Keeping your information secure is important to us. That's why we're introducing Multi-Factor Authentication (MFA) to access the Membership portal in the coming months. Get ready to protect your account and download an authenticator app such as Google or Microsoft today.
Please see below for more information:
Why is Multi-Factor Authentication required?
Passwords can be compromised through phishing, malware, credential theft and data breaches. MFA adds an extra layer of security. It requires access to your authenticator app as well as your password, making it much harder for unauthorised users to access your account. We are using a Time based One-Time Password (TOTP) authentication which is a type of MFA.
What is TOTP Authentication?
A TOTP is a unique security code generated by an authenticator app that changes every few seconds to provide an extra layer of protection when signing in to an account.
Which authenticator apps are supported?
Most TOTP compatible authenticator apps are supported, including:
How do I set this up?
Download your preferred app
Go to membership log in page and use your email and password to start logging in (if you do not have an account already, click on forgot password to create an account). You will be shown a QR code to set up MFA
Use your authentication app to scan the QR code (if your camera is not working type the code manually)
The app will set up your account and generate a six-digit verification code that updates every 30 seconds
Go back to your membership portal and enter the six-digit code shown on your app
You should now be signed into your membership
You will have to set up MFA once. From your next login, you will only be required to use the app generated code after entering your email and password.
Do I need internet connection to generate verification codes?
No. After the initial setup, verification codes are generated on your device. You can use them even if your phone has no internet or mobile network connection.
What happens if I get a new phone?
Before replacing your phone, transfer your authenticator accounts if your app supports this feature. Also keep any recovery or backup codes in a secure location so you can regain access if needed.
What if I lose access to my authenticator app?
If your phone is lost, stolen, reset or the authenticator app is removed, you may not be able to sign in. Use your recovery method or contact us to restore access to your account.
Can someone access my account if they know my password?
No. MFA requires both your password and a valid verification code from your authenticator app or recovery method. This provides stronger protection than a password alone.
Should I share my verification code with anyone?
No. Never share your verification code. This includes colleagues, administrators and support personnel. Legitimate support teams will never ask for your current verification code.
What are the best practices to safe guard my online account?
To help keep your account secure:
Use a strong, unique password
Keep your authenticator app up to date
Protect your mobile device with a PIN, fingerprint, or facial recognition
Store recovery or backup codes in a safe location
Never share authentication codes
Report any suspicious activity immediately
What if I don't want to use MFA or install an App?
You will not be able to access or manage your membership through the portal. You can still join and maintain your membership by contacting us via:
Web Messaging
Phone
Membership renewal payments can be made using:
Credit card via our 24/7 self-service phone payment system (IVR) or with an agent during the Membership call centre operating hours
BPay
Australia Post using the bar code printed on your mailed renewal notice
Our team will be happy to help you with any membership related queries.