Employer updates
Sponsor accounts: prepare for multi-factor authentication
UKVI is introducing an extra sign-in check for the sponsorship management system. Sponsors should check user details and follow the official account-security instructions.
Rollout began 3 September 2026; UKVI expects coverage of all sponsors by November 2026
Sponsor guidance updated 3 September 2026; SMS manual 13 first published 28 August and updated 2 October 2026
What is changing
UKVI's sponsor guidance describes a phased introduction of mandatory multi-factor authentication (MFA) for sponsorship management system (SMS) accounts, starting on 3 September 2026. It says MFA is enabled for organisations granted a sponsor licence on or after 9 September 2026.
UKVI expects all sponsors to be covered by November 2026 and will contact sponsors with instructions when their accounts are due to change. November is the stated rollout expectation, not a separate deadline for every sponsor. This is an account-access change described in published guidance.
Check details and protect access
When MFA is enabled, signing in requires a one-time passcode as well as the usual credentials. Check the recorded email address, mobile number and date of birth for Level 1 users; existing Level 2 users need a correct email address.
SMS manual 13 explains the sign-in steps and how to request corrections to user details. UKVI updated its contact details on 1 October and the instructions for date-of-birth correction requests on 2 October, so use the current online manual rather than an older download.
Access SMS through GOV.UK and keep user IDs, passwords and passcodes private. UKVI says it will not ask for these credentials outside SMS or send login links in its messages. Use the official manual if you have difficulty signing in.
Official sources
- Sponsor guidance Part 1 — MFA, paragraphs L4.66–L4.71UK Visas and Immigration
- SMS manual 13: multi-factor authentication — accessible guidanceUK Visas and Immigration
Based on official information available under the Open Government Licence v3.0, except where otherwise stated. Source material: © Crown copyright. These are independent RSDC summaries, not government publications or endorsements.
