Frequently asked questions

Frequently asked questions

Overview

Answers to frequently asked questions about registering for our online services and online security credentials.

Dealing with us securely

If you want to use our online services you'll need either:

  • a secure login (if you're an individual managing your personal tax and super affairs)
  • an AUSkey (if you are running a business or are a tax professional).

This is to ensure that the security and privacy of your personal information is protected, particularly from unauthorised people making transactions on your behalf.

We use security credentials to establish a secure environment for online transactions. This provides you with assurance that your online transactions with us are safe, and lets us know we are interacting with the right person for each transaction.

Security credentials are electronic files and/or software which are used for identification purposes when transacting over the internet.

Modern security credentials make fraud very difficult. For someone to gain access to our online services by impersonating you, they would have to be using a computer on which the credential is installed and/or they would have to know your password.

Anyone associated with your business, practice, or entity must have their own AUSkey if they are dealing with us online on behalf of your Australian business number.

To deal with us securely online, you will need to:

  • Register for a secure login as an individual
  • Register for an AUSkey as a business or tax professional.

Attention icon

Already registered? Login to our online services.

Direction icon

Find out more about ensuring your online security.

Individuals

Password

I don't have a password. How do I register to use your online services?

I forgot my password? What should I do?

Are there any guidelines to help create a password?

Can I change my password?

What does the indicator next to the password field mean?

What should I do if I get the error message 'The confirm password does not match with your password'?

Will my password expire?

Why do I get an error message when trying to log in using my TFN and password?

Tax file number (TFN), name and date of birth

What if I don't know my TFN?

Can I still access your online services if I don't have a TFN?

Can I access your online services if I only have one name?

Why do I get an error message trying to log in using my name?

Why do I get an error message trying to log in using my date of birth?

CAPTCHA code

What is a CAPTCHA code and why is it used?

I can't read the CAPTCHA code. What can I do?

Shared secrets

What is a shared secret?

What is a notice of assessment?

Why do I get an error message when using a notice of assessment as a shared secret?

What is a PAYG payment summary?

What is a dividend investment number?

What is a Centrelink payment summary?

Which bank account details do I need?

Which superannuation account details do I need?

Why did I receive a message stating I am unable to verify?

Other

I have received a lockout message. What does this mean?

Why has my session expired?

If there are issues with the system where can I find more information?

Business and tax professionals

General

What is an AUSkey?

What are the different types of AUSkeys?

What ATO online services can I access with AUSkey?

Do I need an AUSkey to use Electronic Lodgment Service (ELS)?

Registration

How do I register for an AUSkey?

How do I register my staff for an AUSkey?

Where can I get assistance if my organisation wants to install an AUSkey on a network or server?

Permissions

I have installed the AUSkey software but can't access the portals. What should I do?

I am a new standard AUSkey holder but can't access any ATO online services. What should I do?

Once I have registered and installed my AUSkey, can I begin using ATO online services immediately?

Where can I find more information on the permissions Administrator and Standard AUSkey holders receive?

Technical information

What operating systems and browsers are supported by AUSkey?

Where can I get AUSkey technical support?

Change of details

What should I do if I change my name?

What should I do if my entity's legal name changes?

What should I do if my entity's legal name changes but ABN remains the same?

What should I do if my entity's legal name and ABN changes?

What should I do when other details about me or my business change?

What happens to my AUSkey when I cancel my ABN?

Individuals

Password

I don't have a password. How do I register to use your online services?

In order to manage your personal tax and super affairs as an individual you will need to register for a secure login and create a password.

To register for a secure login you will be asked questions about your identity. The answers you provide will be checked against our records to confirm your identity.

Direction icon

Learn more registering for a secure login.

I forgot my password? What should I do?

We cannot reset, change or retrieve your password. It has been encrypted for your security.

If you have forgotten your password, you must complete the registration process again, including verifying your identity to create a new password (as a security precaution).

Direction icon

Register for a new password

Are there any guidelines to help create a password?

Your password must be a minimum length of eight characters and must contain at least one of the following and cannot match any of the last eight (8) passwords used:

  • Uppercase characters (A-Z)
  • Lowercase characters (a-z)
  • One number (0-9) or special character (#,$,!,%,@)

Can I change my password?

You can change your password after you have logged into online services for individuals.

