Two-step verification

Two-step verification is a security feature which requires you to input a 6-digit code, in addition to your email address and password when logging into your myVicRoads account.

About two-step verification

Your myVicRoads account holds personal information that should be kept private and accessible only to you. Examples of personal information includes – your full name, date of birth, vehicle details and credit card information.

Whenever personal information is exchanged over the internet, a simple username-password authentication is vulnerable to hackers. Adding an additional layer – a one-time unique code – means that logging into your myVicRoads account is secure (even if your username and password are compromised).

Two-step verification is the modern industry standard and adds an additional layer of security to protect account holders exchanging transactional information. Organisations like banks and financial services, government departments and insurance companies use two-step verification.

How to set up two-step verification

Note: Two-step verification is a mandatory requirement if you sign up to a new myVicRoads account on or after 27 November 2023. You won’t be able to access your account without activating two-step verification as a first step.

Watch the video below to learn more about how to activate two-step verification on your myVicRoads account.

Need more help?

For new, lost or stolen phones refer to New, lost or stolen devices and changed mobile number for more information.

If you’re experiencing issues with access to myVicRoads or activating two-step, please call 1300 650 266 – 8.30am to 5pm on weekdays and 8am to 12pm on Saturdays and one of our friendly staff can help.

You only need to download the authenticator app if you will be using the authenticator app as your chosen two-step verification method. If not, you can use the SMS method on your mobile phone.

Data security experts agree that using an authenticator app is industry best practice. SMS messaging is not encrypted. Specialist authenticator apps use an encryption layer to exchange information between the host service and your smart phone or tablet.

When using an authenticator app as a two-step verification method the app needs to scan a QR code that is unique to VicRoads. Your smart phone uses the camera for this purpose alone. The authenticator app will prompt you to 'Scan a QR Code' and then will ask for access to your camera.

If you don’t have a mobile phone, you can still activate two-step verification using an authenticator app on a different smart device, such as a tablet.

Some desktop computer devices may allow desktop authenticator apps to be used. If you don’t want to download an app, you can use the SMS method instead and receive a text message to your mobile phone.

You can use SMS on your mobile phone even if it's not a smart device.

Changing your verification method

You can change your verification method at any time from within your myVicRoads account. To change your verification method, go to Profile and Settings from within your myVicRoads account dashboard. 

 

Can I still use two-step verification if my phone is lost or stolen?

If you're using SMS messaging to receive your 6-digit authentication codes, and you have the same mobile number or SIM card, your replacement device will receive your SMS codes as before

If you were using an authenticator app on your lost or stolen device and you can’t log-in on your new device, you will need to call us on 1300 650 266.

I've set up two-step verification, what do I do if I have a new phone number?

To log in to your myVicRoads account you will need your old SIM card to receive your 6-digit authentication code.

The authenticator app should work as normal on the existing mobile device.

If you can log in to your myVicRoads account, you can change your phone number under Profile & Settings.

If you can't log into your myVicRoads account you will need to call us on 1300 650 266.

What do I need to do if I change to a new device?

If you have enabled two-step verification using SMS and you have the same mobile phone number, you don’t need to do anything. The same two-step verification will work on your new device. 

If you were using an authenticator app on your previous device and you can’t log-in on your new device, you will need to call VicRoads. 

If someone steals my phone will they be able to access my account because I have the two-step verification authenticator app on it?

No, only if they have your login and password details for your myVicRoads account.

Two-step verification alone doesn’t provide access to your account. You will only be prompted for a 6-digit verification code once you've entered your registered email and password. 

It is your responsibility to always keep your password secure.

I have bought a new device and the authenticator app no longer works. What should I do?

If you can log in to your myVicRoads account with your old device you can set up your account in Profile & Settings to transact with the authenticator app on your new device.

If you’re unable to log in to your myVicRoads account, you will need to call us on 1300 650 266.

Is my password visible to the two-step verification system?

No. The only data that the SMS two-step verification system stores is the mobile number to deliver the 6-digit verification code to. Similarly, the authenticator app only knows to receive a 6-digit verification code from VicRoads (the host service) and display it to you.

Do I have to set up two-step verification?

Two-step verification is a mandatory requirement if you sign up to a new myVicRoads account on or after 27 November 2023. You won’t be able to access your account without activating two-step verification as a first step.

For personal, partner or business myVicRoads accounts created prior to 27 November 2023, two-step verification remains available as an optional feature.

Can two-step verification be disabled?

No, if you’ve already set up two-step verification on your myVicRoads account, this can’t be disabled.

Was this page helpful?

 

Please tell us why (but don't leave your personal details here - message us if you need help or have questions).