Keeping your MYOB account safe and secure is always our priority. That’s why we’re introducing a passkey sign-in technology. Passkeys will be rolled out across MYOB as a new way to sign in that’s more secure and easier to use from the 21st of April!
A passkey is an industry-standard way to sign in without typing your MYOB password.
On a device you trust, it works like this:
- You choose Sign in with a passkey.
- Your device asks you to confirm it’s you – for example with Face ID, fingerprint, or your device PIN.
- Your device and MYOB do a quick, secure check in the background to confirm the match.
Instead of you entering a password, that device proves it’s you. The details it uses to do that stay on the device – they’re never shown on screen or shared with MYOB.
If you’re on a device that doesn’t have a passkey set up, you can still sign in the usual way with your password and MFA code.
What this means for you:
- Less typing on devices with a passkey
- Less to remember
- Less hassle at sign-in, with stronger protection for your account
Most account breaches don’t start with “high‑tech hacking” – they start with someone being tricked:
- Clicking a fake login link
- Entering details on a look‑alike website
- Sharing a “quick code” with someone pretending to be support
Passkeys are designed to stop exactly these kinds of attacks:
- They only work on genuine MYOB sign-in pages and apps (for example, pages at MYOB: Business software you'll never outgrow ). If the site isn’t real, your passkey won’t be offered or won’t work.
- There’s nothing useful for scammers to see or steal. A passkey isn’t a password or code you can read, write down, or tell someone, and it stays safely on your device.
- To use your passkey, someone would need both your device and your Face ID/fingerprint/PIN. Knowing your email or password isn’t enough.
That’s why passkeys are much harder to steal or phish than passwords.
Getting started only takes a few minutes:
- Sign in to MYOB as you normally would
- Go to My Account > Security
- Look for Passkeys (or Add a passkey)
- Follow the prompts to create a passkey on your device
Once set up, you’ll be able to sign in with your passkey on supported devices and browsers, and continue to benefit from MFA protection where required.
You might be thinking, “My login works fine today.” And that’s great.
But passwords and one‑time codes are still one of the easiest ways for scammers to get into business accounts. If an attacker gets into your MYOB account, they can:
- Change the bank details on your invoices
- Send fake invoices to your clients
- Expose payroll and employee data
- Leave you spending hours (or days) untangling the mess
Passkeys reduce this risk by removing the most commonly stolen element: the password.
‘They also make things easier, day-to-day’
- Fewer support tickets or calls about forgotten passwords
- Less time spent managing access, more time spent running your business
You’ll still use a quick second step (like your authenticator app or an SMS code) after your passkey. This extra check gives your business stronger protection across your account, especially for sensitive areas like payroll and tax, and meets ATO requirements for two-factor authentication
Think of it like this:
- Passkey = strong, phishing‑resistant way to prove it’s you
- MFA step (code or app) = an extra safety layer to protect sensitive data
It’s a small extra step for a big security upgrade.
Passkeys are already being adopted by thousands of businesses and customers across Australia and New Zealand, and by major technology providers globally. They’re fast becoming the new standard for secure sign‑in.
By turning on passkeys, you’re putting your business in line with modern, best‑practice security.
Safeguard your business today – head to your My Account security page and set up your passkeys now!
