New Multi-Factor Authentication Requirements for ImmiAccount

The Department of Home Affairs has announced that from 18 June 2025, Multi-Factor Authentication (MFA) will be implemented in ImmiAccount to enhance security for all users. Both new and existing users will be required to set up MFA when creating or logging into their ImmiAccount, ensuring every account remains secure and accessible only to its registered user. 

Once MFA is activated, users must authenticate at each login or whenever they make changes to their account. Users will also have the ability to reset their own authentication method directly within ImmiAccount, making account management more secure and user-friendly. 

Verification Methods 

 The Department will support two secure verification methods to accommodate different user and organisational needs: 

• Mobile authenticator app: users can choose from popular apps such as Google Authenticator, Microsoft Authenticator, LastPass, or Duo Mobile. 

• Email token: a one-time code will be sent to the registered email address. 

How to Prepare Before 18 June 2025 

 To ensure a smooth transition to MFA, users should: 

• Verify your email address: if you haven’t logged in to your ImmiAccount in the last six months, check that your email is current. 

• Review support materials: visit the Department’s website for step-by-step guides and technical resources. 

• Install an authenticator app: download and install an app from your preferred device’s app store to prepare for MFA. 

Logging in from 18 June 2025 

When logging in from 18 June, users will be prompted to enter their username and password. They will then be guided through the process to set up MFA. Help and support materials are available on the Department’s website to assist users during this transition. 

Shared Credentials and Organisation Account Administrators (OAA) 

The Department has reminded users that sharing ImmiAccount credentials is strictly prohibited under the ImmiAccount Terms and Conditions (sections 5.1 and 5.6). With MFA in place, shared credentials will no longer be functional. 

To ensure secure and appropriate staff access, organisations are encouraged to appoint one or more Organisation Account Administrators (OAAs). OAAs can allocate individual user accounts within their organisation at no extra cost, streamlining secure access for staff members. Comprehensive instructions for setting up the OAA role are available on the Department’s website. 

Support and Resources 

 To help users prepare and implement MFA, the Department has provided a range of support materials, including: 

• ImmiAccount MFA step-by-step guide 

• Quick Reference Guide 

• KeePass Password Manager User Guide 

• Organisation Account Administration (OAA) User Guide 

For further assistance, users can contact the ImmiAccount Technical Support Team or call the Global Service Centre. The Department has also advised that additional information—including answers to frequently asked questions and the webinar slide pack—will be distributed soon. 

Absolute Immigration encourages all users to review these changes and prepare now to ensure a smooth transition to MFA. For tailored advice and support, contact us at aisupport@absoluteimmigration.com.