How to create an ImmiAccount from scratch

ImmiAccount is not myGov

myGov is an Australian Government authentication gateway that links to services such as Medicare, the Australian Taxation Office, and Centrelink. ImmiAccount is a completely separate platform operated by the Department of Home Affairs at online.immi.gov.au. The two systems do not share login credentials, user databases, or any form of account linking. If you already have a myGov account, that does not give you an ImmiAccount, and vice versa. You must register for ImmiAccount separately through the Department's own portal.

What you need before you start

Before beginning registration, gather the following details:

- A personal email address — this will be your primary login identifier and where the Department sends notifications. Shared or group email addresses are prohibited under the ImmiAccount Terms and Conditions (sections 5.1 and 5.6). Each person must use their own unique email address.
- Your full legal name — as it appears on your passport or travel document.
- Date of birth.
- Passport or identity document number — for the country of passport field.
- Phone number — a mobile number is strongly recommended, as it is used for multi-factor authentication.
- A security question and answer — chosen during registration for account recovery purposes.

If you are registering on behalf of an organisation (such as a migration agency or sponsoring employer), you will also need the organisation's details, including ABN or ACN where applicable.

Step-by-step account creation

1. Go to online.immi.gov.au.
2. Select Create ImmiAccount.
3. Choose the account type: Individual or Organisation (see the section below for differences).
4. Enter your personal details — full name, date of birth, and passport information.
5. Provide your email address. This becomes your username.
6. Create a password that meets the Department's complexity requirements (typically a mix of uppercase, lowercase, numbers, and special characters).
7. Set up multi-factor authentication (MFA) — this step is now mandatory and cannot be skipped.
8. Choose and answer your security question.
9. Review your details and submit the registration.
10. Check your email for a confirmation link or verification code to activate the account.

Once registration is complete, you can log in and begin applications, link existing applications using a TRN, or manage correspondence.

Multi-factor authentication is mandatory

Since 18 June 2025, multi-factor authentication has been required for all new ImmiAccount registrations. This was later extended to EOI/SkillSelect logins in July 2025. MFA adds a second verification step — typically a code sent to your mobile phone or generated by an authenticator app — on top of your password. You cannot opt out of MFA. If you lose access to your MFA device, you will need to contact the Department's technical helpdesk to regain access to your account.

Keep your registered phone number current. If you change your mobile number, update it in ImmiAccount before you lose access to the old number. Otherwise, you may be locked out when the system sends an MFA code to a number you can no longer receive messages on.

Shared email accounts are prohibited

The ImmiAccount Terms and Conditions are explicit on this point. Sections 5.1 and 5.6 prohibit the use of shared or group email addresses. Every ImmiAccount must be tied to an individual person's email address (for individual accounts) or a specific authorised user (for organisation accounts). Using a shared inbox — such as info@company.com or a family email — can create problems with correspondence delivery, MFA verification, and account recovery. It may also breach the Terms and Conditions, which could have consequences for your applications.

Individual vs organisation accounts

ImmiAccount offers two account types:

- Individual accounts are for people applying for their own visa, nominating a family member, or acting as a sponsor for a partner visa. Most personal visa applicants use individual accounts.
- Organisation accounts are for migration agents, employers sponsoring workers, education providers, and other entities that manage multiple applications. Organisation accounts allow multiple users within the same entity, each with their own login credentials.

If you are a sponsor for a partner visa, you need your own separate individual ImmiAccount — you cannot share the applicant's account. You will use the applicant's Transaction Reference Number (TRN) to link to their application from your own account. This is covered in more detail in the ImmiAccount Australia guide.

Browser requirements and technical setup

ImmiAccount is a web-based portal and does not have a dedicated mobile app. The Department recommends using a current version of a mainstream browser:

- Google Chrome (recommended)
- Mozilla Firefox
- Microsoft Edge
- Safari

Older browsers or outdated versions may cause display issues, failed uploads, or session timeouts. JavaScript must be enabled, and pop-up blockers should be configured to allow pop-ups from online.immi.gov.au, as some system messages and payment windows open in new tabs. If you use a corporate network, check that your firewall or proxy does not block access to the ImmiAccount domain.

What happens after registration

Once your account is active, you can start a new application, link an existing application using a TRN, or respond to correspondence from the Department. If you have been locked out after failed login attempts, the lockout period is 4 hours — you cannot reset it earlier by contacting the helpdesk. For a full walkthrough of what you can do once logged in, refer to the ImmiAccount Australia guide.

Can I use my myGov login for ImmiAccount?

No. ImmiAccount and myGov are completely separate systems with no shared authentication. You must register for ImmiAccount separately at online.immi.gov.au.

What happens if I use a shared email address for my ImmiAccount?

Shared email addresses are prohibited under sections 5.1 and 5.6 of the ImmiAccount Terms and Conditions. Using one may cause issues with MFA verification, correspondence delivery, and could put your applications at risk.

Do I need to set up multi-factor authentication?

Yes. Since 18 June 2025, MFA is mandatory for all ImmiAccount registrations. You cannot skip or disable it.

I forgot my password — how do I reset it?

Use the "Forgot your password?" link on the ImmiAccount login page. A reset link will be sent to your registered email address. You will still need to complete MFA verification after resetting your password.

How long does the account lockout last?

If you enter incorrect login details too many times, your account is locked for 4 hours. There is no way to shorten this period.

Can my migration agent create an ImmiAccount on my behalf?

A migration agent typically uses their own organisation ImmiAccount to lodge applications on behalf of clients. You may still need your own individual ImmiAccount for certain actions, such as checking correspondence or verifying visa status.