Multi-factor authentication

Requirements

Multi-factor authentication requires a combination of at least two factors:

• Something you know (such as a password or PIN)
• Something you have (such as a one-time code or trusted device)
• Something you are (such as a fingerprint or other biometrics)

To help protect your account, we recommend using a security token as a second factor with your e-banking Access ID and password. Security tokens are devices or apps that generate unique 6-digit codes. These codes change regularly, expire after a short amount of time, and can only be used once.

We offer the Symantec VIP Access app, also known as a soft security token, digital security token or e-token. The app is free and can be downloaded from the App Store or Google Play.

Using security tokens

To set up your security token:

1. Download the Symantec VIP Access app from the App Store or Google Play
2. Visit your local branch or call us on 1300 236 344
3. Provide your security token’s unique Credential ID number
4. We will link your security token to your e-banking account using the Credential ID

You should never share the 6-digit code generated by your security token with anyone. We will only ask you for the Credential ID of your security token so we can link it to your e-banking account.

Once set up, enter the 6-digit code any time you are prompted for a security token in e-banking. The 6-digit code can be copied to your device’s clipboard by holding down on it. You can then paste it in the security token field in e-banking.

To change your multi-factor authentication settings:

1. Select the Settings tile (found in the More menu in the Bendigo Bank app)
2. Select Multi-factor authentication

You are required to use multi-factor authentication for some e-banking services like updating your contact details and adding new Pay Anyone contacts. Mandatory options are greyed out in your multi-factor authentication settings and cannot be changed.

The Symantec VIP Access app cannot be transferred from one device to another. To set up the app on a different device, you will need to download it on that device and contact us to link it to your e-banking account. This will unlink the app on your old device so it can no longer be used with your e-banking account.

If your old device was lost or stolen and you had registered the Bendigo Bank app on it, you should also deregister it as an extra security precaution:

1. Select the Settings tile (found in the More menu in the Bendigo Bank app)
2. Select Manage devices
3. Select Deregister device

Automatic security tokens

If you are using the Bendigo Bank app, you may be able to automate your security token. This allows the Bendigo Bank app to generate and enter the 6-digit codes from your security token for you. You can register up to three devices with automatic security tokens.

Automating your security token is just as secure as manually entering the 6-digit codes. You will no longer see prompts to enter your security token, but the 6-digit code is still being entered and authenticated in the background. In this case, you have trusted your device to act as the second factor of authentication.

Before you automate your security token, please note:

• Your security token must be correctly linked to your account
• You must not discard your security token once it has been automated
• Your version of the Bendigo Bank app must be:
  • iOS – 4.6.41 or above
  • Android – 4.7.46 or above
  • You must have set up a four-digit PIN (though you can log in with either four-digit PIN or biometrics)
• Automating your security token on a device will apply the highest security settings possible, overriding your current security token settings on that device
• Your current security token settings will continue to apply when using e-banking on a web browser or the Bendigo Bank app on a device that has not been registered as an automatic security token
• Each device must be registered as an automatic security token individually

To automate your security token:

1. Log in to the Bendigo Bank app
2. Select More
3. Select Settings
4. Select Multi-factor authentication
5. Select the Automate my Security Token banner
6. Enter the 6-digit code from your security token when prompted
7. Select Register this device

You will receive a message in e-banking confirming your device has been registered.

To view the status of your automatic security tokens:

1. Select the Settings tile (found in the More menu in the Bendigo Bank app)
2. Select Manage devices

To deregister a device as an automatic security token:

1. Select the Settings tile (found in the More menu in the Bendigo Bank app)
2. Select Manage devices
3. Select Deregister device

Deregistering a device will also remove your four-digit PIN. You can still use your Access ID and password to log in to that device, or to set up four-digit PIN again:

1. Log in to the Bendigo Bank app
2. Select More
3. Select Settings
4. Select Setup four-digit PIN
5. Follow the prompts

Further assistance:

Please visit your local branch or call us on 1300 236 344 for further assistance if your security token is not working, or for help with the following:

• Linking a new security token to your e-banking account
• Checking if your current security token is correctly linked to your e-banking account
• Physical security tokens