Frequently asked questions
Short answers with links to the official source and the complete guides.
3 results
Security
What information must remain private?
Never share passwords, setup QR codes, Authenticator codes, recovery codes, private keys or passkey security information.
What should I do after an unexpected sign-in request?
Do not approve it or share a code. Review your account through the official portal and report the issue. If credentials were disclosed, use a trusted device to follow official recovery and security steps.
Account and authentication guide · CISA guidance on verification codes and two-factor authentication · Related service guides
How do I recognize a fake sign-in page?
Check the exact HTTPS domain. A padlock alone does not prove that a similar-looking domain is legitimate. The UID portal is auth.ilam.ac.ir.
Account and authentication guide · CISA guidance on recognizing and responding to phishing · Related service guides