Two-step verification required more often after 28 November 2024 

After 28 November 2024, you will only be able to access the systems and apps that you log into via SURFconext, e.g. Canvas, by completing two login steps (two-step verification). For this, you need the Microsoft Authenticator app.

Installing the Microsoft Authenticator app

Have you installed the Microsoft Authenticator app before? Then test if the app still works by opening your UvA email. Is it not working or have you not installed it before? Then follow the steps below to install the Microsoft Authenticator app on your mobile phone.

Take the following steps to set up two-step verification on your mobile device:

1. Log in to a laptop or tablet and open an incognito browser, or make sure you clear the entire browser history; go to https://aka.ms/mfasetupExternal link.
2. Now use your new UvA mail address and the password you created earlier when creating your UvAnetID.
3. Click 'Next' (or ‘Volgende’) until a QR code appears.
4. Download the Microsoft Authenticator app on your mobile phone from the App Store or Google Play Store.
5. Open the Microsoft Authenticator app and select ‘Add Account’ (or ‘Account Toevoegen’), then ‘Work or School Account’ (or ‘Werk- of School-account) and finally ‘Scan QR code’.
6. Scan the QR code displayed on your laptop or tablet and click 'Next'.
7. You will receive a sign-in request on your mobile phone. Approve it.
8. Click 'Next' and then 'Done' on your laptop or tablet. 
9. Your two-step verification has now been successfully set up.

Two-step verification is vital 

The number of threats in the world today is increasing rapidly and password leaks are a daily occurrence. Leaked passwords are being traded and misused, with serious consequences for UvA. For example, the hack at Maastricht University and the incident at UvA back in 2021, where the lack of two-step verification enabled the initial attack. Two-step verification is essentially an extra lock on the door: the new login process will involve entering a password and then completing a second step. The systems and apps that are essential for education and research or contain sensitive data will then all be protected better. 

Log in with Single Sign-On (SSO) 

Single Sign-On (SSO) makes it possible to log in just once via Microsoft Authenticator to access multiple systems or apps. However, you will need to keep using the same browser. You will be asked to log in again via SSO after eight hours.  

Do you have any questions or need help? 

On student.uva.nl you can read more about two-step verification. Here, for example, you will find instructions on what to do if you have problems logging in via the Microsoft Authenticator app. Unable to solve the problem? Then contact the Service Desk ICT Services on +31 (0)20 525 1402.