Multi-factor authentication (MFA) is an additional layer of security for online accounts. It protects your data by preventing unauthorised access to your University account.
From August 2022, undergraduate and postgraduate taught students must set up multi-factor authentication.
Once you have completed registration for the 2022-23 academic year, you will receive an email asking you to set up MFA.
Set up MFA on your University account.
On this page:
Multi-factor authentication (MFA) is an additional layer of security that can help prevent unauthorised access to your online accounts, for example through a cyber attack.
MFA reduces the risk of someone gaining access to your account even if they find out your username and password.
MFA is easy to use. It combines something you know (in this case your University username and password) with something you have (such as a notification from an app on your smartphone) to confirm your identity when you try to access some University services.
At the University of Bristol, we support the use of the Microsoft Authenticator app.
MFA helps protect your personal information. You probably already use it if you do online banking or shop online.
University students and staff are often targeted by cyber criminals attempting to steal:
Using MFA significantly reduces the chance that your login details become compromised and your accounts accessed by criminals in a cyber attack.
Microsoft research suggests multi-factor authentication can reduce such attacks with compromised identity by as much as 99.9%.
If you are a student, you will receive an email once you have completed the registration process when you join the University or, if you’re a returning student in 2022, at the start of the new year for your course. Please set up MFA following the instructions on this page.
If you are a member of staff or a postgraduate research student, you will be prompted to set up MFA when you try to access certain University services.
If you have difficulty setting up MFA, for example because of an accessibility issue, please contact IT Services.
For the best experience setting up MFA, we recommend you have the following available:
If you are an undergraduate student or postgraduate taught student, it is possible to set up multi-factor authentication using just a single smartphone with a wifi or data connection.
We recommend you use the Microsoft Authentication app on your smartphone to use MFA. If you do not have a smartphone, do not worry, you can still use multi-factor authentication, please refer to the guidance below.
The following instructions are specifically for the Microsoft Authenticator app.
Set up is easy and once you are logged in just requires you to follow the on-screen instructions.
On your PC / tablet, visit https://mysignins.microsoft.com/security-info
Log into your University of Bristol account and remember to put @bris.ac.uk after your username.
You will now see the 'my sign ins’ security info page.
Once signed in click on ‘add method’
4. The next screen will ask you to install the Microsoft authenticator app.
5. In the app, select ‘add an account’ and choose the option ‘work or school’.
6. In your browser, a QR code will be generated which you need to scan with your phone’s camera.
7. Confirm your sign-in on the authentication pop-up request that will appear on your phone.
8. You are now signed up to use MFA! Within 24 hours, you will start to be asked to authenticate when you sign into various University services. You should still be able to sign in during this time.
Microsoft's video will give you a good idea of what MS MFA enrolment looks like in practice: Video: Set up multi-factor authentication with a mobile device in Microsoft
If you cannot use a mobile phone to set up MFA and authenticate, you can use a USB security key (YubiKey).
If you are a student and you need a USB security key, you can collect one from the IT Services Counter in the Arts and Social Sciences Library. The counter is open from Monday to Friday, from 9 am until 11.30 am, and 2 pm until 3.30 pm. You will need to show your student ID card to collect a security key.
Staff members can request a security key by contacting IT Services.
Note: If you use a security key as your primary authentication method, we advise you to set up a secondary device in case you lose the security key. This will allow you to continue working while a new key is ordered.
We strongly recommend that you add at least one alternative authentication method and/or device.
If you require further support, please contact IT Services.
For help to set up or sign into MFA, please contact IT Services.
To avoid difficulties logging in to services if you've forgotten your device, we encourage you to set up an alternative sign-in method by following the set up guidance on this page.
