About your Security profile

You can use your security profile to:

  • change your password
  • manage your multi-factor authentication (MFA)
  • update your security information
  • add additional authentication methods
  • remove devices from your account (lost, stolen or changing personal devices).

Passwords must be a minimum of 12 characters in length. We recommend using three random four-letter words. More information can be found via Passwords.

Changing your password will take immediate effect in Windows, myUWE portal, Blackboard and most other UWE Bristol systems (except for faculty specific passwords).

Wifi symboleduroam wifi users: don't forget, if you change your password you will need to remove and re-install eduroam CAT on any iOS or Android mobile devices.

Passwords

Follow our guidance to ensure you always use secure passwords. They reduces the risk of data breaches and protects you from many threats such as identity theft.

Information Security Toolkit

Top tips and advice to help safeguard you, others and the University against cyber threats. Learn more about secure passwords and identifying fraudulent communications.

Set up your security profile

  1. Sign in to your UWE Bristol account on a computer or tablet.
  2. Go to https://aka.ms/mfasetup and the 'More information required' prompt will appear:
    More information required
  3. After you select Next from the prompt, a Keep your account secure wizard appears:
    Start by getting the app
  4. Select Download now to download and install the Microsoft Authenticator app on your mobile device, and then select Next. More information via Download and install the Microsoft Authenticator app:
    Set up your account
  5. Remain on the Set up your account page while you set up the Microsoft Authenticator app on your mobile device.
  6. Open the Microsoft Authenticator app, select to allow notifications (if prompted), select Add account from the Customize and control icon on the upper-right, and then select Work or school account.
  7. Return to the Set up your account page on your computer, and then select Next.
    The Scan the QR code page appears:
    Scan the QR code
  8. Scan the provided code with the Microsoft Authenticator app QR code reader, which appeared on your mobile device after you created your work or school account in Step 7.
    The authenticator app should successfully add your work or school account without requiring any additional information from you. However, if the QR code reader can't read the code, you can select the Can't scan the QR image and manually enter the code and URL into the Microsoft Authenticator app. More information can be found via Manually add an account to the app.
  9. Select Next on the Scan the QR code page on your computer.
    A notification is sent to the Microsoft Authenticator app on your mobile device, to test your account:
    Let's try it out
  10. Approve the notification in the Microsoft Authenticator app, and then select Next:
    Notification approved
    Your security info is updated to use the Microsoft Authenticator app by default to verify your identity when using two-step verification or password reset.
  11. On the Phone set up page, choose whether you want to receive a text message or a phone call, and then select Next. For the purposes of this example, we're using text messages, so you must use a phone number for a device that can accept text messages:
    Method 2 of 2: Phone
    A text message is sent to your phone number. If would prefer to get a phone call, the process is the same. However, you'll receive a phone call with instructions, instead of a text message.
  12. Enter the code provided by the text message sent to your mobile device, and then select Next:
    Enter code
  13. Review the success notification, and then select Next:
    SMS verified. Your phone was registered successfully
    Your security info is updated to use text messaging as a backup method to verify your identity when using two-step verification or password reset.
  14. Review the Success page to verify that you've successfully set up both the Microsoft Authenticator app and a phone (either text message or phone call) method for your security info, and then select Done:
    Success!

Adding security info methods

Multi-factor authentication (MFA) is more secure than just a password, because it requires something you know plus something you have. No hacker has your physical phone.

To add additional security info methods:

  1. Go to your security profile.
  2. Make sure you are signed in with your UWE Bristol email address and password.
  3. Select Security info.
  4. Now add a minimum of two security info methods:

Only the methods listed above will allow you to access Office 365 apps on personal devices (which includes your UWE Bristol email account). Email is another method, but can only be used for password reset authentication.

Important: If you only have one method of verification and that device is not available (for example, your mobile has no charge or it's been stolen), you will not be able to sign in to a service that requires MFA. Having additional methods of verification will also be useful when changing any of your devices.

Why you should use multi-factor authentication (MFA)

The short answer is because it will make things more secure. The long answer involves Ronald Reagan.

Responding to notifications

Your response to a MFA notification will depends on the security info method you set up:

  • Mobile app - tap the notification or open the Microsoft Authenticator app on your phone and tap approve or reject.
  • Text message - type the code received by text message into the login screen.
  • Phone call - answer the call and press the hash key (#) to confirm.

If you haven't tried to log in but receive a notification, you should either reject it or take no action.

If you receive unexpected alerts often, check whether you have any apps running in the background or on other devices. If you can't identify the source, contact the IT Service Desk for advice.

Change your password

If you know your current password, you can change it using your security profile.

Passwords must be a minimum of 12 characters in length. We recommend using three random four-letter words. More information can be found via Passwords.

Changing your password will take immediate effect in Windows, myUWE portal, Blackboard and most other UWE Bristol systems (except for faculty specific passwords).

To change your password using your security profile:

  1. Log in to your security profile.
  2. Select CHANGE PASSWORD:
    Password. Make your password stronger, or change it if someone else knows it. CHANGE PASSWORD
  3. The 'Change password' window will now be displayed:
    Screenshot of the 'Change password' window, displaying you User ID and password entry fields (old, create, and confirm)
  4. Check the User ID is displaying your UWE Bristol email address (for example, an2.other@live.uwe.ac.uk).
  5. Enter your old password.
  6. Create new password.
  7. Confirm new password.
  8. Click Submit.

You can also change your password from any UWE Bristol PC:

  1. Press Ctrl, Alt & Delete.
  2. In the dialog window, select Change Password.
  3. Type in your current password.
  4. Select a new password.

Wifi symboleduroam wifi users: don't forget, if you change your password you will need to remove and re-install eduroam CAT on any iOS or Android mobile devices.

Reset your password

If you've forgotten your password, you'll need to reset it.

Passwords must be a minimum of 12 characters in length. We recommend using three random four-letter words. More information can be found via Passwords.

Changing your password will take immediate effect in Windows, myUWE portal, Blackboard and most other UWE Bristol systems (except for faculty specific passwords).

To reset your password:

  1. Go to Microsoft password reset.
  2. Enter your User ID (UWE Bristol email address).
  3. Enter the security characters as shown on screen.
  4. Select a contact method for verification.
  5. Enter the verification code.
  6. Select a new password.

Please note: if you haven't previously created your security profile and added security info methods, you will need to contact the IT Service Desk to reset your password.

Resetting your password will take immediate effect in Windows, myUWE portal, Blackboard and most other UWE Bristol systems (except for faculty specific passwords).

Wifi symboleduroam wifi users: don't forget, if you change your password you will need to remove and re-install eduroam CAT on any iOS or Android mobile devices.

What to do when changing personal devices

Install the Microsoft Authenticator app onto your new device and add your UWE Bristol account.

Where possible, on your old device remove the Microsoft Authenticator app.

If you do not use the Microsoft Authenticator app, no action is required when changing devices. Authentication using your phone number will continue to work across devices.

Remember: if you only have one method of verification and that device is not available (for example, your mobile has no charge or it's been stolen), you will not be able to sign in to a service that requires multi-factor authentication.

What to do if you change your phone number

If you use your phone number (for call or text) as a security info method, you will need to update the number:

  1. Go to your security profile.
  2. Make sure you are signed in with your UWE Bristol email address and password.
  3. Select Security info.
  4. Now click Change against the relevant method and follow the instructions that appear on-screen.