In an increasingly connected environment, protecting access to shared systems is everyone’s responsibility. To strengthen account security, we’re introducing multi‑factor authentication (MFA) - an extra verification step designed to keep your login protected from unauthorised use.
What type of Authentication should I use?
To ensure a smooth experience for every type of user, we’ve set up two authentication options based on how you access your account.
If you share a login with others, you’ll need to use Email Authentication to verify access for all users with that login. This ensures that all users connected to a shared account can still sign in securely using a single verification method.
If you have an individual login, you can choose between Google Authenticator where a verification code is generated on your phone (our recommended option for the highest level of protection) or Email Authentication.
When to set up MFA?
If MFA is required, you will be prompted to set it up when you next log in to the platform. Regardless of how many accounts you have access to, you will only need to set up MFA once per user, per platform domain.
How to set up Multi Factor Authentication
Set up MFA using Google Authenticator
Use this preferred option if you do not share your login email with others.
Download Google Authenticator: If you don't already have the Google Authenticator App on your phone, you will need to download one from the App Store or Google Play before commencing. (See: What Authenticator Can I Use?)
Open the app and grant permission to use the device camera if prompted.
Login: Return to the platform login page. Enter your username and password. If you are required to set up MFA, you will be directed to the MFA setup page (shown below).
MFA Setup: If you would like to continue to use Google Authenticator as your primary MFA method, ensure the checkbox below is ticked.
Then click 'Begin Two-Factor Setup' (shown below)
You will then be redirected to an Authenticator page similar to the one below.
5. Google Authenticator: Open the Google Authenticator App on your phone.
6. Add New Account: Tap the plus (+) icon in the bottom right corner to add a new account.
7. Scan the QR Code: Choose the option 'Scan a QR code'. If prompted, allow the app to use your device’s camera. Hold your phone up to the QR code shown on your screen. The app will scan it automatically. Once scanned, the app will display a six‑digit code for your account.
OR
Enter Setup Key Manually: If your camera isn’t working or you’re completing setup on the same device, you can use a manual setup key instead.
To do this select 'Enter a Setup Key' in the Google Authenticator App. In the Account name field, type something recognisable like 'ATDW'. In the Key field, enter the setup key exactly as shown. Tap 'Add' to complete the setup.
The app will now display a six‑digit code for your account.
8. Enter the Code: Enter this code on the setup screen (shown below) Remember to tick the box next to 'Don't ask me again for 7 days', then click 'Submit'.
If you can’t access your authenticator app or device, select 'Choose another authentication method' to switch to email verification.
Setting Up MFA Using Email
Use this option if you share your login email with others or if you do not have access to your Google Authenticator app.
While shared accounts are supported, they are not recommended.
For improved security and ease of access to the platform, we recommend users establish individual accounts and adopt MFA using an Authenticator App.
Login: Head to the platform login page. Enter your username and password. If you are required to set up MFA, you will be directed to the MFA setup page (shown below).
Send a verification code: If you would like to set Email as your primary verification method, click 'Set Email as Primary MFA method'. (MFA refers to Multi Factor Authentication).
Then click 'Send Code'.
You will then be directed to the screen below.
Check Email: Check your inbox for an email from ATDW containing a code.
Enter the Code: Enter the 6-digit code in the space provided (shown below). Remember to select the box 'Don't ask me again for 7 days', then select 'Verify.
If you can’t access the email, or the verification code, select 'Choose another authentication method' to switch to Authentication using an Authenticator app.
Frequently Asked Questions
Why don’t I see MFA when logging in?
The additional Multi Factor Authentication requirement is being rolled out in stages across select user groups (See: Who Needs to Use MFA?).
If you are not seeing MFA option when logging in, you are either a standard user (i.e. a tourism business or distributor), or your organisation type has not yet been included in the rollout of MFA.
What Authenticator Can I Use?
When setting up Multi-Factor Authentication (MFA) on our platform, we recommend using Google Authenticator. This app is simple to install and widely supported across devices.
Users can however use any standard time-based one-time password (TOTP) authenticator app that supports QR-code scanning. This includes Microsoft Authenticator, or Apple Authenticator (available on iOS)
Each of these apps can be downloaded for free from the Apple App Store or Google Play Store. Once installed, you can either scan the QR code provided on screen during setup or manually enter the setup key displayed to you.
Can I switch MFA Methods later?
Yes. Anytime you are logging in, you are given an option to select 'Choose another authentication method' to select the alternative verification method (shown below).
Why don’t I need to set up MFA for every organisation?
Multi Factor Authentication is required once per user per domain, not for each organisation or role. Meaning that if you are linked to multiple State or Territory Tourism Organisations or Visitor Information Center (VIC) organisations, you only need to setup MFA once.
Can we use MFA with a shared email account?
Yes, in instances where multiple users are logging in using the same email address, we recommend you set up MFA using Email.
While shared accounts are supported, they are not recommended.
For improved security and ease of access to the platform, we recommend users establish individual accounts and adopt MFA using an Authenticator App.
I'm having trouble with the Authenticator App
Use the links below to access official Authenticator App support: