Using multi-factor authentication (MFA)

Whenever you log into your Monash account on a new device, or from a new country, you’ll be asked to verify your identity using your chosen MFA method.

However, if you log into a particular device regularly, you can avoid having to use MFA each time. Simply tick the Do not challenge me on this device again checkbox when you first log in. This will work for most services, but some, such as virtual private networks (VPN), will still require MFA each time you log in.

How to log in using MFA

Matching the date and time to your location

If the date and time on your phone doesn't match your location, you won’t be able to receive push notifications or use one-time codes generated by Okta Verify or Google Authenticator.

For instructions on how to set up time zones on your phone, see:

Logging in without internet access

You won’t need internet access to log in unless you choose to authenticate using push notifications on Okta Verify – both Okta Verify and Google Authenticator can generate six-digit one-time codes, which doesn’t require internet access.

Using MFA while travelling overseas

If you’re wanting to log into your Monash account while travelling:

  • you’ll need to take your MFA device with you – MFA is required whenever you log in from a new country
  • you won’t need internet access unless you want to use push notifications
  • you’ll need to make sure the date and time on your device matches your location
  • if you change your phone, you’ll need to set up MFA on the new device (but you won’t need to do anything if you’re changing your SIM card, number, or mobile provider).

When you’re in China, use Okta Verify – Google services are often blocked. You may also find that you can’t use push notifications on Android devices. For more information, see how to log in from China.

Okta Verify notifications

You’ll receive notifications whenever you use Okta Verify to log into a new device. If you receive a notification from Okta Verify (or an email saying you have logged into a new device) but you don’t recognise that activity, you should contact your local Service Desk immediately.

Understanding how location information is generated

Okta Verify notifications indicate your location. This information comes from your internet provider and is linked to where you registered the internet address you’re using. So, for example, if you’re logging in from Melbourne, the notification may indicate that you’re located in Richmond, even though you may be elsewhere in Melbourne at the time. However, if you log in from Melbourne and the notification is from a different state or country, you should contact your local Service Desk immediately.

If you’re in China, and you’re using an Android device, you may not receive notifications.

Don’t have your MFA device?

If you’ve registered for backup codes, or have another MFA device available, you can use our self-service MFA reset tool to get back into your account.

Replacing your YubiKey

If you’ve lost your YubiKey or it’s been stolen, you’ll need to order a replacement at your own cost. If you need access right away, you should contact your local Service Desk to discuss your options, otherwise, you can simply order a replacement online.

Privacy information

Okta Verify doesn’t access any data stored on your phone – location information is provided by your internet provider.

Need help?

Contact the Service Desk.

No luck? Get in touch and we'll help you out.

Raise a service request