To do this, select the 'Change password' link above the Logout button. Your new password must meet the guidelines for creating a password.

Your new password cannot match any of the last eight passwords used.

What does the indicator next to the password field mean?

This is a password strength bar indicator. It indicates whether your password meets the required security requirements.

A password won't be accepted unless the indicator displays 'strong'. This means the password you have created is difficult to detect by both humans and computer programs and is not easily guessed.

What should I do if I get the error message 'The confirm password does not match with your password'?

Your password and confirm password must match. Ensure you enter the same password in both the 'Password' and 'Confirm password' fields. The passwords must be in correct format according to the tips box on the right-hand side of the page.

Will my password expire?

No, your password will not expire. To limit the possibility of someone discovering your password, we recommend you change your password every three months.

To change your password, see Can I change my password?

Why do I get an error message when trying to log in using my TFN and password?

You have provided an incorrect TFN or password while trying to login. We only allow three attempts before your account is locked for an hour - make sure you are entering the correct details. If you have forgotten your password see I forgot my password? What should I do?

Attention icon

Remember to keep your TFN and password safe.

Tax file number (TFN), name and date of birth

What if I don't know my TFN?

You can find your TFN on:

  • your income tax notice of assessment (NOA)
  • correspondence we have sent you
  • a payment summary - for example, from your employer
  • your superannuation member contribution statement.

If you have a tax agent, you can ask them for your TFN.

Direction icon

More information on How to find your TFN.

Can I access your online services if I don't have a TFN?

Your TFN is essential to creating a secure login for our online services. If you do not have a TFN you can apply for one either:

  • by mail - You will need to complete a paper Tax file number - application or enquiry for individuals (NAT 1432) form. You can get a copy of this form:
  • from online ordering
  • by phoning 1300 720 092 24 hours a day, 7 days a week
  • from one of our shopfronts or selected newsagents
  • by asking for one from Centrelink or the Department of Veterans' Affairs if you are applying for a government benefit or pension.

The form must be accompanied by original documents that prove your identity.

Your TFN will not be processed without the necessary documents. A full list of acceptable documents is provided in the instructions to the form.
or

Online - If you are an Australian citizen 16 years old or older and able to attend an interview at one of the participating Australia Post retail outlets, you can apply for a TFN on the web.

Customers should receive their TFN, within 28 days of making the application. 

Direction icon

For more information about applying for a TFN, refer to Tax file number - application or enquiry for individuals.

Can I access your online services if I only have one name?

If you are known to us by one name (for example, Cher), you should enter this name in the family name field and leave the first given name field blank.

Why do I get an error message when trying to log in using my name?

If you have specified a name that is different to what you have previously reported to us, we will not be able to verify your identity.

If the name you are attempting to use is resulting in an error, refer to recent letters we may have sent you to check the name you are known to us by.

We only allow three attempts before your account is locked for one hour. You may need to update your details with us so you can register successfully.

Direction icon

If you need to update/check your details, phone 13 28 61 then press 5, between 8.00am and 6.00pm Monday to Friday to speak with a customer service representative.

Why do I get an error message when trying to log in using my date of birth?

If you have specified a date of birth that is different to what you have previously reported to us, we will not be able to verify your identity.

We only allow three attempts before your account is locked for one hour. You may need to update your details with us so you can register successfully.

Direction icon

If you need to update/check your details, phone 13 28 61 then press 5, between 8.00am and 6.00pm Monday to Friday to speak with a customer service representative.

CAPTCHA code

What is a CAPTCHA code and why is it used?

CAPTCHA code

The image above is called a CAPTCHA code. We use it as a security test to ensure that information is generated by a person. It is a precaution to protect you and us when using web systems.

I can't read the CAPTCHA code. What can I do?

You can either refresh the image to see a new one or listen to the audio version.

On the right-hand side of the CAPTCHA image there are two buttons - a refresh button and an audio button. The refresh button generates a new image while the audio button will read out the code. When using the audio feature ensure your audio listening device is connected and working.

Shared secrets

What is a shared secret?

During the registration process we ask you to provide information to answer two shared secrets. These shared secrets help prove your identity before we allow you to use our online services.

Shared secret information is specific personal information relating to you that is provided to us by either yourself or by certain organisations and institutions.

