2-Factor Authentication (2FA)

The 2-Factor Authentication (“2FA”) is a security measure for strengthening the protection of the authentication process in using the central IT services.  At present, 2FA is required when using HKU Virtual Private Network (“HKUVPN”) and some HKU Portal applications outside campus network (applicable to staff only). 



1st factor



2nd factor

One-time token code

When can I get the one-time token code?

Using alternate email address: The one-time token code will be automatically sent to the registered alternate email address when users are prompted to enter the code during the login process.

Using 2FA Mobile App (FortiToken): Users can get the code from the FortiToken app anytime during the login process.



(except visiting staff, hourly-paid staff, honorary appointees and HKU SPACE staff)

Option(s) to receive the token code

Visiting staff
Hourly-paid staff
Honorary appointees
Departmental account holders

Option(s) to receive the token code

Note: Staff will be required to provide their HKID card no./passport no. for identity verification in 2FA registration or update of 2FA registration information. 

2FA Mobile App (FortiToken)



Reset is needed when

  • Mobile device for receiving the token is changed or lost
  • the 4-digit PIN of the 2FA Mobile App is forgotten


Once you delete the 2FA registration, you will not be able to use

  • HKUVPN (HKU Virtual Private Network)
  • Some HKU Portal applications if access is made outside campus network (applicable to staff only) 

HKU Portal Applications Protected by 2FA for Access Outside Campus Network

2FA is required if the following HKU Portal applications are accessed outside campus network:

  • Manager Self Service
  • Student Information System
  • FCSC (Financial Clearance and Staff Commitment)
  • PGS (Postgraduate Scholarship)
  • Recruiting
  • Workforce Administration
  • Benefits
  • Global Payroll & Absence Mgmt
  • Enterprise Learning
  • Set Up HRMS
  • Worklist
  • EP – Tree Manager
  • EP – Reporting Tools
  • HCMS – Tree Manager
  • HCMS – Reporting Tools
  • HCMS – PeopleTools
  • Personal & Family Data Form (個人及家庭狀況表格)
  • Personnel File
  • Pay Slip
  • Employer’s Remuneration Return
  • Reset 2FA App
Show All Collapse


Multi-Factor Authentication

February 2024
February 2024

Mandatory for all staff accounts

May 2024
May 2024

Mandatory for all student accounts