon. Users log in securely via Bluetooth connection to a mobile device with Duo Mobile and platform biometric or PIN verification when the Windows system cannot contact Duo's service.
Adds the registry value PwlOfflineAvailable which overrides the Admin Panel setting to disable offline access for passwordless OS logon at the local endpoint.
Duo Mobile push requests now show the RDP application name specified in the Admin Panel.
Minor UI fixes for passwordless OS logon.
Corrects an issue where the ProvidersWhitelist registry value may not have persisted on upgrade via silent install.
Adds additional debug logging.
5.2.1.2007Dec 15, 2025
This release corrects the silent install issue present in 5.2.0.
Corrects an issue where enrollments for offline access and passwordless OS logon were not persisted on upgrade via silent install.
Corrects an issue where custom registry keys (such as ProvidersWhitelist) may not have persisted on upgrade via silent install.
Corrects an issue where the GUI installer may not have deleted registry export files after completing installation.
The ARM64 installer now supports a specified value for EnableCertPinning during silent install.
4.2.0.1263
Frequently asked questions
Is Duo Authentication for Windows Logon free?
Duo Authentication for Windows Logon is proprietary software from Duo Security Inc.. Check the publisher's license terms for pricing and usage rights.
What is the latest version of Duo Authentication for Windows Logon?
The latest version is 6.0.0.4198, released on Sep 3, 2026.
Is it safe to download Duo Authentication for Windows Logon?
The download button links to the official installer published on dl.duosecurity.com, the same file Windows Package Manager installs. You can verify the downloaded file by comparing its SHA-256 checksum with e036c33d6c0c36184fd739da3944cd11f6a275e61a6315f2be59a50db0e4dcdd.
Which Windows versions does Duo Authentication for Windows Logon support?
Duo Authentication for Windows Logon runs on Windows and is available for 32-bit (x86) systems.
How do I install Duo Authentication for Windows Logon silently?
Run the offline installer with "duo-win-login-6.0.0.exe" /quiet /norestart, or install it with Windows Package Manager: winget install --id=DuoSecurity.Duo2FAAuthenticationforWindows -e --silent.
How do I uninstall Duo Authentication for Windows Logon?
Open Settings › Apps › Installed apps, find Duo Authentication for Windows Logon and select Uninstall. From the command line, run winget uninstall --id=DuoSecurity.Duo2FAAuthenticationforWindows -e.
Alternatives to Duo Authentication for Windows Logon
Other Remote control programs for Windows from different developers.
A complete digital workspace solution that delivers secure access to the information, apps, and other content that is relevant to a person’s role in your organization.
The Duo Device Health application and policy gives Duo Premier and Duo Advantage customers more control over which laptop and desktop devices can access corporate applications based on the security po
Duo Desktop helps enforce security posture requirements for endpoints by performing health checks before granting access to Duo-protected applications.
