Keeping your GoalsGetter account secure

Your GoalsGetter account contains important personal and financial information. Taking a few minutes to strengthen your login security is one of the simplest ways to help protect your account from unauthorised access. 

Cyber criminals increasingly target online accounts using stolen passwords, phishing emails and other scams. While we take security seriously and have safeguards in place, there are also steps you can take to help keep your account secure.

Why secure logins matter 

Most online security incidents happen because a password has been exposed, guessed or reused across multiple websites. 

Adding an extra layer of protection means that even if someone discovers your password, they are much less likely to be able to access your account. 

GoalsGetter offers two ways to add this additional protection:

1. Passkeys (recommended) 
2. Multi-Factor Authentication (MFA)

Our recommendation: Set up a passkey 

A passkey is the simplest and most secure way to access your account. 

Instead of entering a password and a verification code, you sign in using the security features already built into your device, such as:

• Face ID

• Touch ID

• Windows Hello

• Your device PIN or screen lock 

Passkeys are designed to protect against phishing attacks and can be easier to use than traditional passwords.

Benefits of a passkey 

• Faster sign-in experience

• No verification codes to enter

• Uses the security built into your device

• Strong protection against phishing attacks

• Reduces the need to remember passwords

How to set up a passkey

• Log in to GoalsGetter

• Navigate to Security Settings

• Select Set up Passkey

• Follow the prompts on your device

• Confirm the setup

• Once complete, you can use your device's security features to sign in securely
  
  

Manage where your passkeys are stored

• Open Settings

• Select Apps

• Select Default Apps

• Select Passwords & Codes

• Choose how you want your passkeys and verification codes to be stored and managed

• Once complete, you can use your device's security features to sign in securely

On an Android phone:

• Open Settings

• Select Passwords, passkeys & accounts. If this option is not shown, search Settings for Passkeys or Passwords

• Select your preferred password or passkey provider

• Choose how you want your passkeys to be stored and used

• Choose how you want your passkeys and verification codes to be stored and managed

The exact menu names may differ depending on the device manufacturer and Android version. 

Alternative option: Multi-Factor Authentication (MFA) 

If you prefer to continue signing in with a password, we strongly recommend enabling MFA. 

MFA requires two forms of verification:

1. Your password. 

2. A temporary code generated by an authenticator app on your phone.

This means that even if someone learns your password, they would also need access to your authenticator app before they could sign in.

Benefits of MFA 

• Adds an extra layer of protection

• Helps prevent unauthorised account access

• Widely used and trusted security method

   

How to set up an MFA

• Log in to GoalsGetter

• Navigate to Security Settings

• Select Set up MFA

• Download an authenticator app if you do not already have one

• Scan the QR code displayed on screen

• Enter the verification code from the app to complete setup
  
  

Managing your password 

Even if you use a passkey or MFA, it's important to maintain a strong password. 

A good password should:

• Be unique to GoalsGetter

• Not be used for other websites or apps

• Be difficult for others to guess

• Be stored securely using a password manager where possible

If you believe your password may have been compromised, change it immediately through Security Settings.

Need help? 

If you experience any issues setting up a passkey or MFA, our Client Support team is here to help. 

Contact us through the Help Centre at support@goalsgetter.co.nz or call us on 0800 303 308.