The Department of Energy, Environment and Climate Action (DEECA) would like to remind users of the implementation of multi-factor authentication (MFA) on My Water and the Broker Portal from 7 am on Tuesday 2 June 2026. MFA is a process of identity confirmation that adds an extra layer of security at login. It is a standard cyber-security measure used across government and industry.
Users are asked to act now to ensure their account information is up to date to ensure continued access to services.
Once this important security update goes live, users will be required upon login to enter their username, password and a one-time verification code sent to the email address they are registered with. The code will be active for five minutes before it expires. MFA will only apply to the login step for accessing My Water and Broker Portal.
Users’ current registered email must be checked as correct and accessible by an individual user. Failure to do so could result in a lack of access to the My Water and Broker Portal platforms when needed.
To do so, users can click ‘My details’ under the user tab in My Water and the Broker Portal. It is your responsibility to ensure the registered email address is one that only you have access to.
This small check is important to avoid any delays or issues in logging in to My Water from 2 June and is particularly relevant for those users intending trade during the 7 am to 12 pm trade opening submission window on the day of the Tuesday 2 July 2026 trade openings.
The use of generic email addresses will also no longer permitted under expanded My Water Terms and Conditions and Use. Currently, the login process does not require any interaction with the email address registered to the users’ account. So even if a user can login presently, it does not mean the email address is correct for the implementation of MFA. Once MFA is live, you will need access to your registered email address in order to obtain the MFA code to access your My Water or Broker Portal account.
If your registered email is up to date, no further action is required.
Following Tuesday 2 June 2026, users should email waterregister.support@deeca.vic.gov.au or call DEECA’s Customer Contact Centre on 13 61 86 for any MFA-related login fixes.