Multi-factor authentication helps you keep your accounts safe

Helps prevent unauthorised access

Even if someone knows your NetBank password, they can’t log on without completing the second verification step in the CommBank app.

Alerts you of suspicious activity

If someone tries to access your NetBank account, we’ll send a prompt to your CommBank app so you can review the logon attempt.

CommBank app

An extra layer of security for your digital banking

Download the CommBank app:

How to set up multi-factor authentication for NetBank

You'll need to download and log on to the CommBank app to start using NetBank multi-factor authentication.

  • Download the CommBank app
  • Log onto the CommBank app at least once
  • Turn on push notifications for the best experience, or approve directly in the app

How do I use multi-factor authentication?

  1. Log on to NetBank using your Client Number and Password.
  2. Confirm your logon. You will see a notification that a prompt has been sent to the CommBank app to confirm your log on. You will have 15 minutes to approve the request.
  3. Check your app. If you have push notifications enabled on your mobile device, we’ll send you a notification.  If you don’t receive the notification, open your CommBank app and look for a message asking you to confirm your logon.
  4. Confirm it's you. Check the details of the login and if it was you, select ‘Yes, this was me’ to complete your authentication.
  5. Verification complete. You are now authenticated and you will be able to use NetBank.
CommBank App alert example: "Security Alert: Did you try to log on to NetBank? Review these details.

What happens if I receive a logon notification that wasn’t me?

If you are notified of a login attempt that wasn’t you, open the notification and select ‘No, it wasn’t me’, and we’ll block that NetBank logon attempt.

We will then help you change your NetBank password to help secure your online banking.

This helps prevent someone else from accessing your online banking, even if they know your password.

CommBank App authentication check screen: "Did you try to log on to NetBank?"

What should I do if MFA still isn’t working?

To use multi-factor authentication for NetBank , check that you have:

  • Logged in to the CommBank app, using your NetBank credentials
  • Push notifications enabled on your device. Do this by going to  notifications/notification centre in your phone’s settings, locate the CommBank app and slide the toggle to ‘on’.

If you do not have push notifications enabled, you can find the multi-factor authentication message on the home screen of your CommBank app.

Trust your browser for faster NetBank logons

If you’re using your own personal device, you can trust your browser to reduce how often you need to confirm your NetBank logon in the CommBank app.


To trust your browser:

  1. Enter your client number and password on the NetBank logon screen.
  2. On the confirmation screen, tick Trust this browser.
  3. Approve the logon in the CommBank app.

Make sure you tick Trust this browser before approving the logon in the CommBank app.

The next time you log on from the same browser, you may be able to access NetBank faster without confirming your logon in the app.

We’ll still help protect your account by asking you to verify it’s you if we detect unusual activity or when your browser is no longer trusted.

CommBank App authentication check screen: "Did you try to log on to NetBank?"

FAQs for MFA

If you lose your phone, you can re-download the CommBank app onto a new mobile phone, compatible tablet or device. You'll need to receive a Netcode SMS to set up your CommBank app on your new device, so if your phone number has changed, please contact us and let us know before you get started. If this isn't an option or you can’t access the app, please contact us to confirm your identity and get help logging on.

If your lost phone, tablet or device had a digital wallet you can deregister your CommBank card(s) using the CommBank app on your new device. Tap Cards, then Go to card settings, tap Review digital wallets, where you will be able to remove any digital wallets from old devices or ones you don’t recognise by tapping delete

No. To help protect your accounts, multi-factor authentication is required for NetBank log ons.

If you’re using your own personal device, you may be able to trust your browser. This can reduce how often you need to confirm your log on in the CommBank app while the browser remains trusted. We may still ask you to verify it’s you if your browser is no longer trusted or we detect unusual activity.

You can also use the CommBank app for most everyday banking. If you’re having issues or want to discuss alternative log on options, please contact us.

Not always.

If you trust your browser, you may not need to confirm every NetBank log on from that same browser. You’ll still need to enter your client number and password each time you log on.

We may still ask you to verify it’s you if your browser is no longer trusted or we detect unusual activity. If you don’t trust the browser, you’ll be asked to complete multi-factor authentication each time you log on to NetBank.

Some third-party services such as accounting software and aggregators use screen scraping to access your NetBank data. This means they log on using your Client Number and Password, which can trigger repeated MFA prompts and cause interruptions, including being unable to refresh feeds or link your accounts.

To protect your security, you must never share your NetBank Client Number or Password with any third party. Credential sharing increases the risk of unauthorised access, fraud, and identity theft, and can result in you suffering loss.

