Your security is our priority. We use the latest technology to better protect your MyServiceNSW Account and identity information from cyber criminals.
What's a leaked password
A leaked password refers to a password that is no longer secure and secret.
It means your password and email address combination was found in an online data leak and may be compromised.
When we find leaked passwords
We check your email address and password combination against online data leaks, when you:
- log in to your account
- change your password
- reset your password.
Your privacy is protected during this security check. We do not share your information as part of this process.
Change your password to continue
Logging into your account
If your email address and password combination is found in an online data leak when you log in, you must change your password before you can continue. This protects your account and keeps your information secure.
Use a password you’ve never used anywhere else. After you have changed your password, you will be able to log in.
Changing or resetting your password
If your email address and password combination is found in an online data leak when you change or reset your password, you must create a new password before you can continue.
Set up multi-factor authentication
Multi-factor authentication (MFA) is an additional layer of protection.
Each time you log into your MyServiceNSW Account, you'll need to enter your password and either:
- enter a 6-digit code, or
- respond to a notification.
You must set up and use MFA to log in to your MyServiceNSW Account.
Service NSW has not leaked passwords
Service NSW is not responsible for leaking email address and password combinations.
We have measures in place to ensure our systems and customer information are secure. If a data breach or cyber attack were to occur, we would work closely with Cyber Security NSW, ID Support NSW and other partners to directly notify and support any customers affected.
Source or cause of leaked passwords
We cannot identify how email address and password combinations were leaked.
Causes may include a security incident by another company. Details of publicly known incidents may also be available at Have I Been Pwned. Enter your email address or phone number to find out if you have been implicated in a known breach.
Other causes may include using a computer or phone secretly infected with a virus or malware (malicious software), or logging into a website that looks genuine but is fraudulent. Find practical guidance on protecting your devices.
Keep your password secure
We cannot guarantee all leaked email and password combinations will be found. We encourage you to change your password regularly as a precaution.
Other accounts like banking, email, utilities and social media
If you use the same email address and password combination for other accounts, change your passwords for those accounts.
Cyber criminals may use leaked passwords in an attack called credential stuffing. This is when they try the same login on different websites to gain access to other accounts.
Avoid using the same password on multiple online accounts.
Support
If you need help, call us on 13 77 88 or go to a service centre.
If you need help keeping your identity and personal information safe, go to ID Support NSW or call 1800 001 040.