Multi-factor authentication (MFA)

Multi-factor authentication (MFA) provides an extra layer of protection to make sure it's really you when you log into UQ services and systems.

MFA is also referred to as two-factor authentication or 2FA. It requires 2 separate factors to identify you and allow access to your account:

Something you ‘know’ (your username and password).
Something you ‘have’ (e.g. a code sent to your mobile phone).

MFA is extremely effective because even if a criminal is able to obtain your account password, MFA will still prevent them from accessing the account (and is very difficult to circumvent).

MFA is enabled for all UQ staff accounts. The service is provided by Duo Security.

Activating MFA

All UQ staff and staff-like accounts (including HDR students) are required to use MFA. If you are a new starter, you will need to register a device for MFA authentication so that you can log in to UQ services and systems that require MFA.

Most people find using the Duo Mobile smartphone app the most convenient way to use MFA. To activate MFA on your mobile device, you’ll need:

your mobile device (e.g. smartphone). If you don't have a smartphone, submit an IT request (staff login required).
a computer or other device.

If you will be activating MFA for multiple UQ accounts (e.g. a staff account and a student account), follow the instructions for activating multiple accounts.

To activate MFA, watch the video guide or read the steps:

Watch: How to activate MFA

On your mobile device, download the Duo Mobile app from Google Play (Android) or the App Store (iOS).
On your computer, go to MFA activation. If you have multiple UQ accounts, ensure you are logged in with the account you are activating for MFA.
Enter your date of birth and click ‘Submit’.
Click ‘Start setup’.
Select the type of device you wish to add:
- If you are using your mobile phone to activate MFA for your first or only UQ account, select 'Mobile phone' for the device type and enter your mobile number.
- If you are using your mobile phone to activate MFA for additional UQ accounts, select 'Tablet' for the device type.
Select your device's operating system and click ‘Continue’.
Click ‘I have Duo Mobile Installed’.
On your mobile device, open the Duo Mobile app and tap the plus icon (+) to add a new account.
Tap 'Allow' if the app asks for permission to access your camera, so it can open a QR code scanner. Focus it on the QR code (square barcode) on your computer screen.
On your computer, click 'Continue' when the tick appears to confirm the app has registered the QR code.
Click the 'When I log in' drop down menu and choose one of the authentication methods.
Click 'Save', then click ‘Continue to Login’.

You can now use your registered device when logging in to UQ websites and systems that require MFA. You will be prompted whenever this is necessary.

Getting the most from MFA

The MFA Management portal enables you to manage your registered MFA devices and access additional MFA settings and features.

You can:

register new phones or devices to use for MFA without contacting IT support
configure MFA to automatically send a 'Duo push' to your preferred mobile device, instead of asking you to select an MFA method each time
generate a temporary MFA passcode via the MFA Management portal if you forget your MFA device

Enabling and using multi-factor authentication (also referred to as two-factor authentication or 2FA) to secure your personal online accounts is strongly recommended wherever this feature is available.

Frequently asked questions (FAQs)

Here are our answers to common questions about MFA:

Multi-factor authentication (MFA)

Activating MFA

Getting the most from MFA

Frequently asked questions (FAQs)

IT Support