Skip to main content

Multi Factor Authentication (MFA)

Multi Factor Authentication (MFA) adds a second verification step to privileged accounts, reducing the risk of unauthorised access even if a password is compromised.

Updated over a week ago

As part of our ongoing commitment to delivering secure and trusted services, we're implementing additional platform security measures that will impact some users.

Implementing Mutli Factor Authentication (MFA) provides an extra layer of protection for your account and the sensitive information entrusted to our collaborative network. This simple measure helps safeguard against unauthorised access and aligns our operations with industry standards.

Getting Started with MFA?
See our guide to Setting up MFA

Need help logging in using MFA?
See Logging in Using MFA

What is MFA?

MFA adds a second verification step to privileged accounts, reducing the risk of unauthorised access even if a password is compromised.

For our platform, this means particular users will need to enter their password and a verification code to access their ATDW account.


Who needs to use MFA?

MFA is being introduced incrementally to different user groups with privileged roles on the platform. This phased approach helps ensure a smooth transition, gives each group time to adjust, and lets us provide targeted support as you move to stronger, best-practice security.

In time, the following users will be required to log in using MFA:

  • Admin users;

  • State and Territory Tourism Organisations (STOs);

  • Visitor Information Centers (VIC) and Regional Tourism Organisations (RTO); and

  • Industry (IND) users

Tourism Businesses and Distributors do not require MFA to login to the platform.


What type of Authentication should I use?

To ensure a smooth experience for every type of user, we’ve set up two authentication options based on how you access your account.

If you share a login with others, you’ll need to use Email Authentication to verify access for all users with that login. This ensures that all users connected to a shared account can still sign in securely using a single verification method.

If you have an individual login, you can choose between Google Authenticator where a verification code is generated on your phone (our recommended option for the highest level of protection) or Email Authentication.

Did this answer your question?