Summary
In 2024-2025, 42% of industry, government and critical infrastructure sector incidents reported to ASD involved compromised accounts or credentials. This means that passwords alone are no longer enough to protect your personal and business information. It is more important than ever for all Australians to add an extra layer of security by turning on phishing-resistant MFA, such as passkeys. They combine something you know (a PIN or biometrics) and something you have (a device) to grant you access to trusted digital accounts, services and platforms. Where platforms don’t support passkeys, opt for alternative two-factor authentication methods, such as an authenticator app.