Two-factor authentication at UDE

More security for your UDE account through 2FA

Essential information for students

With your University ID, you can access central services related to your studies, such as your exam-related data, learning materials and personal information. Access to such information must be well protected.

A password alone is no longer sufficient for that. Passwords may be stolen, guessed or phished through fake webpages. Two factor authentication (2FA) provides additional protection for your account: in addition to your password, you confirm your login by entering a time-based one-time code from an authenticator app. This way, a stolen password will not be enough to access your account.

Starting on 23 November 2026, two-factor authentication will gradually become mandatory for central applications used at UDE. The following timeline is envisaged:

  • HISinOne campus portal (from 23 November 2026)
  • Moodle (by the end of 2026)
  • myUDE app (early 2027)

Further applications and services will follow. We will inform you of any new implementation dates in good time. We recommend that you set up two-factor authentication now to make sure you are ready for all further steps as they occur.

From 28 November 2026, it will only be possible to set up 2FA from University premises or using video identity verification. There is a limited number of slots for the video identity verification process and we cannot guarantee that appointments will be available at short notice.

Ideally, set up 2FA via the selfcare portal now. 

You can find installation guides (in German) on the ZIM website: 2FA - Zwei Faktor Authentisierung

What is 2FA?

When logging in, your identity is verified using authentication criteria. There are three types of criteria:

  • knowledge: something only you know, e.g. a password
  • possession: something you possess, e.g. a smartphone with an authenticator app
  • biometrics: a physical property, e.g. a fingerprint

Multi-factor authentication (MFA) is the umbrella term for any login that requires at least two different types of criteria. Two-factor authentication (2FA) is the most widely used form.

At UDE, the password for your University ID (knowledge) is combined with a time-based one-time code from an authenticator app (possession). The app runs on your smartphone, for example, and generates a new six-digit code every 30 seconds directly on your phone and without requiring access to the Internet. The underlying process is known as TOTP (time-based one-time password). 

Without 2FA:
University ID -> password -> access

With 2FA (TOTP):
University ID -> password -> time-based one-time code -> access

Even if an attacker knows your password, they cannot log in without a one-time code.

Other procedures

Besides time-based one-time codes, some online services also offer other procedures. The type of login a service uses depends on the level of protection required and the technology involved.

  • Passkeys: A cryptographic key is stored on your device. You authorise its use through the same mechanism used to unlock your screen, so usually a PIN, a fingerprint or face recognition. Passkey login is used in place of entering a user name and password. (This is envisaged for UDE.)
  • Security token: This is a small device that connects to your computer or smartphone via USB or NFC. Your login is confirmed by tapping a touch pad on the security token. (Once passkeys have been introduced at UDE, you can save them on your security token.)
  • Authenticator app with push notifications: You confirm your login directly in the app instead of entering a code. (This is not available at UDE.)

Passkeys and security tokens are bound to the original webpage as each stored key uniquely belongs to one page. Therefore, they do not work on fake webpages and provide extra protection from phishing.

Further information

If you read texts in German, you may have noticed that they sometimes use ‘Authentisierung’ and at other times ‘Authentifizierung’. These two words describe the same process from different perspectives: Authentisierung means that you prove your identity, e.g. with a password or one-time code. Authentifizierung signifies that the service verifies the information provided and gives you access if it is correct. English uses ‘authentication’ for both and the important takeaway for you is that, in all cases, you are using a secure login process.