From 6 June 2024, the Library is introducing optional two-factor authentication for your Library login. 

What is two factor authentication? 

Two-factor authentication can provide an optional extra layer of security to your Library account by requiring an additional verification step beyond the conventional password. It is like having two locks on your door instead of one. When you log in, you will need your usual password (the first lock) and then a unique code sent to your email (the second lock). This makes it tougher for anyone trying to break into your account because they would need both your password and that extra code.  Learn more

Why is the Library introducing optional two factor authentication? 

While your Library password remains an important line of defence, opting for two-factor authentication adds an additional level of protection. 

By offering this optional feature, we aim to give you greater control over the security of your personal information while accessing Library resources and services. 

Is my Library login secure without two factor authentication? 

While two-factor authentication is beneficial, the Library's security measures and good password hygiene can help protect your account and data. Good password hygiene includes using unique, complex passwords and updating them regularly to further fortify your account's security. Learn more from the Australian Signals Directorate website.  

Does the Library plan on introducing mandatory two factor authentication? 

We do not have plans to make two-factor authentication mandatory. 

Our patron’s privacy and security remain top priorities for us. We continually evaluate and enhance our security measures, in line with Commonwealth Government security practices and guidelines, to ensure the protection of your data. 

Why has the Library introduced two factor authentication using email only? 

All Library accounts are linked to email addresses, but not all have mobile phone numbers associated. Because of this, we've opted to implement optional two-factor authentication using email initially. We may explore adding mobile phone authentication in the future.