Can you remove the "Enter a bypass code" option

[ajatmoii]

Hello, 

We are updating policies within our org and would like to limit the number of users attempting to verify through duo using passcode (duo or sms) when push is available to them. 

I have created a new policy removing all authentication methods besides DUO PUSH and assigned it to an application and test group. 

When signing into an application from a user in that test group, it no longer says "Enter a Passcode" but still gives the option to "Enter a Bypass Code". I've checked and there are no bypass codes assigned to the user being tested. 

I've read through Can I fully remove the "Enter a Passcode" option from the traditional Duo Prompt? and it seems like I've removed all passcode options. I'm guessing the "bypass code" is different from the regular "passcode" options, bust still wondering if there's a way to remove it. 

thanks!

[DuoKristina]

Does your test user have a phone activated for Duo Mobile pushes? If you disallow everything but Duo Push, and a given user doesn't have a device activated for Duo Push, the traditional Duo Prompt will offer bypass code entry as an option. The Universal Prompt will always offer bypass codes as an option, whether the user actually has a bypass code available or not.

There is no way to completely prevent use of bypass codes as an authentication method today (like in the authentication methods policy).

Feel free to contact your Duo Care team, your Duo/Cisco account team, or Duo Support to submit a feature request for either removing the bypass code option from Universal Prompt or adding bypass codes as an option to manage in authentication methods policy.

Also, keep in mind that the traditional Duo Prompt reached end of support back in March 2024. If you are still using the traditional Duo Prompt you should be planning your migration to a supported solution!