Home » Service Catalogue » Information Security » HKU 2-Factor Authentication (2FA)

HKU 2-Factor Authentication (2FA)


The 2-Factor Authentication ("2FA") is a security measure for strengthening the information security protection of the authentication process in using the central IT services. On top of HKU Portal UID/PIN, a one-time token code is required for accessing those services that require 2FA to login.

2FA is now used in accessing HKU Virtual Private Network ("HKUVPN") and some applications under HKU Portal outside campus network (for staff only).



Applicable to

Registration links

How to get the token code

Alternate email address

Staff and students

Staff (including HKU SPACE staff):

NOTE: Staff will be required to input their HKID card no./passport no. for identity verification during 2FA registration or update of 2FA registration information. 

Students/Departmental Account Holders:

The token code will be sent to the alternate email address automatically after a correct  input of HKU Portal UID/PIN and confirm to login using 2FA, if applicable.

2FA Mobile App (FortiToken)

Staff (except visiting, honorary and hourly-paid staff)

The token code can be obtained from the 2FA Mobile App (FortiToken) anytime whenever in need.

(Staff can choose to receive the token code either through alternate email address or 2FA Mobile App (FortiToken)).

Installation of 2FA Mobile App (FortiToken)

For staff members who choose to use 2FA Mobile App (FortiToken), they are requested to follow the procedure at https://www.its.hku.hk/documentation/guide/infosec/2fa/app-token to complete the one-time installation procedure. 

Reset of 2FA Mobile App (FortiToken)

For staff who chooses to use 2FA Mobile App (FortiToken) to receive the token code, in case

  • they changed to use another mobile device; or
  • their mobile device is lost; or
  • they forgot the 4-digit PIN on using the Mobile App 

Please refer to the procedures at https://www.its.hku.hk/documentation/guide/infosec/2fa/app-token#reset to arrange a reset.

Pages Related To This Service

User Guide on Remote Access via HKUVPN with 2-Factor Authentication (2FA)

Connection Procedure of HKUVPN with 2-Factor Authentication (2FA)

2FA Protection for HKU Portal

Available To

Staff and students

Service Request and Support