Business people in a meeting

Security upgrades for members

Keeping your sensitive health information safe is our top priority. We’ve introduced optional 2-step verification for myHBF and the HBF App to strengthen the security of your membership account.

What is 2-step verification?

Also known as multi-factor authentication, 2-step verification is a security measure that requires a member to complete two ‘steps’ to verify their identity to access myHBF or the HBF App. If you enable this feature, your usual password plus a one-time passcode will be required to log in to myHBF and the HBF App. If you already use biometrics to access the HBF App, a one-time passcode won’t be required.

A one-time passcode is a unique combination of numbers generated by HBF that is sent to you by SMS or email when you attempt to log in to myHBF or the HBF App. The one-time passcode can only be used once and expires five minutes after it has been generated.
The protection of your sensitive health information is our top priority. 2-step verification strengthens the security of myHBF and the HBF App and reduces the likelihood of unauthorised access to your information.
A unique one-time passcode will be required every time you log in to myHBF or the HBF App. However, if you use biometrics to access the HBF App, you’ll only need to use a one-time passcode once when 2-step verification is first enabled.
If biometrics is enabled on your device, you’ll only need to use a one-time passcode once when 2-step verification is first enabled. After that, a one-time passcode will not be required to log in to the HBF App. However, if you log in to myHBF, a one-time passcode will be required to log in.
Yes. You can use 2-step verification by linking an email address to your account. For support, get in touch with our team by calling 133 423 or visit a branch.
You should receive your one-time passcode instantly, however factors such as the quality of your internet connection and mobile signal strength may impact how long it takes to receive your one-time passcode.