Multi-factor authentication (MFA) provides extra security to make sure it’s really you when you log in to certain UQ websites and systems.

Logging in using multi-factor authentication is a two-step process:

  1. Enter your username and password.
  2. Confirm it’s you by using a trusted mobile device (e.g. by accepting a notification or entering a code sent to your mobile phone).

Some staff are required to use multi-factor authentication when they use Single Sign-On to access certain systems, including:

  • MyAurion
  • Office 365
  • Blackboard (learn.UQ)
  • WebPrism
  • VPN.

If you’re required to use multi-factor authentication, you’ll receive an email with instructions. You’ll need to register first, and then use multi-factor authentication each time you log in to relevant systems.

Multi-factor authentication will be required for more staff over time.

Registering for multi-factor authentication

To register, you’ll need:

  • your mobile device (smartphone or tablet)
  • a computer or other device.

If you don’t have a smartphone or tablet, or don’t want to use one, you can submit an IT request to ask for a MFA token. When you collect the token, you’ll be shown how to use it to register and log in with multi-factor authentication.

To register for multi-factor authentication:

  1. On your mobile device, download the Duo Mobile app from Google Play or the App Store.
  2. On your computer, go to the MFA portal.
  3. Enter your date of birth and click ‘Submit’.
  4. Click ‘Start setup’.
  5. Select the type of device you wish to add and click ‘Continue’.
  6. Enter your mobile phone number and click ‘Continue’. This number will be used to recover your account if you lose access to it.
  7. Select your device's operating system and click ‘Continue’.
  8. Click ‘I have Duo Mobile Installed’.
  9. On your mobile device, open the Duo Mobile app and tap the plus icon (+) to add a new account.
  10. The app will open a QR code scanner, similar to a camera. Focus it on the QR code (square barcode) on your computer screen.
  11. When the tick appears to confirm the app has registered the QR code, tap ‘Continue’.
  12. On your computer, click ‘Continue to Login’.

You’ll now need to use your registered device when you log in to UQ websites and systems that require multi-factor authentication.

Logging in using multi-factor authentication

When you log in to a UQ website or system that requires multi-factor authentication, you’ll be asked how you would like to authenticate.

If you select:

  • ‘Enter a passcode’, you’ll need to open the Duo Mobile app and enter the passcode from the app on the login screen of the website or system
  • ‘Send me a push’, a notification will appear on your mobile device that asks you to accept or deny access.

If you have multiple devices registered, you can choose which one you want to use.

If you prefer to always use a particular authentication method, you can select that in your device settings on the MFA portal.

VPN users: If you enter a passcode or use a MFA token, the authentication process for logging in to the VPN is slightly different. Follow the VPN authentication instructions

Managing the devices you use for authentication

Once you’re registered, you can go to the MFA portal to:

  • add, remove or change the device you use for multi-factor authentication
  • select or change your preferred authentication method.


UQ uses Duo as its multi-factor authentication provider. Duo is a cloud-based service, which is located outside Australia.

When you register to use the multi-factor authentication service at UQ, some information is sent to Duo and stored on Duo servers. This information is used to provide you with multi-factor authentication services, and is limited to:

  • your UQ account username (e.g. ‘uqabcde’)
  • details of the devices you use for authentication (e.g. your mobile phone number).

By using this multi-factor authentication service, you agree to the transfer of this information outside Australia.

For more information, submit an IT request.

We're here to help

Before contacting us, try browsing or searching for common questions.

Submit staff IT request