- Level
- confirmed
- Worst impact
- Degraded
- Components
- Core Authentication Service, Core Authentication Service, Core Authentication Service, Core Authentication Service, Core Authentication Service, Admin Panel, Core Authentication Service, Core Authentication Service, Core Authentication Service, Core Authentication Service, Core Authentication Service, Core Authentication Service, Core Authentication Service, Core Authentication Service, Core Authentication Service, Core Authentication Service, Core Authentication Service, Core Authentication Service, Core Authentication Service, Core Authentication Service, Core Authentication Service, Core Authentication Service, Core Authentication Service, Core Authentication Service, Core Authentication Service, Core Authentication Service, Core Authentication Service, Core Authentication Service, Core Authentication Service, Core Authentication Service, Core Authentication Service, Core Authentication Service, Core Authentication Service, Core Authentication Service, Core Authentication Service, Core Authentication Service, Core Authentication Service, Core Authentication Service, Core Authentication Service, Core Authentication Service, Core Authentication Service, Core Authentication Service, Core Authentication Service, Core Authentication Service, Core Authentication Service, Core Authentication Service, Core Authentication Service, Core Authentication Service, Core Authentication Service, Core Authentication Service, Core Authentication Service, Core Authentication Service, Core Authentication Service, Core Authentication Service, Core Authentication Service, Core Authentication Service, Core Authentication Service, Core Authentication Service, Core Authentication Service, Core Authentication Service, Core Authentication Service, Core Authentication Service, Core Authentication Service, Core Authentication Service, Core Authentication Service, Core Authentication Service, Core Authentication Service, Core Authentication Service, Core Authentication Service, Core Authentication Service, Core Authentication Service, Core Authentication Service, Core Authentication Service, Core Authentication Service, Core Authentication Service, Core Authentication Service, Core Authentication Service, Core Authentication Service, Core Authentication Service
- Down Index
- 25of 100
What to do
Check whether you use Duo Security Core Authentication Service, Core Authentication Service, Core Authentication Service, Core Authentication Service and 75 more. Check your stack
Paste a package.json, lockfile, Terraform or a list of domains at down.guide/stack to see every provider you depend on.Confirm your retries, queues and scheduled jobs caught up after the 11h 33m it lasted.
Anything that failed between 2025-08-29 17:30 UTC and 2025-08-30 05:03 UTC may need a replay.Subscribe to Duo Security's feed to hear about the next one first. RSS feed
https://down.guide/feed?provider=duo works in Slack (/feed subscribe), Discord feed bots and any RSS reader.
Updates from Duo Security 4
- identified
We are currently aware of an issue that is impacting users logging into web-based applications from both Chrome and Edge version 136 that causes a blank Duo Prompt to appear. We are working on a fix for this issue urgently and hope to provide an update soon. As a workaround, if users upgrade their browser to a newer version, authentication will work as normal, which is also a recommended best practice for security as well. Additionally, users logging into Epic Hyperdrive may also experience this issue when attempting to log in, and our fix will also apply to that application once released. As a temporary workaround, you can downgrade Hyperdrive to 100.2506.3, which will move to a lower Chromium Version (134.0.6998.205) and no longer see the issue. As soon as our fix has been released, we'll provide an update as soon as possible.
provider
- monitoring
A fix has been deployed for the blank prompt issue affecting Chrome/Edge version 136. We are monitoring the results of the fix at this time. Please check back here or subscribe to updates for any changes.
provider
- resolved
The issue causing the blank prompt is now resolved and full functionality is restored. We will be posting a root-cause analysis (RCA) here once our engineering team has finished its thorough investigation of the issue.
provider
- postmortem
### Summary An apparent defect in v136 of Chromium-based browsers \(such as Google Chrome and Microsoft Edge\) caused newly added code in Duo’s web-based prompt, when interacting with Duo Desktop, to freeze or crash the browser tab. The issue was specific to version 136; all other versions did not exhibit the problem. Duo has deployed a fix to ensure this behavior is not present in these versions. ### Timeline of Events * 8/29/2025 1:25am EST - Duo engineering is alerted of a customer reporting the issue * 8/29/2025 1:22pm EST - Incident created * 8/29/2025 9:35pm EST - Started deploying the update to fix the issue * 8/29/2025 11:36pm EST - Finished deploying the update to fix the issue * 8/30/2025 12:07am EST - Status page is updated to monitoring * 8/30/2025 1:02am EST - Status page is updated to resolved ### Details Updates were added to D322 to check whether the Chrome Local Network Access permission setting was enabled in the browser being used to authenticate. The Local Network Access permission is being added to Chromium-based browsers in v141, and changes were added to improve the user experience if the Local Network Access permission is not enabled. More details can be found in [this Duo Knowledge Base article](https://help.duo.com/s/article/9470?language=en_US). In v136 of Chromium-based browsers, the change that was added to check the Local Network Access permission caused the browser to freeze or crash. To resolve this issue, Duo added a change to not check the Chrome Local Network Access permission if v136 of a Chromium based browser is being used. Since the Chrome Local Network Access permission is being released in v141, this change did not have any negative impact. Duo will explore adding additional testing and alerting for issues like this one, where only specific browser versions are impacted by an issue.
provider
Reports count in aggregate; nothing about you is shown.
Corrections
None so far.
Something wrong on this page? Report an error or send us a note. Every fix is listed here.
Questions about DWN-1b8ebdab1d
Is Duo Security still down?
No, this incident was resolved 2025-08-30 05:03 UTC. For Duo Security's live state, see https://down.guide/duo.
How long did it last?
11h 33m, from 2025-08-29 17:30 UTC to 2025-08-30 05:03 UTC, by the times Duo Security posted.
What was affected?
Duo Security named Core Authentication Service, Core Authentication Service, Core Authentication Service, Core Authentication Service and 75 more.
What caused it?
Duo Security hasn't published a root cause. If it does, it shows here.
Where does this come from?
Duo Security's official status page, https://status.duo.com, quoted verbatim. down.guide's own probes, reports and social counts are labeled as ours.