Cisco Duo is a multi-factor authentication and access security service for businesses, free for up to 10 users with paid plans from $3 per user a month.
Cisco Duo is a multi-factor authentication and access security service for businesses, protecting VPNs, cloud apps and computer logins. It suits IT teams of any size. Duo Free covers up to 10 users, and paid editions list at $3, $6 and $9 per user a month with a 30-day trial.
Duo Security is now Cisco Duo
Cisco completed its acquisition of Duo Security on 1 October 2018. The product is now sold as Cisco Duo at duo.com, and Cisco describes it as its identity and access management product.
Checked October 4, 2026
The bottom line
A safe default for business MFA, with a real free tier for tiny teams.
8.5
Our score
8.5 / 10
Conversion Gems editorial verdict
Free up to 10 users; from $3/user/mo
Features9/10
9 - MFA, passwordless, SSO, device trust, risk-based policies and VPN-less access across four editions.
Value8/10
8 - free for up to 10 users and published list prices from $3/user/mo; telephony credits extra.
Ease of use8/10
8 - self-service trial and admin panel; per-app integrations need IT setup.
Ecosystem9/10
9 - protects VPNs, cloud and on-premises apps and OS logins, with an Admin API and Cisco security integrations.
Support8/10
8 - extensive docs, a support center and Cisco backing; support level by edition not verified.
What it really is
Cisco's cloud MFA and access security service for business sign-ins.
Our take
Duo is one of the easiest ways for an IT team to put MFA in front of VPNs, cloud apps and computer logins, and its list prices are published, which is rare in identity security. Essentials at $3 per user covers MFA, passwordless and SSO for most small companies. The catches are in the details: SMS and phone codes use credits, licenses come in blocks, and the risk-based features most people associate with modern zero trust sit in Advantage and Premier.
Why we rate it
It brings MFA, SSO and device checks to business apps at published per-user prices.
The catch
Telephony credits, license blocks, and key risk features only in higher editions.
Best for
Business MFA on VPNs and cloud apps
Small teams on the 10-user Free tier
Device trust before access
Not good for
Personal consumer 2FA
Teams relying on SMS codes without budgeting credits
Full device management
Friction report
Time to value
Fast for basic MFA: activate the trial and protect a first app the same day.
Scale breakpoint
Moving to Advantage or Premier for risk-based policies and VPN-less access.
Walled garden
Medium: users enroll in Duo Mobile and policies live in the Duo Admin Panel.
Cisco Duo editions and pricing
Edition
List price
Users
What it adds
Duo Free
$0
Up to 10
MFA with Duo Mobile push for cloud and on-premises apps
Duo Essentials
$3 per user/month
No stated cap
Duo Directory, phishing-resistant MFA, passwordless, SSO, trusted endpoints
Duo Advantage
$6 per user/month
No stated cap
Cisco Identity Intelligence, Duo Passport, session theft protection, risk-based authentication
Duo Premier
$9 per user/month
No stated cap
Duo Network Gateway for VPN-less access and full device trust
From Cisco Duo's pricing page, checked 4 October 2026. Paid editions have a 30-day free trial; licenses are sold in blocks of 10 (under 100 users) or 25. SMS and phone codes use telephony credits: paid editions with automatic billing get 100 credits per user per year, Duo Free gets none.
Frequently Asked Questions
Duo Free is $0 for up to 10 users. Paid editions list at $3 (Essentials), $6 (Advantage) and $9 (Premier) per user per month, with a 30-day free trial. Licenses are sold in blocks of 10 users, or 25 above 100 users (checked 4 October 2026).
Duo Free costs nothing for up to 10 users, but it is set up as an organization account with an admin panel, not a personal app. The Duo Mobile authenticator app itself is free to download.
After you enter your password, Duo asks for a second check, usually a push notification in the Duo Mobile app that you approve. Admins can also require trusted devices and set policies by user, device and location.
Duo supports one-time passcodes generated in the Duo Mobile app, sent by SMS, or from a hardware token, depending on what your organization enables. SMS passcodes and phone calls use telephony credits on the organization's account.
Conversion Gems is a review site, not a Duo login page. Administrators sign in to the Duo Admin Panel at https://admin.duosecurity.com. End users approve sign-ins through the app or login page their organization protects.
TruGrid combines MFA with remote desktop access, Twingate replaces the VPN with zero trust network access, and Microsoft Intune handles device management for Microsoft-centred teams.
Cisco Duo alternatives
Other security and access tools in our directory:
TruGrid: Remote desktop access with built-in multi-factor authentication.
Twingate: Zero trust network access that replaces a traditional VPN.
Microsoft Intune: Device management and compliance for Microsoft-centred organizations.
1Password: Password manager for teams, with shared vaults and admin controls.