The details you enter will need to match our records. These can be details from:

  • a notice of assessment (NOA) (issued within the last five financial years)
  • bank account details (interest bearing investment account from the last two financial years or the account provided to us for income tax refunds)
  • a PAYG payment summary (provided by your employer, from either of last two financial years)
  • a dividends statement (from either of the last two financial years)
  • a Centrelink payment summary (from either of the last two financial years)
  • a superannuation account member contribution statement (from any of the last five financial years).

Only shared secrets where we have information available for you will be visible for selection. Some shared secret information is provided to us progressively by information providers (for example, a PAYG payment summary from your employer) throughout the income year, with most available by mid-August.

What is a notice of assessment?

A notice of assessment (NOA) displays your tax refund or tax owing on your taxable income. You receive a NOA from us after you've lodged your tax return. You need a NOA issued within any of the last five financial years.

Direction icon

View an example of a notice of assessment

Why do I get an error message when using a notice of assessment (NOA) as a shared secret?

After an income tax return is processed, data from the NOA is uploaded weekly for online registration use. If you have specified information from a recent NOA and you received an error you can try a NOA from an earlier year, as the most recent NOA information may not be available yet.

You can use details for assessment notices issued within the last five financial years.

What is a PAYG payment summary?

Your PAYG payment summary (formerly known as a group certificate) is provided to you by your employer at the end of each financial year.

A PAYG payment summary shows your total taxable income for the financial year and the tax your employer withheld.

If you have specified information from a recent PAYG payment summary and you received an error you can try a payment summary from an earlier year, as the most recent payment summary information may not have been provided by your employer.

You can use a payment summary received from the last two financial years.

What is a dividend investment number?

A dividend investment number will appear on any dividend statement you may have received. A dividend statement outlines the distribution of profits from investments in shares you hold. You will need one of your dividend investment numbers valid from any of the last two financial years.

What is a Centrelink payment summary?

A Centrelink payment summary outlines your total taxable benefits amount issued from Centrelink for the financial year. You will need one of your Centrelink payment summaries from any of the last two financial years.

Which bank account details do I need?

You can use any interest bearing investment account from the last two financial years. Do not use your mortgage offset account or everyday account. Your bank reports this information to us by the 15th August each year.

You can also use bank account details that may have been provided to us when lodging your income tax return for refund purposes.

If you use a registered tax agent, and they receive the refund on your behalf, the bank details reported to us may be those belonging to your tax agent.

Direction icon

If you need to update/check your bank details phone 13 28 61 then press 5, between 8.00am and 6.00pm Monday to Friday to speak with a customer service representative.

Which superannuation account details do I need?

You can generally use details from any of your super account member contribution statements you have received from your fund within the last five years.

However, sometimes the member account number reported to us may not match the member number or account number reported on your statement. If this occurs, you will need to use one of the other shared secrets to register.

For example, for Commonwealth public service schemes (CSS and PSS), the Australian Government service number on your statement is not the account number reported to us.

Why did I receive a message stating I am unable to verify?

This means we are unable to verify your identity online. You will need to phone us on 13 28 61 then press 5, between 8.00am and 6.00pm, Monday to Friday.

Other

I have received a lockout message. What does this mean?

You have been locked out of the system because you have failed three attempts to provide your correct details. You must ensure that you are entering the correct details as you have previously reported them to us. We only allow three attempts before your account is locked for one hour for security reasons.

We can help you to update your details with us so you can successfully register to use our online services, but we cannot unlock your account or reset your password during this one hour period. You must wait one hour before attempting to establish your identity again.

Direction icon

If you need to update/check your details phone 13 28 61, then press 5, between 8.00am and 6.00pm Monday to Friday to speak with a customer service representative.

Why has my session expired?

Your session will expire if your session remains inactive for 20 minutes. Close your web browser window and log in again.

If there are issues with the system where can I find more information?

From time to time we will undertake scheduled maintenance on our online services which may impact on your ability to register. For details about system availability, we recommend you regularly check system maintenance and issues.

Business and tax professionals

General

What is an AUSkey?

An AUSkey is a single key to access government online services. You can use it to log in to ATO online services such as the portals and the Australian Business Register (abr.gov.au). You will also be able to use it to lodge reports directly to the ATO through Standard Business Reporting (SBR) enabled software.

If your business has an Australian business number (ABN), you are eligible to register for AUSkeys.

