my.UQ

Okta multi-factor authentication (MFA) rollout

  1. Home
  2. Information and services
  3. Information technology
  4. UQ accounts and passwords
  5. Multi-factor authentication (MFA)

We're updating our sign-on experience by moving from Duo to the Okta multi-factor authentication (MFA) app – Okta Verify.

This is the first step in a broader program to bring UQ’s sign-on and identity services onto a single, unified Okta platform, replacing a mix of existing tools over 2026–27.

Key benefits include:

  • easier sign-on
  • strong account protection
  • improved access management.

The rollout of Okta Verify for MFA will occur progressively across the UQ community.

Rollout timelines

Your timeline for moving to Okta depends on what type of account you have.

If you have multiple accounts (like a student account and a staff account), these will be transitioned over different timelines. You'll continue to use Duo for these accounts until you receive a ‘Welcome to Okta – activate your account’ email specific to the account.

Students

Once you have received your Okta activation email ‘Welcome to Okta – activate your account’, click on the unique link and follow the prompts. The change to using Okta Verify for MFA is simple and takes only a few minutes to set up.

You can't use Okta until you receive your personalised activation email.

Activation emails will be rolled out in groups alphabetically by ‘first name’ (preferred name) from late-February through May 2026.

  • Students commencing with UQ in Semester 1, 2026 will be transitioned once returning students have been onboarded. 
  • Medical School students will receive their activation email on 23 February 2026 to fit with program requirements.

Activate Okta as soon as you receive your activation email to avoid any inconvenience during exam activity.

Higher Degree by Research (HDR) students

HDR students with staff logins will receive 2 account activation emails in April: one for your staff account and one for your student account, as both are moved from Duo to Okta.

Staff

Staff will receive activation emails in groups:

  • General staff – early March 2026
  • EAIT staff – mid-March 2026
  • Higher Degree by Research students – April 2026
  • UQ’s senior executive team and executive assistants – May 2026 (with tailored communications)

You can’t use Okta until you receive your personalised activation email.

Setup is very simple and should only take a few minutes. You can:

We recommend installing Okta Verify directly on your UQ-managed laptop or desktop and enabling the FastPass feature. It allows you to sign on using your computer's built-in security (Windows Hello or Apple Touch ID), reducing MFA prompts.

Alumni and past students

Alumni and past students will commence using Okta to access UQ systems from April 2026.

You will receive a ‘Welcome to Okta’ email at your nominated email address when it’s time to activate your account. The change to using Okta Verify for MFA is simple and takes only a few minutes to set up.

You can't use Okta until you receive your personalised activation email.

If you’re thinking about returning to UQ in 2026, you’ll continue using Okta when you re-enrol – no need to set anything up twice.

If you only use Duo to access UQ systems, you can remove the Duo app from your mobile once you have activated your Okta account.

Top of page

Activation window

From the date you receive your Okta activation email, you will have 4 weeks to activate your Okta account.

This is your ‘Okta enforcement’ date, which means you will no longer be able to use Duo as your default MFA app.

You will receive a reminder email prior to this date if you have not activated your Okta account. Once the ‘Okta enforcement’ date is reached for your account, when you next log in you will be prompted to activate Okta.

If you haven’t logged in during this time, the activation link in your email is still valid for 90 days. If you don’t activate your account using this link within the 90-day window, you’ll need to contact us for assistance. We will send you a new activation link.

Follow the instructions for how to complete initial MFA setup.

For a quick overview of what's changing, download this snapshot highlighting the user experience differences between Duo and Okta Verify (PDF, 139.8 KB).

Top of page

After set-up

Do not delete Duo from your device until you are advised that it is no longer required.

During the transition, you may see both Okta and Duo MFA prompts depending on the system you are accessing – this is expected. If you're prompted by Duo during the transition, continue using Duo as usual.

Duo will continue to provide effective security during the transition period.

Top of page

Help and guides

Learn more about:

If you need support:

Top of page