Multi-factor authentication
In order to further enhance IT security at the university, multi-factor authentication (MFA) will be introduced for logging into central IT services. This procedure offers additional protection against unauthorized access and data misuse by requiring at least one second security component in addition to the password.
What safety factors can be used?
All employees must have registered a security key by the end of January 2026.
To register the security key, you must already have set up one of the authentication methods for MFA described in more detail below (authenticator app, TOTP, or Hello for Business). If you have already installed an authentication app (e.g., Google Authenticator, etc.), you can also use this and link it to your Microsoft Uni account. This will not affect the accounts already linked in your existing authenticator app.
In addition to the security key, set up at least one authentication app on a smartphone. It is also recommended that you set up and link an authentication app on two different devices. This ensures that you will always have access to your account even if you lose one of your devices.
Next steps for employees:
(As of November 2025)
- In the coming days, you will receive your “YubiyKey” security key via internal mail.
- First, we recommend following the instructions for setting up the authenticator app (prerequisite for setting up the YubiKey).
- Then set up the YubiKey using the instructions.
- If you have any questions about logging in or changing methods later on, follow this guide.
- Setting up MFA is voluntary at first, but will be mandatory from January 2026.
- If you have any questions about losing or recovering your factors, follow this guide.
Please note:
Mandatory request form for all employees:
All employees will be provided with free physical security keys (YubiKeys) for work use in the coming weeks.
Note: USB-A security keys will be issued as standard. Employees who require a USB-C security key should submit a request form via ticket to ZIM IT Support as soon as possible.
There will be two Zoom information sessions for all University of Passau employees. Both dates can be found in Stud.IP event no. 97688.
Dates: December 2, 2025, from 10 a.m. to 11 a.m. and December 9, 2025, from 10 a.m. to 11 a.m.
The same content will be presented at both events: explanation of multi-factor authentication, time for questions.
Procedure for students
- The following authentication methods are available to students:
- Authenticator app: e.g., from any third-party provider.
- SMS TAN procedure.
- Effective immediately: Start of the activation phase: You can set up an MFA method yourself—once set up, MFA will be active from the next working day and must be used.
- From the end of January 2026: Multi-factor authentication becomes mandatory.
Share this page
