Multi-Factor Authentication

To better protect your information and the university's digital environment, the University of Alberta is expanding the use of multi-factor authentication (MFA) to include U of A students.

Voluntary enrolment in MFA for undergraduate and graduate students starts May 19, 2026. As of September 18, 2026, MFA will be required to access university applications and services.

What is multi-factor authentication?

At the U of A, we use Duo Mobile MFA to add an extra layer of protection.

Multi-factor authentication (MFA) is the process of confirming a person’s identity using multiple verification factors when accessing systems. Typical factors for MFA include: 

  • something you know (like a username and password),
  • something you have (like a passcode or a notification sent to your smartphone) and
  • something you are (like a fingerprint scan).

MFA requires at least two of the three factors. In the university’s deployment, after entering the CCID username and password, MFA serves as a second layer of security (or second factor) for logging into a service. This ensures that even if your password is compromised, a bad actor can’t access your account without a second factor. That second factor, your trusted device, makes a critical difference in protecting you and our community. 

Information for students

Starting this fall, you will need to set up MFA to access essential services like Bear Tracks, your U of A email and Google applications.

Why do I need it?

MFA protects your:

  • Personal information: Keep your grades, financial details and personal data safe.
  • Academic work: Secure your access to course materials and submissions.
  • University account: Prevent unauthorized access and protect your digital identity. 

How to enrol

You will need your CCID and password and a smartphone. The process takes about 5 minutes.

Important: You will receive various MFA emails automatically generated by IST. Emails will be sent from the email address “idadmin@ualberta.ca.” If you’re unsure if an email is safe, follow these tips to spot phishing emails.

Step 1: Get the Duo Mobile app 

  • Download the Duo Mobile app on your smartphone from the Apple App Store or Google Play Store. This is the fastest and easiest way to use MFA.

Step 2: Follow the on-screen instructions

  • You will be guided through the process of linking your account to the Duo Mobile app. You'll use your phone's camera to scan a QR code on the computer screen.
  • For more information on how to enrol with Duo, review this support article.
  • Once you scan the code, your account is linked, and you're all set!

After you enrol your device, your account will be protected with MFA. Make logging in more convenient and have Duo “remember you” for 14 days on a trusted device, like your personal computer or smartphone. Learn more about this in the Duo Frequently Asked Questions support article.

If you don't have a compatible smartphone or have other limitations preventing you from downloading Duo, contact the IT Service Desk for support.

Information for Faculty & Staff

MFA is mandatory for all faculty and staff to access core university applications.

Manage your MFA devices

Need to add a new phone, switch devices, or manage your settings? You can do so at any time.

Fewer prompts on trusted devices

To make logging in more convenient, you can choose to have Duo "remember you" for 14 days on a trusted device (like your personal computer). You will see this option when you authenticate. Do not use this feature on public or shared computers.