MFA planned for ImmiAccount security

The Department of Home Affairs will introduce compulsory multi-factor authentication (MFA) for ImmiAccount next week to enhance user security.

From 18 June 2025, new and existing users will be required to set up MFA when creating or logging in to ImmiAccount.

Once MFA is enabled, it will be required at each login or to make account changes. Users will be able to reset their own authentication method in ImmiAccount.

To prepare for MFA for ImmiAccount, practitioners can:

• install an authenticator app such as Google or Microsoft on mobile devices or personal computers;
• verify email addresses if they haven’t logged in to their ImmiAccount in the last six months.

For more information, see Multi-factor Authentication (MFA) for ImmiAccount.

From 18 June, step-by-step instructions on how to set up MFA will be in ImmiAccount.