The Department of Home Affairs is strengthening security for ImmiAccount by introducing Multi-Factor Authentication (MFA), aligning with the Australian Government’s cyber security standards.
From 18 June 2025, Multi-Factor Authentication (MFA) will be mandatory for all ImmiAccount users. This new login requirement provides stronger protection of sensitive visa and immigration data by adding an extra layer of security. Learn what steps you and your clients should take to prepare.
What’s Changing?
From 18 June 2025, all users – new and existing – must set up MFA to access or make changes to their ImmiAccount.
MFA will:
- Be required at every login.
- Be required for making any changes to account settings.
- Allow users to reset their own authentication method via ImmiAccount.
How to Prepare
To ensure a smooth transition for you and your clients:
✔ Download an authenticator app (e.g. Google Authenticator or Microsoft Authenticator) on your mobile device or computer.
✔ Log in and verify your email address, especially if you haven’t accessed ImmiAccount in the past 6 months.
Step-by-step instructions will be available in ImmiAccount starting 18 June 2025.
Why MFA?
MFA adds an essential layer of protection to your account beyond your password, helping secure sensitive visa and immigration data.
Click here: Multi-factor Authentication for ImmiAccount