# Cisco Duo

> Multi-factor authentication and device trust for logins and VPNs.

Cisco Duo is a cloud-based multi-factor authentication and device trust platform that adds a second login factor (typically a phone app push) to VPNs, on-premises applications and cloud services. Pricing starts at $3 per user per month with a free tier for up to 10 users. Listing updated 6 September 2026. Checked by MSP Software 6 September 2026.

- Page: https://mspsoftware.net/software/duo
- Vendor: Cisco, https://mspsoftware.net/vendors/cisco, website https://duo.com
- Categories: Identity and access (primary), Remote access and support
- Free trial: yes. Free version: yes.
- Deployment: cloud. Platforms: Windows, macOS, iOS, Android and web. HQ: United States. Founded: 2010.
- Support: email, help desk, knowledge base and phone. Training: documentation, videos and webinars.

## From the vendor

Cisco Duo is a multi-factor authentication and device trust platform from Cisco for adding a second login factor to applications, VPNs and remote access tools. It suits MSPs adding MFA to systems that do not already include it well, such as legacy VPNs, on-premises applications or shared logins, since Duo is built to sit in front of almost any authentication flow rather than only Microsoft or Google accounts. The most common second factor is a push notification to a phone app, though it also supports SMS, phone calls and hardware security keys. Duo works for organisations of any size, from a handful of users needing MFA on a single VPN to larger enterprises standardising MFA across many applications at once. It spans Windows, macOS, iOS, Android and web platforms, so device trust checks work consistently across whatever devices a client's staff use day to day. Beyond MFA, Duo also offers single sign-on and conditional access with device trust policies that adapt access rules based on device health, location and risk signals. Pricing is per user per month, published in three paid tiers on Duo's website starting at $3 per user per month (USD), billed monthly or annually (checked September 2026). A free tier is available for organisations with 10 or fewer users. Duo integrates with a very wide range of VPNs, firewalls, on-premises applications and cloud services through SAML, RADIUS and dedicated connectors, and with the wider Cisco security portfolio including Cisco Umbrella and Cisco Secure Email for organisations building on Cisco's network and identity products. Duo is based in the United States. MSPs comparing Duo against MFA built into Microsoft Entra ID or Google Workspace should check whether the client's applications actually need Duo's broader protocol support, since Duo earns its cost mainly where an organisation has systems that do not already support modern authentication on their own.

## Pricing

Cisco Duo starts at US$3.00 per user per month, according to the vendor (pricing page: https://duo.com/pricing).

| Plan | Price | Per | Highlights |
| --- | --- | --- | --- |
| Duo Essentials | US$3.00 | user per month | Strong MFA, Integrations, Basic device trust |
| Duo Advantage | US$6.00 | user per month | Advanced MFA, Device trust policies, Broader app support |
| Duo Premier | US$9.00 | user per month | Complete MFA, Passwordless options, Advanced integrations |

## Features

| Feature | Supported | Note |
| --- | --- | --- |
| Multi-factor authentication | yes |  |
| Single sign-on | yes |  |
| Conditional access and device trust | yes | Device trust policies based on device health and risk signals |
| Privileged access management | no |  |
| Passwordless and passkey support | yes | Passwordless options available in Premier tier |
| Directory sync | no |  |
| Session and risk monitoring | yes | Device trust and risk-based access policies |
| Legacy VPN and app support | yes | SAML, RADIUS and dedicated connectors for legacy VPNs and on-premises apps |
| Self-service password reset | no |  |
| Breach monitoring | no |  |
| RADIUS and SAML support | yes |  |
| Admin audit log | yes | Admin audit log and event tracking |

## Integrations

- Cisco Umbrella, https://mspsoftware.net/software/cisco-umbrella
- Cisco Secure Email, https://mspsoftware.net/software/cisco-secure-email
- Microsoft 365, https://duo.com/integrations
- Google Workspace, https://duo.com/integrations

Listed products that integrate with Cisco Duo: 1Password Business, Action1, Augmentt, Bitwarden, Cisco Secure Email, Cisco Umbrella, Cybereason Defense Platform, Dashlane Business, Keeper, ManageEngine Password Manager Pro, Material Security and Todyl.

