Multi-factor authentication

Set up and use multi-factor authentication (MFA) to keep your student account secure.

From 23 February

Multi-factor authentication (MFA) will be applied for all new student accounts once the student is enrolled.

What is MFA and why do I need it?

MFA is used to add more security to your university account. This means an extra verification step to make sure you are who you say you are when accessing your university accounts.

Your university accounts hold lots of private information like your course materials and assignments, grades and academic records, your student emails, and other personal information. Think of MFA as a digital security guard that keeps your this all safe—even if someone gets into your account.

Where to start - how to register and set up MFA

When you sign in for the first time, you may be asked to set up multi-factor authentication (MFA) using an authentication app. If so, please follow the prompts on screen.

You’ll be asked to:

  1. Download the Microsoft Authenticator app and allow notifications.
  2. Scan a QR code on your screen
  3. Approve a test notification

For step-by-step instructions, refer to the student MFA guide.

Otherwise, MFA will be automatically applied using SMS, and you’ll periodically receive verification codes to your phone when signing in from off-campus.

If you don’t have a New Zealand mobile number listed in Pūaha, you’ll need to add one. If you're not prompted to do this, please contact the Digital Solutions team.

All done!

If you need any help at all you can contact our friendly Digital Solutions team - text 8676 or call 04 463 5050.

Using MFA and what to expect

Once MFA is set up, you’ll only need to verify occasionally - when logging in from a new device, every 30 days, and if we notice suspicious activity from your account.

Verifying is easy - when logging into your Pūaha account, you’ll be prompted to verify your identity using the method you set up, like a notification to the Authenticator app, or a code texted to your phone.

This simple step helps protect keep your account safe and secure, even if someone else gets your password.

What to do if you lose access to your MFA

If you lose access to MFA methods, contact our Digital Solutions Service Desk using the details below and ask for an MFA reset. After the reset, at your next login, you will be asked to set up MFA again.

Digital Solutions Team - text 8676 or call 04 463 5050 or email us at servicedesk@vuw.ac.nz

Old smartphone or no smartphone?

If you have an older smartphone that doesn't support the Microsoft Authenticator App you can still use the text or phone call method.

If you don’t have a smartphone—please call the Digital Solutions Team - text 8676 or call 04 463 5050 or email us at servicedesk@vuw.ac.nz

What to do if you require accessibility options

Please contact the Disability Services team: disability@vuw.ac.nz or 04 463 6070.

They will be able to discuss your needs and provide you with the best options.

What to do if you have no internet

The Microsoft Authenticator App requires internet access to receive and approve notifications. Text or phone call will continue to work as long as you have cell coverage.

What to do if you need urgent MFA technical support after hours

Please call the service desk on 04 463 5050 and speak to our after hours support.

Does the Microsoft Authenticator App have access to private data on my phone?

The Microsoft Authenticator app will want the following access and permissions on your phone:

  • Information about what kind of device you have.
  • Your location for verification purposes.
  • Access to the camera used for scanning QR codes.
  • Access to use fingerprint, or Face ID to keep the app secure.

You can find more information about this here: Microsoft Authenticator FAQs—Microsoft Support.