Multi-factor Authentication (MFA) for ImmiAccount Required from 18 June 2025

From 18 June 2025, Multi-factor Authentication for ImmiAccount will become mandatory for all users. This new requirement by the Department of Home Affairs aims to strengthen user security and align with the Australian Government's cybersecurity standards. Whether you are creating a new account or logging into an existing one, you must set up MFA to continue accessing your ImmiAccount.

What Is Multi-factor Authentication (MFA)?

Multi-factor Authentication (MFA) is an additional layer of security used to verify a user’s identity. It works by requiring both your password and a second verification method, either an authentication code from an app or your email, each time you log in or update your ImmiAccount.

Who Will Be Affected?

From 18 June 2025, all users of ImmiAccount, new or existing, will need to enable MFA. You will be prompted to complete the MFA setup when you first log in after this date or when creating a new account.

How to Set Up Multi-factor Authentication for ImmiAccount

Option 1: Install an Authenticator App (for New Users)

On Mobile Devices:

• Go to the App Store (iOS) or Google Play Store (Android)

• Search and install an authenticator app (e.g. Google Authenticator or Microsoft Authenticator)

• Follow the setup instructions

On PC:

• Download KeePass or another authenticator with TOTP support

• Follow the provided installation and configuration steps

Option 2: Use an Existing Authenticator App

If you already use an authenticator app:

• Open the app and select Add Account

• Scan the QR code shown in your ImmiAccount, or manually input the shared secret key

• A 6-digit verification code will be generated on your app

Option 3: Use Email Authentication (If Necessary)

Email-based MFA is a less secure option but may be used when app-based authentication is not possible:

• Select the email authentication method

• A 6-digit code will be sent to your verified email address

• Enter the code in ImmiAccount to complete your login

Logging in with MFA After Setup

Once MFA is enabled:

• Each time you log in, a code will be sent to your authenticator app or email

• Input the code into ImmiAccount to proceed

• You will be taken to the dashboard upon successful login

Multi-factor Authentication for ImmiAccount: What You Need to Do Now

To avoid disruption, all ImmiAccount users should prepare for MFA before 18 June 2025:

• Install a trusted authenticator app on your mobile device or PC

• Ensure your ImmiAccount email is verified, especially if you haven’t logged in recently

• Familiarise yourself with how to use your chosen MFA method

Want to stay informed about the latest visa updates and application changes? Follow us for timely updates, expert tips, and clear advice on navigating Australia’s immigration system.