Share on LinkedInShare on LinkedIn

ARTICLE · 21 SEPTEMBER 2026

New Multi-factor Authentication Requirements For UK Visa Sponsors – What Sponsors Need To Know

Macfarlanes LLP
Macfarlanes LLP
Contributor
Macfarlanes LLP

Macfarlanes LLP

Macfarlanes is a distinctive London-based law firm with a unique combination of services built and...

View firm profile
Explore more from Macfarlanes LLP

The UK Home Office has mandated multi-factor authentication for all users of the Sponsorship Management System, fundamentally changing how organisations manage their sponsor licences and visa holder employees. This security enhancement requires users to verify their identity through one-time passcodes in addition to traditional login credentials, while simultaneously phasing out Level 2 user roles and implementing new notification systems. Understanding the phased rollout timeline and taking immediate prepa

United KingdomImmigration

The UK Home Office has introduced a mandatory multi-factor authentication (MFA) for all users accessing the Sponsorship Management System (SMS) – the platform used by organisations to manage their sponsor licence and sponsorship activities in respect of their visa holder employees.

MFA adds an extra layer of security by requiring users to verify their identity using a one-time passcode (OTP), sent by text message or email, in addition to their existing username and password, each time they log in. The change is designed to protect accounts from unauthorised access, even where a password has been compromised.

Alongside the introduction of MFA, the Home Office has announced two further changes:

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

See more popular content from