Info Centre

Keeping your GoalsGetter account secure

Written by Amova NZ | 04 Oct 2026

Your GoalsGetter account contains important personal and financial information. Taking a few minutes to strengthen your login security is one of the simplest ways to help protect your account from unauthorised access. 

Cyber criminals increasingly target online accounts using stolen passwords, phishing emails and other scams. While we take security seriously and have safeguards in place, there are also steps you can take to help keep your account secure.

 

Why secure logins matter 

 

Most online security incidents happen because a password has been exposed, guessed or reused across multiple websites. 

Adding an extra layer of protection means that even if someone discovers your password, they are much less likely to be able to access your account. 

GoalsGetter offers two ways to add this additional protection:

1. Passkeys (recommended) 
2. Multi-Factor Authentication (MFA)

 

Our recommendation: Set up a passkey 

A passkey is the simplest and most secure way to access your account. 

Instead of entering a password and a verification code, you sign in using the security features already built into your device, such as:

  • Face ID

  • Touch ID

  • Windows Hello

  • Your device PIN or screen lock 

Passkeys are designed to protect against phishing attacks and can be easier to use than traditional passwords.

 

Benefits of a passkey 

  • Faster sign-in experience

  • No verification codes to enter

  • Uses the security built into your device

  • Strong protection against phishing attacks

  • Reduces the need to remember passwords

 

How to set up a passkey

  • Log in to GoalsGetter

  • Navigate to Security Settings

  • Select Set up Passkey

  • Follow the prompts on your device

  • Confirm the setup

  • Once complete, you can use your device's security features to sign in securely

Manage where your passkeys are stored

 

Once complete, you can use your device's security features to sign in securely.

On an iPhone or iPad:
  • Open Settings

  • Select Apps

  • Select Default Apps

  • Select Passwords & Codes

  • Choose how you want your passkeys and verification codes to be stored and managed

  • Once complete, you can use your device's security features to sign in securely

On an Android phone:

  • Open Settings

  • Select Passwords, passkeys & accounts. If this option is not shown, search Settings for Passkeys or Passwords

  • Select your preferred password or passkey provider

  • Choose how you want your passkeys to be stored and used

  • Choose how you want your passkeys and verification codes to be stored and managed

The exact menu names may differ depending on the device manufacturer and Android version. 

 

Alternative option: Multi-Factor Authentication (MFA) 

If you prefer to continue signing in with a password, we strongly recommend enabling MFA. 

MFA requires two forms of verification:

1. Your password. 

2. A temporary code generated by an authenticator app on your phone.

This means that even if someone learns your password, they would also need access to your authenticator app before they could sign in.

 

Benefits of MFA 

  • Adds an extra layer of protection

  • Helps prevent unauthorised account access

  • Widely used and trusted security method

     

How to set up an MFA

  • Log in to GoalsGetter

  • Navigate to Security Settings

  • Select Set up MFA

  • Download an authenticator app if you do not already have one

  • Scan the QR code displayed on screen

  • Enter the verification code from the app to complete setup

Managing your password 

Even if you use a passkey or MFA, it's important to maintain a strong password. 

A good password should:

  • Be unique to GoalsGetter

  • Not be used for other websites or apps

  • Be difficult for others to guess

  • Be stored securely using a password manager where possible

If you believe your password may have been compromised, change it immediately through Security Settings.

 


Which option should I choose?


For most investors, a passkey is the recommended option. 

A passkey replaces the need for a password and verification codes by using your device's built-in security features, such as Face ID, Touch ID, Windows Hello, or your device PIN. 

If you prefer to continue signing in with a password, you should enable Multi-Factor Authentication (MFA) to add an extra layer of protection. 

In most cases, you do not need both a passkey and MFA. A passkey on its own provides a high level of security while also making sign-in faster and easier. 

 

Need help? 

 

If you experience any issues setting up a passkey or MFA, our Client Support team is here to help. 

Contact us through the Help Centre at support@goalsgetter.co.nz or call us on 0800 303 308.