For more information about AUSkey visit abr.gov.au/auskey

What are the different types of AUSkeys?

There are two types of AUSkey:

  • Administrator AUSkeys, and
  • Standard AUSkeys.

A third type of AUSkey is also available (Device AUSkey) however it can only be used when lodging through the SBR-enabled software.

Administrator AUSkey

Administrator AUSkey holders have:

  • automatic access to the portals
  • an unrestricted ability to lodge to us on behalf of their ABN through the electronic commerce interface (ECI) and SBR-enabled software
  • the ability to view and update the business's ABN details at abr.gov.au

They can also access online services of other government agencies that have adopted AUSkey as their security credential.

The first AUSkey holder for the business must be nominated by someone listed as an associate of the business on the Australian Business Register (ABR). This is done via the AUSkey website at abr.gov.au/auskey. They receive an Administrator AUSkey.

From this point on, there is no need to involve associates in the day to day management of AUSkeys within the business. Any AUSkey Administrator can log in to abr.gov.au/auskey and register other people in the business for an AUSkey.

Standard AUSkey

In contrast to Administrator AUSkey holders, Standard AUSkey holders must have their access to the portals activated before they can start using them. They can be assigned full access or limited to particular functions that are appropriate to their role. These permissions are assigned by an Administrator AUSkey holder using Online Access Manager in the portals.

Standard AUSkey holders also have automatic ability to lodge TFN declarations and PAYGW payment summaries through SBR-enabled software (this permission can be removed in Online Access Manager if required). Other SBR-enabled lodgments are available subject to the permissions set.

Standard AUSkey holders have unrestricted access for lodgment purposes through the electronic commerce interface (ECI).

Standard AUSkey holders cannot log in to the ABR (abr.gov.au).

Device AUSkey

A Device AUSkey is specifically designed to allow interactions between business and agencies where individual authentication is not required. It is ideal for businesses wanting to automate their transactions. They can only be used for lodgment through the SBR channel and are not accepted by any of the ATO's other online channels (for example, portals, ECI) or by the ABR.

Direction icon

For more information about the types of AUSkey and what you can use them for in government online services and SBR-enabled software visit abr.gov.au/auskey

What ATO online services can I access with AUSkey?

AUSkey will be accepted for log in to the Business, BAS Agent and Tax Agent Portals and for submission of reports through the electronic commerce interface (ECI) and Standard Business Reporting (SBR). Businesses will also be able to log in to the ABR using an Administrator AUSkey.

Do I need an AUSkey to use Electronic Lodgment Service (ELS)?

No. You do not need an AUSkey to use the electronic lodgment service (ELS).

Registration

How do I register for an AUSkey?

To register for an AUSkey:

If you are registering for the first AUSkey in the business, you will need someone listed as an associate of the business on the Australian Business Register to complete the form.

They will nominate the first AUSkey holder for the business. This person will receive an Administrator AUSkey.

The Administrator AUSkey holder can then log in to abr.gov.au/auskey and register other people in the business for AUSkeys.

If there are already other AUSkey holders in the business, you should approach your administrator about getting an AUSkey.

How do I register my staff for an AUSkey?

Once the first Administrator AUSkey is established in the business, they can register other people in the business for AUSkeys through the AUSkey website.

Direction icon

If you have an Administrator AUSkey, go to abr.gov.au/auskey and log in.

Administrator AUSkey holders can register for other AUSkeys one at a time, or use the bulk registration option to register for up to 500 Standard AUSkeys in a single transaction. This is achieved by uploading the registration details in a CSV (comma separated values) file. Go to abr.gov.au/auskey for more information.

Where can I get assistance if my organisation wants to install an AUSkey on a network or server?

AUSkey is compatible with organisations that operate using networks and servers. Administrator and Standard AUSkeys are automatically stored under your current login profile.

Check with your system administrator for information on what kind of profiles your network uses.

You may need to contact your IT systems administrator if you have limited access to download or install software on your computer or server.

For technical assistance when registering for an AUSkey using different computer and network setups, visit abr.gov.au/auskey

Permissions

I have installed the AUSkey software but can't access the portals. What should I do?

Installing an AUSkey is a two step process. After you have installed the AUSkey software, you will need to download your AUSkey. For instructions, refer to the email you received when registering for your AUSkey.

