General Multi-Factor information and a list of protected services can be found here.
...
The Duo Mobile app is a secure app designed to protect your privacy.
Your protected data and your passwords are never transmitted to the Duo two-factor system; only your username is transmitted to facilitate the two-factor authentication process.
Duo Mobile has no more access or visibility into your phone than any other app. Duo Mobile cannot:
...
These codes can be stored in a secure location for later use -- these can be used in place of your phone.
After you use the lasts all of these codes, you will automatically be sent a new another list of 10 codes.
You can generate a new list at any time by following the three steps above – all previous codes will expire as soon as you generate a new list.
...
If your previous device was configured for an iCloud or direct Google Play backup, the Duo app on your new phone may offer to restore your setup. If not, you simply need to add your new phone as an additional device.
To add your new device - start by connecting to a Whitman MFA service - for example: <https://my.whitman.edu> enter your Whitman username and password to login
...