Find out how myGovID protects your identity, what you can do to manage the security of your myGovID and stay safe online.
On this page
Your information is safe
The Australian Government is serious about your safety and privacy. When using government online services, your personal information won’t be shared without your permission – putting you in control.
myGovID uses encryption and cryptographic technology as well as the security features in your device, such as fingerprint, face or password. This is to protect your identity and help stop other people accessing your information.
Only your core identity details are stored in the myGovID app, such as your name, date of birth and email address. When verifying your photo, the app scans your face to check that you’re a real person, the right person, and verifying in real-time. These details are checked against existing government records.
myGovID is accredited under the:
- Australian Trusted Digital Identity Framework (developed in alignment with the United States National Institute of Standards and Technology SP800-63B) which strictly controls how your identity data is collected, stored and used
- Gatekeeper Public Key Infrastructure Framework which governs how the Australian Government uses digital keys and certificates to assure the identity of subscribers to authentication services.
Protecting your myGovID
Your myGovID belongs to you – don’t share it with others. Sharing your myGovID could enable others to access your personal data across services such as tax and health. To ensure the security of your identity and personal information, it is your responsibility to protect your myGovID.
To help protect your identity from being used fraudulently, it’s important that you:
- keep your contact details up to date in the app
- protect your email account by using strong and secure passwords as well as multifactor authentication
- avoid storing images of identity documents in emails and be mindful who you share these with
- use the security features in your device, such as fingerprint and face, to log in.
Remain alert and call our support line immediately to report:
- a lost or stolen device
- a device or record you don’t recognise in your myGovID setup history
- inappropriate access to your personal information in myGovID – even if you only suspect it
- suspicious activity – For example, you’ve received a verification notifications when you are not actively accessing an online service.
Staying safe online
Your personal information forms part of your identity. Here are some tips to stay safe online and protect your personal information:
- Don’t share your myGovID with others, even family members or co-workers.
- When logging in with myGovID ensure that the URL displayed in your browser includes https://www.myGovID.gov.au or https://myGovID.gov.au.
- Only download the myGovID app from the official app stores (Google Play and the App Store). Non-genuine versions of the myGovID app may be available from other sources.
- Be cautious when clicking on hyperlinks embedded in SMS and emails. Do not click on links or attachments in emails from unknown sources.
- Keep your personal information and passwords secure - don't share your password with others, change your passwords regularly and secure your email account with multifactor authentication.
- Be aware of sharing your information, you should treat requests for personal information with caution. Never reply to emails with your password or other sensitive information – including to prospective employers.
- Install anti-virus software on all devices and set the software to automatically check for updates on a daily basis.
- Make data security an everyday priority, practice good cyber hygiene and constantly review your security habits.
- Store personal information in a secure place. Make sure electronic documents containing personal information are secure and avoid carrying your birth certificate or passport in a wallet or handbag unless you need them.
For more information visit cyber.gov.au