ImmiAccount MFA: Authenticator App Setup, QR Code & Recovery (No SMS)

ImmiAccount has required multi-factor authentication on every login since 18 June 2025 — an authenticator app or an email token, never SMS. This video covers setup, the QR code, changing methods, and what to do if you lose your device. Figures as at September 2026.

Read the full guide, with official sources →

Watch

Chapters

  1. 0:00 ImmiAccount login now needs
  2. 0:12 Two options only:
  3. 0:25 Connecting an app:
  4. 0:35 Can't scan the QR code?
  5. 0:48 Email codes expire
  6. 1:07 Still locked out?
  7. 1:21 Code rejected?
  8. 1:31 Changing method?
  9. 1:43 Never share your code.
  10. 1:54 Where to read more

Transcript

Since 18 June 2025, ImmiAccount will not let you log in without a second step — every single time.

There are exactly two ways to complete it: an authenticator app generating a fresh code every 30 seconds, or an email token valid for 15 minutes. There's no SMS option, whatever older guides say.

To connect an app: open it, tap plus or Add account, scan the QR code ImmiAccount shows you, then type the 6 digit code the app generates back in.

Can't scan it? A shared secret code sits right underneath the QR code — type that into your authenticator app instead. It's a normal, supported option, not a workaround.

Prefer email? Home Affairs sends a 6 digit code to your verified email address, valid for just 15 minutes.

This is the scenario most people searching this up are dealing with: lost the phone with your authenticator app on it. There are two self-service links before you need to call anyone.

If you've also lost access to your verified email, call the Global Service Centre — 131 881 within Australia, or plus 61 2 6196 0196 from outside.

The most common "invalid code" error isn't a wrong code at all — it's your phone's clock. Turn on automatic date and time and try again.

To switch methods later: log in, go to Manage my ImmiAccount, open the Multi-factor authentication tab, and select Change authentication method. You'll verify with your current method first.

Never share your 6 digit code with anyone — Home Affairs will never ask for it. And your migration agent should never need your ImmiAccount login at all.

The full guide, with the official sources, is on migratio.com.au. The link is in the description.

Short versions

Talk it through with a registered agent

Every agent on Migratio is on the official OMARA register. Compare agents and their consultation fees.

Related Migratio resources