MFA security enforcement arrangement and opt-in to passkey sign-in method for Connect Graduates users

MFA for Connet Graduate

As to improve the security standard of email service for Connect Graduate(@connect) users, please note that Microsoft Multi-Factor Authentication (MFA) will be enforced to protect all the Connect Graduate e-mail accounts. In addition, an opt-in passkey sign-in option will be made available to provide a more secure and convenient authentication experience.

This arrangement will not change any Connect Graduate(@connect) users who already enforced MFA before. For those Connect Graduate users who did not enforce MFA before can choose one of the following time schedules to enable MFA protection:

  1. Join the early enrollment to install MFA mobile app and enforce MFA earlier BEFORE the assigned schedule in (b):
  2. Register MFA and enforce MFA according to the pre-assigned schedule. Connect Graduate users can refer to the email notification received for their assigned grouping & schedules:
    Stage No.Grouping criteria (I)Grouping criteria (II)GroupSchedule

    Stage (#1)

    MFA registration

    Selected age group as of 1st July 20269th digit of the student number is 0/1A16th Sep 2026 – 29th Sept 2026
    9th digit of the student number is 2/3B30th Sep 2026 – 13th Oct 2026
    9th digit of the student number is 4/5C14th Oct 2026 – 27th Oct 2026
    9th digit of the student number is 6/7D28th Oct 2026 – 10th Nov 2026
    9th digit of the student number is 8/9E11th Nov 2026 – 24th Nov 2026
    Remaining Connect Graduate (@connect) usersF25th Nov 2026 – 8th Dec 2026

    Stage (#2)

    MFA enforcement

    Grouping criteria same as aboveA30th Sept 2026
    B14th Oct 2026
    C28th Oct 2026
    D11th Nov 2026
    E25th Nov 2026
    F9th Dec 2026
    1. During the date of stage#1, Connect Graduate users should follow this MFA registration guide: https://its.hku.hk/kb/user-guide-on-activating-multi-factor-authentication-mfa/) to register their MFA and install Microsoft Authenticator App. They should complete their MFA registration process BEFORE the last day highlighted in yellow in Stage 1.
    2. Then starting from the stage#2 enforcement date, they have to use the Microsoft Authenticator App to obtain the One-Time Passcode in order to login to their Connect Graduate accounts.
  3. If Connect Graduate users miss the above schedule and still want to re-register AFTER the assigned schedule, they can still request MFA reset (https://extranet.hku.hk/itpwdpol/servlet/graduate.optInConnectMfa) as to re-register MFA.
  4. After completing the MFA registration process, Connect Graduate users are strongly encouraged to opt in to passkey registration through the website below (https://extranet.hku.hk/itpwdpol/servlet/graduate.optInConnectPasskey). Passkeys provide a more secure sign-in method and enable a faster, more convenient authentication experience using biometric verification on your mobile device. 

If the involved Connect Graduate users encounter any technical-related issues or require assistance, please don’t hesitate to reach out to our IT Helpdesk at ithelp@hku.hk. If they have other general inquiries, please contact the DAAO (Development & Alumni Affairs Office) at alumni@hku.hk.