The Department of Energy, Environment and Climate Action (DEECA) will implement multi-factor authentication (MFA) on My Water and the Broker Portal from Tuesday 2 June 2026. MFA adds an extra layer of security at sign-in and is a standard cyber-security measure used across government and industry.

This update is part of a suite of minor enhancements being released over 1–2 June to strengthen the security of the Victorian Water Register (VWR) and increase protection of user accounts and information. This release includes updated and expanded My Water Terms and Conditions of Use, clearer conditions for system access, and enhancements to the login process. As part of this uplift, users will be required to maintain individual user accounts, with the use of generic or shared email addresses no longer supported.

Once MFA goes live on 2 June, users will be required, during login, to enter a one-time verification code sent to the email address they are registered with.

Please note the following important messages:

• MFA will only apply to the login step for accessing My Water and Broker Portal.
• MFA verification codes will be sent to the email address linked to your My Water account.
• If you do not have access to the email address we have on record, you will not be able to access My Water once MFA is turned on.
• My Water users should check that the email address associated with their My Water account is accurate. Users’ current registered email can be checked by clicking ‘My details’ under the user tab in My Water and the Broker Portal. If required, assistance is available from waterregister.support@deeca.vic.gov.au.

With the Goulburn-to-Murray and Barmah July trade openings approaching, users are strongly encouraged to confirm they can access My Water in advance to avoid any delays or issues during the submission windows.

For any further information or assistance, please contact waterregister.support@deeca.vic.gov.au.