Cyber Safety

Keep your UniSQ password safe

It gives you access to key systems like Student Centre and StudyDesk, so never reuse it on other sites or share it, UniSQ will never ask for it.

Try a passphrase instead of a password

Passphrases are longer, easier to remember, and harder to crack. Use a mix of random words, numbers, and symbols like: PineapplePetaPoursPort3timesaday.

Stay secure with Duo MFA

Duo Multi-Factor Authentication (MFA) adds an extra layer of protection when logging into UniSQ systems. It uses:

• Something you know – your UniSQ username and password.
• Something you have – a code or push notification sent to your phone or token.

Even if someone gets your password, they can’t log in without your second factor, making MFA a powerful defence against cyber-attacks.

Helpful student guides

• What is Duo and MFA?
• How to add Duo to your phone
• How to enrol in Duo MFA
• Duo app and your privacy.

Staff: Check the ServiceHub Knowledge Base for Duo MFA info.

UniSQ gives all students free access to Sophos Home, a powerful anti-virus program that helps keep your devices safe. It works in the background to protect your computer and mobile devices from things like viruses, malware, trojans, worms, bots, and unwanted apps.

You can install Sophos Home on up to 10 personal devices, so your laptop, phone, and even your family’s devices can stay protected too!

Phishing is when scammers try to trick you into giving away personal info like your passwords, credit card numbers, or login details. They might contact you by email, text, or even phone.

In emails or texts, they often ask you to click on a link that can secretly install harmful software on your device. Here’s how to spot a phishing attempt:

• Someone asking for your password - UniSQ, banks, Centrelink, and other legit organisations will never ask you to share your password. If a message looks real but asks you to click a link, don’t do it, go to the official website and log in from there.
• Spelling mistakes - lots of phishing emails have spelling or grammar errors. If something looks off, double-check by contacting the company directly.
• Generic greetings - messages that say “Dear Customer” instead of using your name can be a red flag. Real companies usually know who you are.
• Weird email addresses - UniSQ emails always end in @unisq.edu.au. Be careful of addresses that look similar but aren’t quite right, e.g. @uusq.edu.au.
• Stay safe - if you get a message that seems suspicious, whether it’s an email, text, or phone call, don’t respond. Check with ICT Client Support if you’re unsure.

Find out more via our short video, Don’t Get Phished. 

New scams and cyber attacks are being created all the time which makes it difficult to know what’s real and what isn’t. The Australian Cyber Security Centre (ACSC) Alert Service is free for Australians and provides easy-to-understand online security information about recent online threats and vulnerabilities within an Australian context. The service also provides solutions to manage risk to devices or computer networks.

When a company gets hacked, cyber criminals can steal customer information, like emails, passwords, and other personal details. They often sell this data to others who then try to break into your online accounts and apps.

A quick and easy way to check how safe your accounts are is to review your passwords and email addresses. This helps you spot any risks and take action before someone else does.