The Australian government announced that multi-factor authentication (MFA) is now live on ImmiAccount, its primary migration and visa systems.

Key Points:

  • This new requirement adds a second layer of protection beyond passwords and applies to all logins, new account creations and account changes.
  • Two authentication methods are available to users:
    • An authenticator app like Microsoft or Google Authenticator is the most secure and recommended option
    • An email token is available for users who can’t use the authenticator app
  • The sharing of ImmiAccount credentials is not allowed. Organizations can appoint Organization Account Administrators to manage staff access.

Additional Information: More information and instructions on using MFA can be found here.

This alert has been provided by the BAL Global Practice Group.

Copyright © 2025 Berry Appleman & Leiden LLP. All rights reserved. Reprinting or digital redistribution to the public is permitted only with the express written permission of Berry Appleman & Leiden LLP. For inquiries, please contact copyright@bal.com.