Keeping your super safe

If you select Trust this device during login, you won’t need to enter a code every time you sign in from that device. This option is just as secure and helps streamline your login experience.

You’ll receive a confirmation email regardless of whether you choose to trust the device you're logging in. 

Even if you’ve selected Trust this device you might be asked to do it again. This can happen for a few common reasons:

• If your browser cookies are deleted either manually, through browser settings, or by using private/incognito mode, your device may no longer be recognised.
• Changing devices, or browsers, or even moving between time zones (yes, even within Australia) can affect trusted device settings.
• If your internet connection changes frequently like when using different mobile networks or VPNs it can trigger the trusted device questions again.
• After 1 year of not logging in to your account, it will automatically reset trusted device settings or if they detect unusual login activity.
• Updates to your operating system, browser, or security software can remove the data used to remember your device.

You can register up to three trusted devices per account. This limit helps maintain strong security while allowing flexibility for users who access their account from multiple locations or devices.

If you try to register a fourth device, you’ll be prompted to remove one of your existing trusted devices before proceeding. This helps with managing security on your account.

No. Trusting a device is optional. If you prefer, you can continue to receive a code each time you log in for added security.

You now have the flexibility to view and remove your trusted devices at any time, giving you greater control over your account security.

To manage your trusted devices:

Mobile App

1. Login to your mobile app
2. Click on the 3 lines in the top right corner
3. Select Manage devices
4. Choose the device you want to remove

Account online 

1. Login to your account online
2. Click on your account name in the top right corner
3. Go to the Manage Login page.
4. Scroll down to find your list of trusted devices.

Before making any changes in the app or your account online, you’ll be prompted to enter a verification code to successfully remove a trusted device.

The best way to keep on top of your super and detect any unusual activity is to set up online access to your account. You’ll be able to:

• track your balance
• update your details 
• check your employer contributions
• download your annual statement 
• review your insurance cover.

You’ll receive an SMS confirmation when you make changes to your personal details via your account online. If you receive a confirmation for a change you didn't make, contact us on 1300 300 273 or message us via the mobile app or at australiansuper.com/contact-us

Haven’t got online access to your account?

Get online access now

AustralianSuper takes the issue of account security and the privacy of our members very seriously. Protecting our members’ interests is of key importance, with cyber security risk management being a focus area.

We have deployed robust security measures and processes that are designed to keep members’ data safe, and are consistent with relevant legislation and regulation.

Australian Prudential Regulation Authority (APRA), Australian Securities and Investment Commission (ASIC), and other Australian and International regulatory bodies provide direction and oversight on how we operate.

Security measures specific to protecting members include:

• We also use extra authentication for important actions, like registering for your account online or resetting your password in your account online or the AustralianSuper app.
• A comprehensive account and transaction monitoring program, including a dedicated team that analyses any suspicious behaviour.
• Enhanced call security and staff training to strengthen mitigation controls and monitoring, to combat increasingly sophisticated cyberattacks and data breaches.
• Working with government agencies, regulators and law enforcement agencies to ensure unhindered flow of regulatory advice and direction, and timely intervention in case of criminal activity.

Setup a password on your AustralianSuper account that is:

• Based on a phrase that only you know, and is made up of a variety of letters, numbers and symbols.
• Easy to remember, but difficult for someone else to guess.
• Unique to your AustralianSuper account online (don’t reuse passwords from other websites or apps).
• Only known to you, not shared with family or friends.

Remember to change your password regularly and keep your AustralianSuper account details confidential.

Make sure to log out of your online banking and super services across all your devices and apps after using them.

Avoid using the same password for your social media or banking accounts.

Fraudsters may send you fake emails that can contain harmful links or malicious attachments. This is known as phishing. You can identify a phishing email by:

• misspelling or images and graphics that don’t look quite right
• unfamiliar sender address
• suspicious attachments
• links that take you directly to your account online
• requests for your personal information.

AustralianSuper will never send you an email asking you for your personal information. If you receive an email you’re unsure about:

• contact us on 1300 300 273 (not on the phone number on the email)
• don’t open the attachment or click on any links

If you’ve clicked or opened an attachment from a suspicious email, use your security anti-malware and anti-virus to scan and remove malicious software from your device.

Find out about current security alerts

Get to know what a real email or text message looks like from your super fund, bank, and other service providers you’re with. AustralianSuper authorised emails include ‘australiansuper.com’ in the link address. You can check this by hovering over the sender address. SMS messages use AusSuper as the sender’s name and will never include a link to click on.

Fraudsters may attempt to obtain personal information and account information over the phone or via SMS.  Some things you can do if you suspect you have received a fraudulent call or SMS: 

• If the caller claims to be an AustralianSuper employee and you have reason to doubt their identity, make a note of their name and contact number, before ending the call.
• Be aware of voice recorded messages that dial automatically and ask you to call a number back. These are generally fake and designed to get your personal information. 
• Report any SMS you receive that has spelling errors, unfamiliar sender address, suspicious links, or requests for personal information. 

If you receive a phone call or SMS that you’re unsure about:

• contact us on 1300 300 273 (not the number within the SMS)
• don’t click on the links within the SMS or forward the message on
• delete the message once it’s been reported.

If you’ve clicked on a link within a suspicious SMS, it’s possible your security could have been compromised. In such cases, contact us immediately on 1300 300 273.

Find out about current security alerts

Fraudsters have a number of techniques to access your personal information online. Some ways you can stay safe online:

• Avoid sharing your personal information in public forums or social networks
• Regularly manage your cookies and delete your browsing history
• Before providing personal information online, check the browser address is green and secure (https and a closed padlock icon is in the URL bar) 
• Make sure your current contact information is up to date, so we can contact you if a withdrawal is attempted on your super account, or we detect unusual activity.

Keep your mobile device secure

• set up auto-lock on your device
• sign out of websites when you’ve finished browsing
• use a strong secret passcode on your devices lock screen.

Keep your phone operating systems and apps up to date

• Only install apps from official app stores, such as Google Play or Apple Store 
• Avoid installing apps from links received in emails, social media or websites that don’t look genuine. 
• Manage the permissions for each app. Many apps collect personal data, like your contacts or location. 
• Check the name of the app publisher before downloading
• Protect your device with up to date malware and the latest security updates

AustralianSuper collects and holds your personal information securely.

Read our Privacy Policy to learn more