## Alternatives

- Rublon: Multi-factor authentication for cloud apps, VPNs and legacy systems with a free tier. https://mspsoftware.net/software/rublon. Compare: https://mspsoftware.net/compare/duo-vs-rublon
- Microsoft Entra ID: Cloud identity and SSO platform for Microsoft 365 and cloud applications, priced per user monthly. https://mspsoftware.net/software/microsoft-entra-id. Compare: https://mspsoftware.net/compare/duo-vs-microsoft-entra-id
- Ping Identity: Enterprise identity platform with SSO, MFA, conditional access and cloud or on-premises deployment. https://mspsoftware.net/software/ping-identity. Compare: https://mspsoftware.net/compare/duo-vs-ping-identity
- miniOrange: Identity and access management platform with SSO, MFA, and 6000+ integrations, priced per user. https://mspsoftware.net/software/miniorange. Compare: https://mspsoftware.net/compare/duo-vs-miniorange

## FAQ

### How much does Cisco Duo cost?

Cisco Duo starts at US$3.00 per user per month, according to the vendor, checked September 2026.

### Does Cisco Duo offer a free trial?

Cisco Duo offers a free trial. There is a genuinely free version.

### What does Cisco Duo integrate with?

Cisco Duo lists integrations with Cisco Umbrella, Cisco Secure Email, Microsoft 365 and Google Workspace.

### What integrates with Cisco Duo?

1Password Business, Action1, Augmentt, Bitwarden, Cisco Secure Email and Cisco Umbrella list an integration with Cisco Duo.

### Is Cisco Duo cloud or on-premises?

Cisco Duo is cloud-hosted; there is no on-premises version.

### Who is Cisco Duo for?

MSPs report using Cisco Duo at sizes of 1-5, 6-15, 16-50, 51-200 and 200+ technicians.

### Is there a free version of Cisco Duo?

Cisco Duo publishes a free tier on its pricing page for organisations with 10 or fewer users, alongside three paid tiers priced per user per month with more features such as device trust policies and broader application support. The free tier includes strong MFA and a free authenticator app. MSPs can quote a client directly from Duo's published pricing page without needing a sales conversation for smaller deployments.

### Does Cisco Duo work with applications that are not Microsoft or Google?

Cisco Duo connects to a very wide range of VPNs, firewalls, on-premises applications and cloud services through SAML, RADIUS and dedicated connectors, rather than being limited to Microsoft or Google accounts. That breadth of protocol support is one of Duo's main strengths and makes it a common choice for adding MFA to legacy or on-premises systems that do not have modern authentication built in, as well as for hybrid environments using multiple identity platforms.

### Do I need other Cisco products to use Cisco Duo?

Cisco Duo can be deployed as a standalone MFA and device trust product without any other Cisco hardware or software. It does integrate with the wider Cisco security portfolio, including Cisco Umbrella for DNS filtering and Cisco Secure Email, for organisations that are already building on Cisco's network and identity products, but this integration is optional rather than required for Duo to function.

### How does Cisco Duo compare with Microsoft Entra ID's built-in MFA?

Cisco Duo is typically added where a client also needs MFA on systems that Microsoft Entra ID does not cover well, such as legacy VPNs or on-premises applications, rather than as a replacement for Entra ID's own MFA on Microsoft services. Entra ID includes its own MFA for Microsoft 365 and Azure AD-connected applications at no extra product cost in many licence tiers, while Duo's strength is its broad protocol support across heterogeneous environments with non-Microsoft systems.

### What should I check before recommending Cisco Duo to a client?

Cisco Duo is most valuable when a client's applications actually need its SAML, RADIUS or dedicated connector support. If a client is fully on Microsoft 365 or Google Workspace and those platforms already cover their MFA needs, Duo may add unnecessary per-user cost. Check whether the client has legacy VPNs, on-premises applications or non-standard authentication flows that would benefit from Duo's broad integration capabilities before committing to a per-user monthly subscription.