Skip to content
Novaz AuthenticatorGET

UNSW MFA: how to use an authenticator app with your zID

By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5

On this page
  1. Turn on MFA with an authenticator app
  2. When UNSW asks for a code
  3. No backup codes
  4. If UNSW rejects your code
  5. Changing phones
  6. If you lose your authenticator
  7. Official UNSW help

Your zID is your UNSW Sydney account, used for Outlook, Moodle, SharePoint and other UNSW single sign-on apps. Multi-factor authentication (MFA) is required for everyone with a current zID. UNSW builds it around Microsoft Authenticator, with YubiKeys as the alternative (UNSW). You can't opt out, and UNSW doesn't send codes by text or email (UNSW).

Other authenticator apps still work. The student FAQ says apps such as Google Authenticator and Authy can be used, but they're "not supported by the UNSW IT Service Centre" (UNSW). The staff FAQ only says they aren't supported (UNSW). This guide uses Authenticator App - Novaz on iPhone. Any authenticator app works the same way.

How we checked this guide: the UNSW steps come from UNSW's MyIT page and its MFA guides and FAQs, linked below, which we read on October 19, 2026. Most of those PDFs date from 2022 and 2023. We haven't tested them on a UNSW account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.

Turn on MFA with an authenticator app

UNSW shows this path in its guide for students who can't get Microsoft Authenticator (UNSW). A More information required window in Moodle or another UNSW app means MFA is enforced on your zID and you need to set it up. Use a computer, as UNSW does, so the QR code isn't on your iPhone.

  1. On your computer, open a private window (Incognito or InPrivate), close any other browser windows, and go to https://aka.ms/mfasetup.
  2. Sign in as zID@ad.unsw.edu.au with your password.
  3. On More information required, click Next.
  4. The Start by getting the app screen offers Microsoft Authenticator. Click I want to use a different authenticator app.
  5. On Set up your account, click Next. A QR code appears.
  6. In Novaz, tap +, then Scan QR code, and point the camera at the screen. If the QR code is on the same iPhone, take a screenshot and use Choose a photo. See scanning a QR code on the same iPhone.
  7. If you can't scan it, click Can't scan image?. UNSW's guide doesn't show the next screen. If you get a key, tap + in Novaz, then Enter key manually, and type it as the Setup key. See What is a 2FA setup key?
  8. Click Next. On Enter code, type the 6-digit code from Novaz.
  9. On the Success! screen, click Done.

UNSW's codes are 6 digits every 30 seconds (UNSW), which matches a typed key in Novaz, but scanning is safer.

Keep UNSW in Novaz afterwards: if you delete your authenticator app, you need an IT Service Centre reset before you can set up again (UNSW), and removing UNSW from Novaz loses the key the same way.

When UNSW asks for a code

Expect a prompt at least once every 30 days on each device, and more often for the VPN. A new browser, cleared cookies, another computer such as a lectern, or a new location or Wi-Fi network also bring a prompt (UNSW).

If the sign-in page asks you to approve a request, click I can't use my Microsoft Authenticator app right now, then Use a verification code, type the Novaz code in Enter code and click Verify (UNSW). The FAQs word that option slightly differently.

No backup codes

UNSW's pages don't mention backup codes. Its suggested backup is Microsoft Authenticator on a second device, but that guide has you approve the new device from Microsoft Authenticator on your main phone (UNSW). YubiKeys are offered as an alternative to the app, not as a backup (UNSW). Unless you've backed up Novaz with iCloud backup or a backup file, its keys exist only on your iPhone, so losing it means an MFA reset.

If UNSW rejects your code

UNSW's advice is to check that your phone's date and time are correct and set automatically (UNSW). On iPhone: Settings > General > Date & Time > Set Automatically. Novaz warns you when the clock is 15 seconds or more off. If the code changes while you type, use the next one. More causes are in Authenticator code not working?

Changing phones

UNSW's transfer guide covers Microsoft Authenticator only: you sign in on the new phone and approve it on the old one (UNSW). Novaz works differently: restore your accounts on the new iPhone from iCloud backup or a backup file, and the UNSW entry keeps working. Without a Novaz backup, note that UNSW doesn't explain swapping one app for another yourself. The route it does document is an MFA reset (below), followed by the setup steps on the new iPhone. See How to transfer your authenticator app to a new iPhone.

If you lose your authenticator

Request an MFA reset from the IT Service Centre (UNSW):

  • Phone: (02) 9385 1333, weekdays 8am to 8pm and Saturday 11am to 3pm. UNSW Canberra: +61 2 5114 5678, weekdays 8am to 5pm.
  • In person: an IT walk-in service centre on campus, weekdays 8am to 6pm.

UNSW will verify your identity, but doesn't say which ID it accepts or how long a reset takes. Once you're back in, the FAQs suggest Lost device? Sign out everywhere on the My Sign-ins page to end your other sessions (UNSW). Then set up Novaz again. More in Lost the phone with your authenticator app?

Official UNSW help

More guides: Universities and education