Mutli-Factor Authentication FAQs

Why do we need to use multi-factor authentication (MFA)?
ASX has introduced multi-factor authentication (MFA) to add an extra layer of security to your ASX account by requiring a second verification step in addition to your password. This helps safeguard your account from unauthorised access.

What MFA types are available?
The following MFA types are available for authentication:

• Passkey 
  Allows you to use the security features on your phone, computer or tablet to log in. Passkeys can be set up with a fingerprint, face scan, screen unlock pin or swipe pattern.
• Physical Security Key 
  Use a physical security key device (e.g. YubiKey) to verify your identity when you log in.
• Authenticator 
  A mobile app that generates a time-based one-time password that you’ll need to enter each time you log in. Authenticator Apps are available to download from the Apple App Store or Google Play Store (e.g. Google Authenticator, Microsoft Authenticator).

When do I need to set up MFA by?
MFA is required to be set up for your ASX Online account by 30 June 2025.

Can I set up MFA later?
Yes, you can set up MFA at a later time, but it must be completed by 30 June 2025 to continue to access ASX Online.

Can I register more than one MFA device?
No, you can only register one MFA device at a time. If you need to change your MFA method, you must reset it and set up a new one.

Can I register MFA from my mobile device?
You can use your mobile device to set up the authenticator app for MFA on ASX Online. However, if you are using passkeys or physical security keys, you will need to register them through your computer or laptop instead.

Can I disable / turn-off / opt-out of MFA once set up?
No, MFA is a mandatory security feature and cannot be disabled once you have registered and enabled it. It is required to ensure the security of your account.

My MFA device is lost or damaged, how can I register a new device?
If you need to reset your MFA device, you can do so from a previously logged-in or recognised device. If you no longer have access to a recognised device, you will need to contact ASX Customer Technical Support for assistance.

Please refer to the Reset MFA user guide.

I've entered the MFA verification incorrectly and my account has temporarily locked, what do I do?
For security reasons, your ASX account will be locked after multiple failed MFA attempts.

You can reset your password to regain access.

Please refer to the How to reset your password user guide.

Who do I contact for assistance to set up MFA?
For further information, please refer to our MFA user guides.

If you still require assistance, please contact ASX Customer Technical Support on 1800 663 053 or internationally +61 9227 0372 or email cts@asx.com.au

I have a single user account that can access both the Investor portal and ASX Online portal. Do I need to complete MFA for each system I log in to?
MFA setup and verification are now required for the ASX Online portal. However, you can still log in to the Investor Portal using just your email address and password as usual.

I want to use a physical security key device (e.g. YubiKey) as a preferred MFA method, how do I get one?
ASX supports physical security key device (e.g. YubiKey) as an MFA option on the ASX Online portal, but you will need to purchase your own device from an authorised seller.

What should I do if I forget my physical security key device (e.g. YubiKey) PIN? 
Users are responsible for purchasing their own YubiKey and setting up a PIN. ASX cannot assist with resetting your PIN which is stored directly on the YubiKey device.

If you forget the PIN, you can follow the guides below, however, please be advised that this procedure will effectively unregister the key with every account it has been registered with.

It is recommended that you contact your company's IT department before proceeding with the below guides