Set up two-factor authentication (2FA)
Below is a series of links to help you set up 2FA on your key accounts.
What is 2FA?
There are a variety of ways for you to be secure online, one of which is enabling two-factor authentication (2FA) across your accounts.
Two-factor authentication (2FA) is an additional security step that helps keep other people out of your online accounts or stops them making unauthorised transactions. It is a way of ensuring that it’s really you who is logging into your account and is one of the most effective ways to keep your online accounts secure.
How to enable 2FA on your accounts
Enabling 2FA on your online accounts can be confusing, so we've created a step-by-step guide to help you.
To get underway, we recommend starting with your most important online accounts, such as:
- internet banking
- email accounts
- social media networks
- other accounts with financial details – for example, investment accounts, Inland Revenue or online shopping.
Companies can enable 2FA or other security features in a variety of ways.
NCSC recommends using the option of a security key or an authentication app where these are available to you. Any 2FA is better than none, but these methods are more secure than text message and email.
Most online services – from banks to social media – have some form of secure access in place to protect customers. We've listed the various methods below, with links showing how to set it up. This is not an exhaustive list of security measures or platforms.
Internet banking
-
ANZ
OnlineCode works on certain transactions by sending a text message to the mobile phone number you have registered for the ANZ goMoney mobile app or ANZ Internet Banking, to verify certain transactions or when requesting changes online. This helps to make sure it’s you making the transaction or requesting changes, and not someone else.
-
ASB
NetCode is set to work on certain transactions and 'unusual' logins and sends you either a text message code or an app notification. Netcode can also be turned on to work for all logins.
-
BNZ
Two-step authentication is already set up for you, you do not need to do anything. There are currently two ways you can authenticate yourself, either using the BNZ app or the NetGuard card.
-
Kiwibank
Kiwibank will send you a unique code via text message to your verified phone number for certain transactions or if you are changing your details. SMS one-time codes can't be reused and expire after a few minutes.
Find out more at Kiwibank(external link)
Email accounts and other services
-
Google and Gmail
Google's two-step verification includes using Google Prompts. This allows you to click a notification on your phone's screen rather than enter a code.
They also offer verification via login codes from:
- a third-party authentication app (such as Google Authenticator)
- text message codes sent to your mobile phone, or
- a physical security key.
Turn on 2-Step Verification - Computer - Google Account Help(external link)
-
Microsoft, including Office, Xbox, Hotmail, and Outlook
Microsoft, including Office, Xbox, Hotmail, and Outlook
Two-step verification can be turned on for logins. Microsoft offers four ways to verify yourself: physical security keys, login codes from a third-party authentication app (such as Google Authenticator), text message codes sent to your mobile phone, or codes sent to your email address.
How to use two-step verification with your Microsoft account - Microsoft Support(external link)
-
Xtra (Spark)
Spark offers two-step verification when you login to Xtra webmail. It has two ways to verify yourself: text message codes sent to your mobile phone, or codes sent to a different email address.
Set up and manage two-step verification | Spark NZ(external link)
-
myIR
Inland Revenue offers two ways to verify when you log in to your myIR account: login codes from a third-party authentication app (such as Google Authenticator), or codes sent to your email address.
Set up and manage two-step verification (ird.govt.nz)(external link)
Social media networks
Facebook
Two-factor authentication can be turned on for logins. This process differs depending on the device you're using and there are instructions for all types (see link).
Turn on two-factor authentication(external link)
Instagram
Two-factor authentication can be turned on for logins. This process differs depending on the device you're using and there are instructions for all types.
Turn on two-factor authentication (external link)
LinkedIn
Two-step verification can be turned on for logins.
Turn two-step verification on and off | LinkedIn Help(external link)
Snapchat
Two-factor authentication can be turned on for logins.
Set up Two-Factor Authentication (2FA) on Snapchat with an authentication app (external link)
TikTok
Two-step verification can be turned on for logins.
How to set up 2-step verification(external link)
X (formerly Twitter)
Two-factor authentication can be turned on for logins. This process differs depending on the device you're using and there are instructions for all types (see link).
If you wish to use text message codes, you need to have a paid X account. We do not recommend you do this as authenticator apps and security keys are more secure systems.
How to use two-factor authentication (2FA) on X(external link)