I am a new standard AUSkey holder but can't access any ATO online services. What should I do?

You need your administrator AUSkey holder to activate your portal access and set up your permissions before you can access our online services. First log in to the portal (so our system recognises your AUSkey) and then notify your administrator that you require your permissions to be set. Your administrator will then be able to log in to the portal and use Online Access Manager to manage your permissions.

Once I have registered and installed my AUSkey, can I begin using your online services immediately?

New to online services

Administrator AUSkey holders may begin using their AUSkey immediately with our online services.

Standard AUSkey holders will need to link their AUSkey to our systems by logging in to one of our portals. This creates a record of the AUSkey in our systems and an Administrator AUSkey holder is then able to activate your portal access (and set permissions if appropriate) using Online Access Manager.

For information about how to link your AUSkey to our system visit ato.gov.au/auskey

What permissions do Administrator and Standard AUSkey holders receive?

Access to ATO online services will operate in these ways:

  • Administrator AUSkeys
    • Unrestricted access in the portals, including the ability to set Standard AUSkey holder permissions in Online Access Manager.
    • Unrestricted lodgment through the electronic commerce interface (ECI).
    • Unrestricted ability to report to us through SBR-enabled software.
    • View and update your business details in the Australian Business Register (ABR).
  • Standard AUSkeys
    • Ability to view business information and act on behalf of the business in the portals, restricted subject to permissions set in Online Access Manager.
    • Automatic ability to lodge TFN declarations and PAYGW payment summaries through SBR-enabled software (this permission can be removed in Online Access manager if required). Other SBR lodgments are available subject to permissions.
    • Unrestricted lodgment through the electronic commerce interface (ECI).
    • No access to the Australian Business Register.
  • Other agency online services and AUSkey
    • AUSkey holders may have access to other agency online services.
    • Contact the agencies you deal with for advice on what access AUSkeys holders have in their systems.

For more information and support in registering and managing your AUSkey, visit abr.gov.au/auskey

Technical information

What operating systems and browsers are supported by AUSkey?

AUSkey supports a wide range of operating systems and browsers.

Where can I get AUSkey technical support?

For AUSkey technical support visit the Australian Business Register website.

Change of details

What should I do if I change my name?

If you change your legal name, you will need to register for a new AUSkey.

You'll also need to update your name on the Australian Business Register if you are recorded as an associate against your ABN's record.

For more information visit the Australian Business Register.

What should I do if my entity's legal name changes?

If you change your entities legal name, you may need to cancel your ABN and apply for a new one. Check if you need to cancel your ABN.

You'll also need to update your details on the Australian Business Register.

For more information visit the Australian Business Register.

What should I do if my entity's legal name changes but ABN remains the same?

You will need to:

What should I do if my entity's legal name and ABN changes?

You will need to cancel your ABN.

As soon as you cancel your current ABN, your AUSkey will also be cancelled.

You will need to register for a new ABN before you can apply to register to use our online services.

What should I do when other details about me or my business change?

You can view and update a range of personal and business details in the portal, including but not limited to:

  • trading names
  • postal address
  • business address
  • email address
  • contact details
  • associates
  • tax agent details
  • registrations
  • financial institution details.

It's important to update them as soon as they change as we use these details to communicate important messages to you.

What happens to my AUSkey when I cancel my ABN?

As soon as you cancel your current ABN, your AUSkey will also be cancelled. To continue dealing with us online on behalf of another entity, you will need to register for an AUSkey.

Contact us

If our online information doesn't answer your question, contact us by phone.

Last Modified: Tuesday, 21 May 2013


Our commitment to you

We are committed to providing you with accurate, consistent and clear information to help you understand your rights and entitlements and meet your obligations.

If you follow our information and it turns out to be incorrect, or it is misleading and you make a mistake as a result, we will take that into account when determining what action, if any, we should take.

Some of the information on this website applies to a specific financial year. This is clearly marked. Make sure you have the information for the right year before making decisions based on that information.

If you feel that our information does not fully cover your circumstances, or you are unsure how it applies to you, contact us or seek professional advice.

Copyright

© Australian Taxation Office for the Commonwealth of Australia

You are free to copy, adapt, modify, transmit and distribute this material as you wish (but not in any way that suggests the ATO or the Commonwealth endorses you or any of your services or products)