From 4th August, multi-factor authentication (MFA) will be enforced on Canvas for users with non-Oxford email addresses. Users will need to use an authenticator app on a mobile or desktop device to complete login to Canvas after entering their username and password. This is being done to protect all users’ personal information and to ensure confidentiality of programme content.

We recommend that users enable MFA ahead of this date, at a time that is convenient for you, to minimise disruption later. To do this, please go to: Account → Settings → Set Up Multi-Factor Authentication.

The following steps describe how to do this in more detail.

These instructions are only for users who log in to Canvas with a non-Oxford email address. If you have an @ox.ac.uk email address, do not follow these steps.

1. Installing an Authenticator App

To complete your account setup in Canvas, you will need to set up MFA verification using your mobile device and an authenticator app. We advise you to use either Google Authenticator or Microsoft Authenticator, both of which can be found on the Apple Store or Google Play.

If you do not have access to a mobile device, Zoho OneAuth offers a native desktop app for most operating systems, with a list of other alternatives available on our IT Services website.

Example of Microsoft authenticator app screen and code.

Microsoft authenticator image

2. Setting up multi-factor authentication

In global navigation, click the Account link, then click the Settings link.

Account Settings image with red box highlighted

The contextual menu on the right will show a selection of items. Click the Set up multi-factor authentication button in the right-hand navigation area. You will then see the Canvas multi-factor authentication screen, which you will need to use to verify your device.

Multi-factor authentication with red box highlighted

3. Verifying your device

To configure multi-factor authentication, Canvas uses a time-based one-time password (TOTP) generated by your authenticator app on your mobile device.

Use your verification app to scan the QR code and then enter the 6-digit code provided in the Verification Code field. You may alternatively use the secret key with your desktop verification app if you are unable to scan the QR code.

If you would like multi-factor authentication to remember the computer you are using to log in to Canvas, click the Remember this computer checkbox.

Finally, click the Verify button.

Verify via code from your authenticator app image

4. Backup codes

We highly recommend you print a set of Backup Codes and keep them in a safe place for future use, if required. If you do not have access to your phone or your chosen method is not working, you can use one of your backup codes to authenticate your account when logging in to Canvas.

On the global navigation menu, click on your Account, then click the Settings link.

Account profile settings selection box image

You will then see the grey contextual menu on the right. Select Multi-Factor Authentication Backup Codes.

Multi-Factor authentication Backup Code selection image

A selection of Backup Codes will then be shown, which you can keep for access if needed.

Multi-factor authentication backup codes image

5. After setup

After you have successfully set up MFA, you may be asked to verify your account from time to time using the method you have selected (Google or Microsoft Authenticator or other desktop app). When this happens, you will see a prompt like the following.

Re-enter verification code image

Enter the code displayed on your authenticator app and click Verify.

Again, if you would like multi-factor authentication to remember the computer you are using to log in to Canvas, click the Remember this computer checkbox.

6. Other devices

The following authenticators are compatible with Chromebook:

Microsoft Authenticator on Chromebook
Microsoft Authenticator can be used on a Chromebook, but setup may require additional steps if your device is managed by a school or organisation. You may need to whitelist the app and follow a process that includes copying numeric codes from the Microsoft setup page into the app, approving MFA prompts, and verifying via text messages.
Authenticator Extension for Chrome
The Authenticator extension allows you to generate two-factor authentication (2FA) codes directly in your Chrome browser. Key features include adding accounts via QR codes, encrypting secrets with a password, backing up to Google Drive, OneDrive, or Dropbox, and syncing with your Google account. It supports TOTP, HOTP, Steam Guard, and Blizzard Authenticator codes.
Google Authenticator on Web Browser
Google Authenticator can also be set up in a web browser if you cannot use a mobile device. After adding the extension to Chrome, you can connect it to your account by scanning a QR code or entering a numeric code manually.