Multi-Factor Authentication (MFA) helps protect your UniID account by requiring an additional verification step when you sign in. This means that even if someone discovers your password, they cannot access your account without also providing a second form of authentication.

MFA is now widely used across online banking, government services, social media platforms and cloud services because it provides an important layer of protection against cyber attacks, including phishing and password theft. By using MFA, you help protect both your personal information and UWA data.

UWA requires MFA to help safeguard University systems and services. Depending on the service you are accessing and your location, you may be prompted for MFA when signing in.

What authentication method should I use?

UWA recommends using a Microsoft Authenticator passkey as your primary authentication method.

A passkey is a modern, phishing-resistant authentication method that is both more secure and easier to use than traditional MFA methods. In most cases, this means you can sign in using your UniID username and approve the sign-in with your device, without needing to enter your password. Some UWA services may still require your password.

Passkeys are the preferred authentication method at UWA because they are designed to protect against phishing attacks and provide a faster sign-in experience.

To get the best experience, install the Microsoft Authenticator app and register a Microsoft Authenticator passkey.

What if I already use SMS or phone call MFA?

SMS and phone call verification methods may continue to work for now, but Microsoft has announced that these methods will be retired in February 2027.

Students should move to Microsoft Authenticator and register a passkey as soon as possible to ensure continued access to their UniID account and University services after SMS and phone call MFA are retired.

What happens if I get a new phone?

If you replace your phone, you may need to register a new passkey on your new device before you can continue signing in.

If you have previously configured a backup (synced) passkey through a supported provider such as Apple iCloud Keychain or Google Password Manager, you may be able to continue signing in without assistance.

If you cannot access any of your registered authentication methods, contact the University Library for assistance.

Learn more

For setup instructions, frequently asked questions and support information, visit the UWA Multi-Factor Authentication webpage.

If you require assistance setting up MFA, passkeys or managing your authentication methods, please contact the University Library.