The new Ahpra portal is secured by multifactor authentication (MFA) and is the new way to manage all aspects of your registration. 

MFA is a security process that requires users to verify their identity using two or more methods before gaining access to an account. 

For Ahpra, this means entering your username and password and then confirming your identity through a second factor—an authenticator app—which generates secure, time-based codes on your mobile device. 

This method is more secure than SMS-based authentication, which can be vulnerable to interception or SIM-swapping attacks. 

Authenticator apps work offline and are tied directly to your device, offering stronger protection and reliability.

Setting up MFA is a vital step in protecting your personal information and registration details. 

As a registered health practitioner, you have sensitive data on your Ahpra account that must be safeguarded against unauthorised access. 

MFA adds an extra layer of security beyond your password, making it significantly harder for malicious actors to compromise your account. 

By enabling MFA, you’re helping to ensure the integrity of your registration and the safety of your professional information. It’s a simple but powerful way to protect your identity and maintain trust in the systems that support your practice. 

How to get started 

Before you renew, you will need to link an authenticator app to your portal. This app generates a secure one-time six-digit code. 

We recommend using the Google Authenticator app because it’s free, it works on Android and iPhone and it’s the most compatible with our operating system. 

You can download Google Authenticator to your phone from the App Store or Google Play. 

Beware of apps that charge a fee. Every time you log in to the portal, you’ll enter your username and password alongside the six-digit code from the app. 

If you already know your username and password, you can log in now and link the MFA. If you’re not sure what your username is, feel free to wait. 

We will send out an email with your username before you need to renew. 

If you share your email account with someone else, such as your partner, or use a group email such as ‘admin@clinic.com.au’ then you will need to change it to an email that is unique to you when you first log in. 

There’s information available on the Ahpra portal help centre on how to do this. 

Tips and tricks 

You can find information on how to log in to your portal and link your MFA through the help centre on the Ahpra website. 

The help centre includes guides and videos on setting up your portal as well as how to use MFA by linking an authenticator app. 

Don’t delete the app once you have linked it. You will need a unique six-digit code from it every time you log in. 

When you’re setting up your portal for the first time, you will need to use a laptop or desktop computer as well as a mobile phone to download the Google authenticator app.

If you get stuck or don’t have the required devices, try the troubleshooting tips or use the portal help centre chatbot. 

You can also send a web enquiry to Ahpra’s customer service team or call them on 1300 419 495 and they can walk you through the process.