Multi-factor authentication (MFA) adds an extra layer of security to your CreditorWatch account.
When you log in with an email address and password, MFA asks you to verify your identity using an additional verification method. This helps protect your account and business information if your password is stolen or exposed.
Note: This will be enforced starting 11 December 2026.
Why is CreditorWatch enabling MFA?
MFA provides additional protection for your CreditorWatch account.
It helps:
Reduce the risk of someone accessing your account with a stolen or exposed password.
Protect sensitive business and credit information from unauthorised access.
Add extra protection for Customer Administrators who manage users and account preferences.
What is changing?
CreditorWatch already supports MFA. This update introduces the following changes:
MFA enabled by default
MFA will be automatically enabled for users who log in with an email address and password.
MFA is mandatory for Customer Administrators.
Administrator controls
Customer Administrators can disable MFA for non-administrator users where necessary.
We recommend keeping MFA enabled for all users to help protect your account.
MFA resets
Customer Administrators can reset MFA for non-administrator users who:
Lose access to their MFA method.
Need to change their MFA method.
After an MFA reset, the user will be prompted to set up MFA again the next time they log in.
Passkey support
You can use a passkey to verify your identity on a compatible device and browser.
How to set up MFA
When prompted at login:
Follow the on-screen instructions.
Choose an available verification method.
Complete the verification steps to finish setting up MFA.
Available verification methods include:
A one-time code sent by SMS.
A code from an authenticator app.
A passkey on a compatible device and browser.
If you use your organisation's single sign-on (SSO), your organisation will continue to manage your authentication.
API authentication remains unchanged.
How to remember your browser for 30 days
Select Remember this device to avoid repeat MFA prompts in the same browser for 30 days.
You may be asked to verify your identity again if you:
Use a different browser or device.
Clear your browser cookies.
Reach the end of the 30-day period.
Only select Remember this device on a private, trusted device.
What to do if you lose access to your MFA method
If you lose access to your MFA method or need to change it, ask your Customer Administrator to reset MFA for you.
After the reset, you can set up your MFA method again the next time you log in.
If you're a Customer Administrator and need your own MFA reset, contact CreditorWatch Support (support@creditorwatch.com.au).
Keep your account secure
MFA helps reduce the risk of unauthorised access, but it's still important to:
Use a strong, unique password.
Never share your password or verification codes.
Only remember your login on private, trusted devices.