Keeping your super safe

Encrypting your data

When you access your Aware Super account, your information is protected by the latest industry encryption technology, which safeguards any sensitive data being sent between your computer and our systems. Simply look for a padlock in the address bar before the URL, or website address, which indicates that the website has a valid security certificate issued by a trusted authority.

Additional authentication

For some tasks you complete online, we may send you an authentication code to your mobile number or email address - this process is called two-factor authentication. Once you get the code, simply enter it on screen and you can proceed. This extra layer of security is to help make sure other people can’t log in as you.

Please contact us immediately if:

• you receive an SMS or email security code sent from us and don't know why
• you receive a request for your account or member number and/or password by email or SMS
• your access to the secure portal has been suspended
• your mobile phone can’t make phone calls and after contacting your mobile phone provider you find out your number has been ported, or transferred, to another provider without your knowledge.
   

Session timeouts

If you're signed on to one of our sites and haven’t used it for several minutes, your session will time out. This is designed to prevent unauthorised users from accessing your private data on a device that has been left unattended. To start your online activity again simply re-enter your login details.

Keep your personal details up to date

Making sure your personal details are correct is important because if a privacy breach does occur we want to be able to contact you as soon as possible, confirm your identity and quickly manage the security risk. In particular, make sure your mobile number and email address are current, so we can always get in touch with you. 

We’ll never ask you to click on a link in an email or SMS to change or update your personal details. The safest way to do this is:

On a computer

1. Go to the Aware Super homepage by entering https://www.aware.com.au into your browser.
2. Log in to your account by clicking on the log in button in the top right-hand corner of the page.
3. Go to Profile and then Contact Information to update your contact details.
    

On your phone or tablet

1. Download the Aware Super mobile app
2. Log in to your account.
3. Go to Profile and then Update details to update your contact details.

Responsibly disclose a security vulnerability

If you have discovered a possible security concern in one of our applications, systems, or services, and would like to share this, please email us.

Please include:

• anything beneficial to help an investigation (eg: date of incident, desktop/mobile screenshot), and
• your preferred contact method if you would like to be contacted.
   

If you request so, one of our security team can get in touch.

At Aware Super we are committed to the security of our customers' data, our information systems, and our services. Despite our very best intentions, sometimes there may be something we missed.

Although we don’t pay compensation for any reported security vulnerabilities, know that you have the gratitude of over 1 million Australians who entrust their retirement with us.