Using Multi-Factor Authentication (MFA) for UTokyo Accounts

Introduction

The University of Tokyo has introduced multi-factor authentication to UTokyo Account to improve information system security.

Multi-factor authentication (MFA) is a security process in which users prove their identity using at least two pieces of evidence. In addition to passwords, users are asked to verify their identity via SMS, authentication applications, or other methods when signing into their accounts. MFA improves security by reducing the possibility of someone being able to sign in to your account even if your password is known to someone else for some reason.

On the UTokyo Account, MFA is enabled by users setting up their own initial setup, and we are asking all users with a UTokyo Account to enable it. Therefore, some information systems are disabled until you have enabled MFA. It is crucial to ensure the security of your UTokyo Account, not only to protect your personal information but also to protect the information assets held by the university, so we ask you to use multi-factor authentication.

MFA Initial Setup Procedure

Please refer to the following page for the initial setup procedure (things to do when you get started).

Initial Setup Procedures for Multi-Factor Authentication for UTokyo Accounts

If You Cannot Verify Your Identity and Failed to Sign In Due to Phone Malfunction or Model Change

Please refer to the following page if you lose access to every verification method (due to malfunctions, model changes, etc.) and are unable to sign in to your UTokyo Account.

Reregistering Verification Method and Terminating the Use of Multi-Factor Authentication for UTokyo Accounts

When you change your phone model, please note that you can avoid being locked out from your UTokyo Account by registering your new phone for MFA (see “Changing the Verification Method of Multi-Factor Authentication for UTokyo Accounts” for details) while your old phone is still available. Please make sure to complete this procedure in advance.

Others

Other descriptions of MFA are separated into the following topics. Please visit the page of your interest

• Changing MFA Settings: How to change your verification method (e.g., authentication apps, phone number)
  • Adding Verification Methods
  • Changing the Default Sign-in Method: How to change the default sign-in method, i.e., the primary verification method when you sign in.
  • Editing Verification Methods
  • Deleting Verification Methods
• Terminate MFA Use: How to disable MFA and reverse your UTokyo Account settings to allow signing in with only a password. We strongly recommend that you continue to use MFA for security reasons, but if you need to terminate MFA use for unavoidable circumstances, you can apply for termination here.
• Others
  • Hardware Tokens: For faculty members who are unable to register any verification methods, such as those who do not have smartphones, we offer devices called “hardware tokens” as an alternative.
  • Use the 6-digit Code in Microsoft Authenticator to Sign In: If you registered “Microsoft Authenticator” app as the verification method, typically you will receive a notification for verification from the app when you sign in. However, the app offers another method for verification.
  • Irregular Behaviors During Verification
  • About “we require additional information to verify your account” Error: Please follow the instructions in this page if you see the “we require additional information to verify your account” error in the sign-in page.