Skip to main content

Keeping your account secure

Aware Super is committed to protecting your retirement savings and personal information from unauthorised access.

We have strong security controls in place and continuously monitor for emerging threats. We regularly review and enhance our protections to respond to changes in the cyber threat environment, and you may notice updates to how you access your account as a result.

Is my account at risk?

We take a proactive approach to safeguarding member accounts, including monitoring for suspicious activity and strengthening controls where needed.

While no organisation is immune to cyber threats, the measures we have in place are designed to help protect your account and minimise the risk of unauthorised access.

What steps are in place to protect my account from unauthorised logins?

We use multi-factor authentication (MFA) to provide an additional layer of security when you log in.

After entering your member number and password, you will receive a one-time code to your registered mobile number. You will need to enter this code to complete your login.

Do I need to do this every time I log in?

Yes. This step helps ensure it is you accessing your account and adds an important layer of protection.

What should I do if I receive a code when I’m not logging in?

If you receive a one-time code and are not attempting to log in, please contact us as soon as possible.

Your account remains secure, and we will take appropriate steps to ensure it continues to be protected.

Multifactor authentication

We have an extra step in the login process to help keep your account secure.

After you enter your member number and password, we will send a code to the mobile number you have registered with us. Enter that code on the login screen to complete the login process.

Please contact us on 1300 650 873 (Monday to Friday 8am-8pm AEST/AEDT) or Live message with us at aware.com.au  if you do not have a mobile phone on your account or want to change your registered mobile number.

We already had multi-factor authentication switched on for sensitive transactions, we have just added an extra security step at log in to help keep your account secure.

Yes, this additional step is to ensure that your account is safe and is required each time you try to log in.

No. We actively monitor the external environment and continually assess our security measures to safeguard your superannuation and information, and we will update that protection when we think it’s necessary.

You can visit aware.com.au/security for up-to-date information on how we protect your super and your personal information.

Yes, this will work from most countries. If you are having trouble logging in from overseas, please call us on +61 3 9131 6373 or live message with us at aware.com.au.

If you use a biometric method like facial recognition to log into the app you won’t need to enter a code.

If you log into the app using a username and password, you will be sent a code to your mobile phone and prompted to enter it.

You will get be asked to re-enter it. If this doesn’t work, you can ask to resend a new code. If you enter the incorrect code too many times your account will be locked for ten minutes and then you can retry.

There can be multiple reasons why you can’t log in. We recommend:

  • Switching to a different browser, such as Microsoft Edge or Google Chrome
  • Trying another device (mobile or desktop)
  • Clearing your browser cache, then try is again. Here’s how:
    • Google Chrome: Click the menu icon in the browser upper right corner, then click Clear browsing data.
    • Microsoft Edge: Click the menu icon in the browser upper right corner, then click Settings and Privacy, then click Clear browsing data.
    • Apple Safari: Click the Safari menu, then select Empty Cache

Tell us

Please get in touch immediately if something’s not right.

Contact us on 1300 650 873.  (Monday to Friday 8am-8pm AEST/AEDT) or Live message with us at aware.com.au 

Change your password

If you think someone has your account password, log in and change it immediately.

Report it

If you’ve been the victim of identity theft, contact IDCARE on 1300 432 273.

Protecting your information

Keeping your information secure

When you access your Aware Super account online, your information is protected using industry‑standard security measures. This helps keep your personal details safe as they move between your device and our systems.

You can check you’re on a secure Aware Super page by looking for the padlock symbol next to the website address in your browser.

Extra identity checks

For certain activities, we may ask you to enter a one‑time security code sent to your mobile phone. This provides an extra layer of protection to help make sure only you can access your account.

Please call us on 1300 650 873 (Monday to Friday 8am-8pm AEST/AEDT) or Live message with us at aware.com.au if you want to add a new or change your registered mobile number.

Please contact us if something doesn't feel right

Get in touch with us straight away if you notice anything unusual, such as:

  • receiving a security code you didn’t request
  • being asked for your account details or password via email or SMS
  • trouble accessing your account unexpectedly
  • changes to your mobile service you didn’t authorise


Session timeouts

If you're signed on to one of our sites and haven’t used it for several minutes, your session will time out. This is designed to prevent unauthorised users from accessing your private data on a device that has been left unattended. To start your online activity again simply re-enter your login details.

Keep your personal details up to date

Making sure your personal details are correct is important because if a privacy breach does occur we want to be able to contact you as soon as possible, confirm your identity and quickly manage the security risk. In particular, make sure your mobile number and email address are current, so we can always get in touch with you. 

We’ll never ask you to click on a link in an email or SMS to change or update your personal details. The safest way to do this is:

 

On a computer

  1. Go to the Aware Super homepage by entering https://aware.com.au into your browser.
  2. Log in to your account by clicking on the log in button in the top right-hand corner of the page.
  3. Go to Profile and then Contact Information to update your contact details.
     

On your phone or tablet

  1. Download the Aware Super mobile app
  2. Log in to your account.
  3. Go to Profile and then Update details to update your contact details.

Responsibly disclose a security vulnerability

If you have discovered a possible security concern in one of our applications, systems, or services, and would like to share this, please email us.

Please include:

  • anything beneficial to help an investigation (eg: date of incident, desktop/mobile screenshot), and
  • your preferred contact method if you would like to be contacted.
     

If you request so, one of our security team can get in touch.

At Aware Super we are committed to the security of our customers' data, our information systems, and our services. Despite our very best intentions, sometimes there may be something we missed.

Although we don’t pay compensation for any reported security vulnerabilities, know that you have the gratitude of over 1 million Australians who entrust their retirement with us.

If something seems odd or suspicious, let us know right away. If you receive an offer to access your super through an illegal scheme, contact ASIC or the ATO to report your concerns. If you think an unauthorised withdrawal has been made from your account, contact us immediately on 1300 650 873 (Monday to Friday 8am-8pm AEST/AEDT) or live message with us at aware.com.au.

You can report a scam to ACCC or the Australian Cybercrime Online Reporting Network (ACORN). If you have been the victim of identity theft, contact IDCARE on 1300 432 273. IDCARE can guide you through the steps to reclaim your identity. Find out more about fraud prevention on the ACCC website and identity theft on Scamwatch.