Your UTORid, Passwords & MFA
UTORid: Your Digital Identity at U of T
At the Ontario Institute for Studies in Education (OISE) and the University of Toronto, your UTORid serves as your primary digital identity. It is used to access a wide range of University services and resources, including email, learning platforms, and administrative systems. Unlike many role-based accounts, your UTORid remains with you throughout your time at the University, even if you change positions, departments, or academic roles, helping ensure seamless access to the tools and services you need.
Sponsored, Affiliate, Guest, & UTORid's for Externals
Multi-factor Authentication (UTORMFA)
At Ontario Institute for Studies in Education (OISE)/the University of Toronto, Duo Mobile is the approved multi-factor authentication platform, sometimes referred to as UTORMFA, used to help secure your UTORid, and other university services. MFA helps verify your identity when signing in, ensuring that even if your password is compromised, your account remains protected.
Important: Never approve a Duo Mobile authentication request that you did not initiate yourself, and never share Duo prompts, codes, or authentication requests with anyone else. These approvals are intended solely for your personal use when accessing your account. No University of Toronto employee, IT staff member, or service provider will ever ask you to approve a Duo request on their behalf. If you receive an unexpected Duo notification or are asked to share authentication information, deny the request and report it immediately.
Password Etiquette
Passwords are an essential security measure that OISE community members use every day to protect their online accounts. However, passwords alone are not enough to safeguard your information, data, and digital resources. Creating a strong password is just one component of maintaining good cybersecurity. Additional measures, such as enabling multi-factor authentication (MFA), following password security best practices, and using an approved password manager, can further strengthen your online security and help keep you safe in an increasingly connected world.
Longer Passwords
Passwords should be at least 16 to 128 characters in length.
Mix of Characters
Include a mix of uppercase and lowercase letters, symbols, and numbers.
Make it Random
Use mixed-case letters, numbers, and symbols, or a passphrase of 5-7 random words.
Make it Unique
Use unique passwords for each account to prevent a breach of one account from affecting others.
Use a Phrase
"May the force be with you” can be written as a phrase “M@yTh3F0rc3B3W!thY0u” which is a complex passphrase, incorporating special characters, lowercase, uppercase, and digits.
Reset Periodically
Reset your password regularly, at least every 90 days. If your password is compromised, changing it frequently reduces the time an attacker has to use your credentials.
Simplying Password Management (1Password)
1Password is a secure, cloud-based password management tool available to faculty, librarians, and staff at the University of Toronto. It can be installed on Windows, macOS, iOS, and Android devices. For OISE-issued devices, 1Password comes pre-installed. However, users must complete the enrolment process to activate and begin using the application.
Bonus Offer: All individuals with a 1Password Business account will be provided with a complimentary 1Password Families account for their personal account information. To obtain your 1Password Family account: Get a free 1Password Families membership when you use 1Password Business.
