There are a number of apps that ask for your UniKey and password. If the app was not created or endorsed by the university, you are putting your information at risk of being stolen or misused.
University login pages are branded with the University crest and often include links to relevant University webpages. Some examples of what University of Sydney login pages typically look like are at the bottom of the page.
Before entering your UniKey and password on a website check the URL is ‘sydney.edu.au’ or ‘usyd.edu.au’. Attackers sometimes try to hide or impersonate a website by using hyphens or groups of words that seem appropriate. For example: sydney.edu.au.notavirus.org or sydney-edu-au.freewebsite.com.
When using apps, make sure they are university endorsed before entering your UniKey and password details.