Australia | Cybersecurity enhancements on ImmiAccount are now live

The Australian government announced that multi-factor authentication (MFA) is now live on ImmiAccount, its primary migration and visa systems.

Key Points:

• This new requirement adds a second layer of protection beyond passwords and applies to all logins, new account creations and account changes.
• Two authentication methods are available to users:
  • An authenticator app like Microsoft or Google Authenticator is the most secure and recommended option
  • An email token is available for users who can’t use the authenticator app
• The sharing of ImmiAccount credentials is not allowed. Organizations can appoint Organization Account Administrators to manage staff access.

Additional Information: More information and instructions on using MFA can be found here.

This alert has been provided by the BAL Global Practice Group.

Copyright © 2025 Berry Appleman & Leiden LLP. All rights reserved. Reprinting or digital redistribution to the public is permitted only with the express written permission of Berry Appleman & Leiden LLP. For inquiries, please contact copyright@bal.com.