Two-factor authentication (2FA) provides extra security to make sure it’s really you when you log in to certain UQ websites and systems.

Logging in using two-factor authentication is a two-step process:

  1. Enter your username and password.
  2. Confirm it’s you by using a trusted mobile device (e.g. by accepting a notification or entering a code sent to your mobile phone).

Some staff are required to use two-factor authentication when they use Single Sign-On to access certain systems, including:

  • MyAurion
  • Office 365
  • Blackboard (learn.UQ)
  • WebPrism
  • VPN.

If you’re required to use two-factor authentication, you’ll receive an email with instructions. You’ll need to register first, and then use two-factor authentication each time you log in to relevant systems.

Two-factor authentication will be required for more staff over time.

Registering for two-factor authentication

To register, you’ll need:

  • your mobile device (smartphone or tablet)
  • a computer or other device.

If you don’t have a smartphone or tablet, or don’t want to use one, you can submit an IT request to ask for a 2FA token. When you collect the token, you’ll be shown how to use it to register and log in with two-factor authentication.

To register for two-factor authentication:

  1. On your mobile device, download the Duo Mobile app from Google Play or the App Store.
  2. On your computer, go to the 2FA portal.
  3. Enter your date of birth and click ‘Submit’.
  4. Click ‘Start setup’.
  5. Select the type of device you wish to add and click ‘Continue’.
  6. Enter your mobile phone number and click ‘Continue’. This number will be used to recover your account if you lose access to it.
  7. Select your device's operating system and click ‘Continue’.
  8. Click ‘I have Duo Mobile Installed’.
  9. On your mobile device, open the Duo Mobile app and tap the plus icon (+) to add a new account.
  10. The app will open a QR code scanner, similar to a camera. Focus it on the QR code (square barcode) on your computer screen.
  11. When the tick appears to confirm the app has registered the QR code, tap ‘Continue’.
  12. On your computer, click ‘Continue to Login’.

You’ll now need to use your registered device when you log in to UQ websites and systems that require two-factor authentication.

Logging in using two-factor authentication

When you log in to a UQ website or system that requires two-factor authentication, you’ll be asked how you would like to authenticate.

If you select:

  • ‘Enter a passcode’, you’ll need to open the Duo Mobile app and enter the passcode from the app on the login screen of the website or system
  • ‘Send me a push’, a notification will appear on your mobile device that asks you to accept or deny access.

If you have multiple devices registered, you can choose which one you want to use.

If you prefer to always use a particular authentication method, you can select that in your device settings on the 2FA portal.

VPN users: If you enter a passcode or use a 2FA token, the authentication process for logging in to the VPN is slightly different. Follow the VPN authentication instructions

Managing the devices you use for authentication

Once you’re registered, you can go to the 2FA portal to:

  • add, remove or change the device you use for two-factor authentication
  • select or change your preferred authentication method.

Privacy

UQ uses Duo as its two-factor authentication provider. Duo is a cloud-based service, which is located outside Australia.

When you register to use the two-factor authentication service at UQ, some information is sent to Duo and stored on Duo servers. This information is used to provide you with two-factor authentication services, and is limited to:

  • your UQ account username (e.g. ‘uqabcde’)
  • details of the devices you use for authentication (e.g. your mobile phone number).

By using this two-factor authentication service, you agree to the transfer of this information outside Australia.

For more information, submit an IT request.

We're here to help

Before contacting us, try browsing or searching for common questions.

Submit staff IT request