Australian-founded. Working worldwide.AU founded · Worldwide

Accounts & passwords

How to make your myGov account more secure

Your myGov account connects to your tax, Medicare, Centrelink and more. That makes it valuable to scammers, who use stolen logins to lodge fake tax returns or redirect payments. myGov now offers much stronger sign-in options than a password and text code, and setting them up takes about five minutes.

Published 2 November 2026 · NovaSoft Technologies, Sydney

The short version

Five-minute upgrade

  1. Set up a passkey for myGov.
  2. Turn off your password as a sign-in option.
  3. Check your contact details and linked services.
  4. Only ever sign in by typing my.gov.au yourself.

Your sign-in options

myGov offers three ways to sign in:

OptionHow it worksStrength
PasskeyUnlock with your phone or computer’s fingerprint, face or PINStrongest. Can’t be phished.
Digital ID (such as myID)Sign in through the Digital ID app on your phoneStrong
Username, password and codePassword plus a code by text or the myGov Code Generator appWeakest. Codes and passwords can be phished.

If you set up a passkey or Digital ID, myGov lets you turn off your password as a sign-in option. That means a stolen password can’t be used to get into your account at all.

Set up a passkey

1

Sign in to myGov

Go to my.gov.au in your browser (type it yourself) or open the myGov app, and sign in the way you normally do.

2

Open your account settings

Look for your account or sign-in settings and choose to create a passkey.

3

Confirm on your device

Your phone or computer will ask for your fingerprint, face or PIN. Choose to save the passkey to your device or password manager so it syncs to your other devices.

4

Test it

Sign out, then sign back in with the passkey.

5

Turn off your password

Once your passkey works, use the option in your sign-in settings to turn off your password. myGov may prompt you to do this.

Keep a way back in

Set up passkeys on more than one device if you can, such as your phone and computer, so losing one doesn’t lock you out. Services Australia can help if you do get locked out.

Check your details

While you’re signed in, check:

  • Your email address and mobile number are yours and current. Scammers sometimes change these after getting in.
  • Your linked services. Make sure you recognise everything linked to your account, such as the ATO, Medicare and Centrelink.
  • Your bank details in each linked service, such as where your tax refund or Centrelink payments go.
  • Your inbox for anything you didn’t expect.

Everyday habits

  • Only sign in by typing my.gov.au or using the official app. myGov never sends a link in a text or email.
  • Never share your passkey prompt, password or a myGov code with anyone, even someone claiming to be from Services Australia.
  • Use your own device, not a shared or public computer.
  • Learn the common fakes in our myGov and ATO scams guide.

If you think your account has been compromised

1

Change your sign-in straight away

If you can still sign in, change your password, set up a passkey and turn your password off. Check your contact and bank details.

2

Call Services Australia

The Scams and Identity Theft Help Desk is on 1800 941 126. They can secure your account and linked services.

3

Contact the ATO if tax may be involved

Call the ATO on 1800 008 540 if you think someone has lodged a return or changed your details.

4

Get identity support

IDCARE on 1800 595 160 can help if other personal information or documents were exposed.

Common questions

Can I use a passkey if I share a computer with family?

Save the passkey to your own phone instead. When signing in on the shared computer, you can approve with your phone.

What if I lose my phone?

If your passkey syncs through your Apple, Google or password manager account, it will be on your new phone when you sign in. Otherwise, use another registered device or contact Services Australia.

Is the myGov Code Generator app better than text codes?

Yes, it’s safer than codes by text message. A passkey is better still.

Sources

This guide is general information, not legal or financial advice. If you think you’ve lost money or personal information, contact your bank and the services named above straight away.

Keep reading

Related help

Talk to NovaSoft

Want a hand with this at work?

These guides are free to use. If your business wants help putting the checks, accounts and devices in place, our team can do it with you.