• Best practices guide for the use of security credentials

    This guide will help you ensure the security of your credentials.

    What are security credentials?

    Security credentials are electronic files or software that are used for identification purposes when transacting over the internet.

    Security credentials are used to establish a secure environment for digital transactions. This provides assurance that your digital transactions with us are safe by letting us know we are interacting with the right person for each transaction.

    Modern security credentials make fraud very difficult. For someone to gain access to our digital channels posing as you, they must use a computer on which the credential is installed and they must know your password.

    Every person associated with your business, practice, or entity who wants to deal with us via digital channels on behalf of your ABN will need their own security credential.

    For more information about ensuring the security of your credentials, refer to Tax Agent Portal.

    Protecting your security credential

    The security of the information you want to protect by using an AUSkey depends on keeping your credential secure.

    Never disclose your password to anyone, including our staff or the provider of your credential.

    When deciding on a password, make sure that it is sufficiently complex. Your password must:

    • be at least eight characters long
    • contain numeric as well as alphabetic characters
    • have a mix of upper and lower case alphabetic characters
    • have at least one special character (for example, !, @, #).

    What to do if your password is compromised

    This situation should be treated with the same degree of urgency that you would give to the loss of a credit card.

    If you still have access to your AUSkey, log on to auskey.abr.gov.au and cancel your certificate online. You will then need to register for a new AUSkey.

    If you no longer have access to your AUSkey:

    • any Administrator AUSkey holder within your business can cancel your AUSkey online at auskey.abr.gov.au 
    • if you are an Administrator AUSkey holder, and there are no other Administrator AUSkey holders within your business, call 1300 AUSkey (1300 287 539) to have your AUSkey cancelled.

    What to do if your security credential has expired

    Auskey holders 

    As long as you use your AUSkey at least once each year, it will not expire.  If your AUSkey does expire, you must register for a new one.  You can check your AUSkey expiry date at auskey.abr.gov.au.

Relying on our information - our commitment to you

We are committed to providing you with advice and guidance you can rely on, so we make every effort to ensure that what we give you is correct.

If you follow our advice or guidance and it turns out to be incorrect, or it is misleading and you make a mistake as a result, we will take that into account when determining what action, if any, we should take.

Some of the advice and guidance on this website applies to a specific financial year. This is clearly marked. Make sure you have the information for the right year before making decisions based on that information.

If you feel that our advice and guidance does not fully cover your circumstances, or you are unsure how it applies to you, contact us or seek professional advice.


© Australian Taxation Office for the Commonwealth of Australia

You are free to copy, adapt, modify, transmit and distribute this material as you wish (but not in any way that suggests the ATO or the Commonwealth endorses you or any of your services or products).