← All work
AustralianSuper
Approve website login with the app
Stronger security usually means more friction. This work turned the app members already trusted into the way they prove it’s really them when logging in on the website.
The 20-second version
My roleLead UX Designer
- Portal login needed stronger security, without adding friction for members.
- Members start logging in on the website, then approve the request in the app with their PIN or biometrics.
- By June 2025, 2.1M members were enabled for login MFA and 95% of app users had set up a trusted device.
The opportunity
Stronger security without the friction
Members need secure access to the Member Portal, but extra security shouldn’t mean extra hassle. The idea was to use the app members already trust to confirm it’s really them.
- Make portal login more secure
- Rely less on passwords alone
- Use the app to confirm who’s logging in
Who it’s for: anyone logging into the Member Portal, especially members who already use the app.
The journey
Start on the web, approve on the phone
- Start in the portalEnter login details
- Get a prompt in the appThe app asks if it’s really them
- ApproveWith a PIN or biometrics
- They’re inLogged in securely
Control“Are you logging in to your account on the website?” with a clear Deny and Allow. The member decides, every time.
Public record
A clear move to cross-channel authentication
- Oct 2024Members can use the app to authenticate Member Portal access. Public messaging stressed balancing stronger security with convenience.
- 21 May 2025Login MFA rolls out, with 6-digit codes and trusted devices.
- 30 Jun 20252.1M members enabled for login MFA, and 95% of app users had set up a trusted device.
Framed from public AustralianSuper statements and capability updates.
Why it mattered
Security working with convenience
- Added a second check: the member’s own phone
- Let security work with convenience, not against it
- Made app features like PIN and biometrics more valuable
- Laid the groundwork for future login improvements