What to do:

  • Firstly, change your password immediately if you've shared your credentials with a third-party service or are noticing unusual MFA prompts; then
  • Unsubscribe from the service after changing your password, if you're aware the service is using your NetBank credentials to access your accounts.
  • Switch to a secure alternative such as Open Banking, which allows you to share your banking data securely without sharing your login credentials.

You can make sure your notifications are turned on by finding notifications/notification centre in your phone's settings, locate the CommBank app and slide the toggle to 'on'.

If you have recently registered your device, it can sometimes take up to 24 hours before receiving MFA notifications to the mobile.

You can open the app and find the notification immediately on the home page, or message us if you cannot locate it. You don’t need to wait for a phone alert.

If you receive a CommBank app logon notification that you don’t recognise, select “No, it wasn’t” when prompted in the CommBank app and we'll block that NetBank logon attempt. We will then help you change your NetBank password to help secure your banking. This will help prevent anyone else from accessing your digital banking, even if they have your password. For your security, make sure you never share your NetBank password with anyone - including third party apps or services.

There are a few ways to resolve issues with multi-factor authentication (MFA).

  1. The CommBank app works best when it’s up to date. You can download the latest version from the App Store or Google Play. Once you’ve updated the app, log on to refresh your connection
  2. If your app is already up to date, try opening it before logging on to NetBank again
  3. Each NetBank logon sends both a push notification and an in-app notification. If you haven’t got a push notification, check your notifications are turned on in your device settings. Remember, you can always find your MFA notification on the home screen of the CommBank app.

If you’re receiving logon notifications you didn’t initiate, or you’ve been pressured to share your logon details by someone you know, this could be a sign of financial abuse. Visit CommBank Next Chapter for information and support.

  1. Remove the CommBank app from your device
  2. Reinstall the CommBank app and log on
  3. Ensure that you have a passcode set on your mobile device
  4. Restart the NetBank log on process

You’ll get an in-app notification on the home screen of the CommBank app to complete MFA. It may take some time for your MFA push notifications to sync.

If you’re still having trouble, contact us for help.

You’ll still use NetCode to approve certain transactions. Our multi-factor authentication security feature is just for logging on to NetBank.

The CommBank app has its own security features, including the option to use Face ID or fingerprint login.

FAQs for Trusting Browsers

Trusting a browser means you may not need to complete an extra security check, such as confirming your NetBank log on in the CommBank app, each time you log on from that browser. You’ll still need to enter your client number and password.

Trusting a browser can make logging on faster by reducing the number of security steps when you use a personal device regularly.

Even if you’ve chosen to trust your browser, we may still ask you to verify it’s you under certain circumstances.

This can happen if:

  • You’ve trusted more than one browser in a day, as only the most recent one stays trusted
  • Your browser settings have changed, such as clearing cookies
  • You’re using a different browser or device
  • Your browser is no longer trusted
  • We detect unusual activity

You can only trust one browser at a time. If you trust a new browser, the previously trusted browser will no longer be trusted.

You should only trust browsers on personal devices that you use regularly, such as your home computer or personal laptop. Avoid trusting browsers on public or shared devices.

You can still access NetBank as usual. If you choose not to trust a browser, you’ll be asked to verify your logon in the CommBank app each time for security.

If you still have access to the browser, you can remove the trusted status by clearing cookies in your browser settings. If you trusted a browser on a shared or public device, no longer have access to the device, or notice anything unusual, contact us immediately on 13 2221.

Trusting a browser only reduces extra security checks. You’ll still need to enter your client number and password every time you log on.

A browser is the application you use to access websites on the internet. Common browsers include Google Chrome, Safari, Mozilla Firefox, and Microsoft Edge.

When you choose to trust a browser, you’re trusting the specific browser on that device to reduce additional security checks when you log on.

Further assistance

Please contact us on 13 2221 or visit your local branch for further assistance in using NetBank multi-factor authentication.

If English isn’t your first language, the government's free translating and interpreter service can help you to communicate with us. This service is available in over 150 languages. We can arrange this service when you call us or visit us in branch.



Indigenous Customer Assistance Line (ICAL) supports Aboriginal and Torres Strait Islander customers with essential banking needs. Call 1800 700 682 Monday to Friday from 9.00am to 8.00pm and Saturday 8.00am to 2.00pm (Sydney/Melbourne time). First Nations translators are available through Language Loop; availability of languages may vary from time to time due to the availability of interpreters.

Things you should know

The CommBank app is free to download however your mobile network provider charges you for accessing data on your phone. The CommBank app is available on Android and iOS operating systems (minimum operating system version requirements may apply). Learn more at commbank.com.au/app