Whenever you log into your Monash account on a new device, or from a new country, you’ll be asked to verify your identity using your chosen MFA method.
However, if you log into a particular device regularly, you can avoid having to use MFA each time. Simply tick the Do not challenge me on this device again checkbox when you first log in. This will work for most services, but some, such as virtual private networks (VPN), will still require MFA each time you log in.
How to log in using MFA
Follow these instructions on how to log in using the push function in the Okta Verify app.
- When prompted by the login screen, enter your Monash email address and password and click Sign In.
- From your web browser, click Send Push to send a notification to the Okta Verify app on your smartphone.
- Switch to the Okta Verify app on your smartphone and press Yes, It's Me.
TIP: On your computer or the device you regularly use, tick Do not challenge me on this device again. When using that same device and web browser, you'll no longer have to complete an MFA challenge.
You can use the Okta Verify app to log in using a six-digit code, which acts as a one-time pin. This is useful when you can’t receive push notifications or don’t have internet or data coverage.
- When prompted with the login screen, enter your Monash email address and password and click Sign In.
- In your web browser, click Enter code.
- Open the Okta Verify app on your smartphone and note the six-digit code (which is regenerated every 30 seconds).
- In your web browser, type in the six-digit code, then click Verify.
TIP: On your computer or the device you regularly use, tick Do not challenge me on this device again. When using that same device and web browser, you'll no longer have to complete an MFA challenge.
The Google Authenticator app requires you to log in using a six-digit code, which acts as a one-time pin.
- When prompted with the login screen, enter your Monash email address and password, click Sign In.
- Open the Google Authenticator app on your smartphone and note the six-digit code (which is regenerated every 30 seconds).
- In your web browser, type in the code as shown in Google Authenticator on your smartphone, then click Verify.
TIP: On your computer or the device you regularly use, tick Do not challenge me on this device again. When using that same device and web browser, you'll no longer have to complete an MFA challenge.
Follow these instructions on how to log in using your YubiKey.
- When prompted by the login screen, enter your Monash email address and password, then click Sign In.
- When you see the following screen, insert your YubiKey and press and hold the gold disc on the YubiKey device.
TIP: On your computer or the device you regularly use, tick Do not challenge me on this device again. When using that same device and web browser, you'll no longer have to complete an MFA challenge.
Follow these instructions on how to log in using your U2F device.
- When prompted by the login screen, enter your Monash email address and password, then click Sign In.
- When you see the following screen, insert your U2F Security Key. Once inserted, tap the gold disc on your device.
TIP: On your computer or the device you regularly use, tick Do not challenge me on this device again. When using that same device and web browser, you'll no longer have to complete an MFA challenge.
Matching the date and time to your location
If the date and time on your phone doesn't match your location, you won’t be able to receive push notifications or use one-time codes generated by Okta Verify or Google Authenticator.
For instructions on how to set up time zones on your phone, see:
Logging in without internet access
You won’t need internet access to log in unless you choose to authenticate using push notifications on Okta Verify – both Okta Verify and Google Authenticator can generate six-digit one-time codes, which doesn’t require internet access.
Using MFA while travelling overseas
If you’re wanting to log into your Monash account while travelling:
- you’ll need to take your MFA device with you – MFA is required whenever you log in from a new country
- you won’t need internet access unless you want to use push notifications
- you’ll need to make sure the date and time on your device matches your location
- if you change your phone, you’ll need to set up MFA on the new device (but you won’t need to do anything if you’re changing your SIM card, number, or mobile provider).
When you’re in China, use Okta Verify – Google services are often blocked. You may also find that you can’t use push notifications on Android devices. For more information, see how to log in from China.
Okta Verify notifications
You’ll receive notifications whenever you use Okta Verify to log into a new device. If you receive a notification from Okta Verify (or an email saying you have logged into a new device) but you don’t recognise that activity, you should contact your local Service Desk immediately.
Understanding how location information is generated
Okta Verify notifications indicate your location. This information comes from your internet provider and is linked to where you registered the internet address you’re using. So, for example, if you’re logging in from Melbourne, the notification may indicate that you’re located in Richmond, even though you may be elsewhere in Melbourne at the time. However, if you log in from Melbourne and the notification is from a different state or country, you should contact your local Service Desk immediately.
If you’re in China, and you’re using an Android device, you may not receive notifications.
Don’t have your MFA device?
If you’ve registered for backup codes, or have another MFA device available, you can use our self-service MFA reset tool to get back into your account.
Replacing your YubiKey
If you’ve lost your YubiKey or it’s been stolen, you’ll need to order a replacement at your own cost. If you need access right away, you should contact your local Service Desk to discuss your options, otherwise, you can simply order a replacement online.
Privacy information
Okta Verify doesn’t access any data stored on your phone – location information is provided by your internet provider.
Need help?
Contact the Service Desk.