To further enhance the security of campus accounts and better protect the personal data, academic materials and important research data, the University plans to introduce Two-Factor Authentication (2FA) across the University during the 2026-27 Fall Term.

Once 2FA is enabled, you will be required to complete an additional verification step when using your campus account to access campus email, other campus systems.

To ensure that you can successfully enable 2FA, please use the link to confirm that your personal contact information is accurate by August 16, 2026. If any information is incorrect or has changed, please update it accordingly.

At this stage, you are only required to confirm or update your personal information. You do not need to configure 2FA yet. The implementation schedule and detailed setup instructions will be provided separately.

What is Two-Factor Authentication (2FA)?

Two-Factor Authentication is an enhanced account security method. In addition to entering your username and password, you will be required to enter a verification code sent via SMS to your mobile phone or to your personal email address.

This adds an additional layer of protection to your account. Even if someone obtains your password, they will not be able to access your account without also having access to your mobile phone or personal email account.

Why Is 2FA Being Introduced?

With cyberattacks becoming increasingly frequent, passwords alone are no longer sufficient to protect user accounts. Passwords may be stolen through phishing websites, data breaches or other methods. Enabling 2FA helps to:

・ Significantly enhance account security: Reduce the risk of account compromise and unauthorized access, providing an important safeguard for your privacy and University data.

・ Protect important information: Safeguard your academic emails, research data and personal files against unauthorized access.

・ Meet security requirements: Follow local and international cybersecurity best practices and applicable regulatory requirements.

What Information Do You Need to Confirm?

Please confirm that the following personal contact information is accurate and currently accessible:

・ Personal email address: A non-University email address used for password resets, account recovery and security verification codes.

・ Mainland China mobile phone number: Used to receive verification codes via SMS.

Even if your contact information has not changed, please log in to the system and complete the confirmation by the deadline.

Please note the University will never ask you to provide your campus account password or SMS verification code by email.

Thank you for your understanding and cooperation. If you have any questions, please contact the ITDID at gzit@hkust-gz.edu.cn

Information Technology and Data Intelligence Department(ITDID)

August 6, 2026