NZX Wealth Tech Investor Portal: Setting Up Multi-Factor Authentication (MFA)

Multi-Factor Authentication (MFA) safeguards your NZXWT account and the sensitive information it holds. In addition to your username and password, MFA requires you to verify your identity, providing an additional layer of security.

When signing in, you may be prompted to enter a verification code sent to you by email or SMS, or generated by your authenticator app. MFA may also be required when you update your account settings or access your account from a new device.

During account activation, you will verify your account using a code sent by email or SMS. Once signed in, you can enable an authenticator app, change your preferred MFA method and manage trusted devices via settings.

If you designate a device as trusted, MFA will not be required for subsequent sign-ins from that device unless your account details change. Signing in from an untrusted device will require MFA. Trusted devices can be removed at any time in settings, and any subsequent sign-in from a removed device will require MFA.

Following the completion and submission of a new user form to NZX, you will initially receive an email with instructions on setting up your account.

You will see the following screen when first interacting with the set up:

Click continue – you will see the following screen; enter the code you will have received to your associated email address:

You may also select Mobile Verification as your method. By clicking the ‘Select mobile verification method’ button you will instead be sent an SMS to your designated mobile number with a code; this code can be entered in the same manner as if received by email to activate your account.

Note: At this stage you can also choose to ‘Trust this device’; this will remove the requirement for MFA when using your current device in future. You will need to re-enter MFA if any of your account details change, or if you use a different device to log in to your account.

You will then need to create a password and accept terms and conditions:
​
​

Your account will now be activated.

When MFA is enabled, you will need to enter an additional code using your preferred verification method whenever logging in from a new device (i.e. a device that you have not yet noted as a ‘Trusted Device’) or making changes to your settings.

When logging in to NZXWT using a new device you will see the following screen and message:
​

Enter the code sent to your preferred method of verification as prompted.

This will allow you to log in.

Note: You may also designate the device you are using as ‘Trusted’ during this stage.

When logged in, there are several options for MFA that can be changed.

To find MFA settings, click the cogwheel found in the top right of the NZXWT view and navigate to settings:
​

You will find yourself at the Settings Menu, which appears as follows:

Your available MFA (two-factor) methods will be listed on the ‘Settings Screen’ – initially this will show the method used for account activation as ‘Verified’, and the others either ‘Unverified’, or ‘Set up required’ in the case of Authenticator App.

To set up Authenticator App as an option, click the ‘Enable’ button alongside the status:
​

You will be prompted to enter your account password; enter the password to continue:

Following the instructions provided on screen, you may set up your authenticator of choice to associate with your NZXWT account:

Once set up, you can enter the code from your chosen Authenticator App to verify and continue:

This will enable the Authenticator App as an available method of MFA for your NZXWT account.

If you wish to use the alternate of either SMS or Email, these can also be verified in the same location of the ‘Settings’ menu by clicking ‘Verify’ alongside your choice and following the instructions that will be provided:

You may change your preferred MFA method at any time.

To do so, navigate to the ‘Edit Preferences’ page from with the ‘Settings’ page through the following link:

Within the following menu, you will see a dropdown list for ‘Preferred 2FA Method’ – from this list you can select your preference of SMS, Email, or Authenticator App for your MFA method:

You will need to re-enter a code provided through your chosen method to confirm the change.

If you need to remove a device from your Trusted Devices list, this can be done in the ‘Settings’ menu.

Under the ‘Trusted Devices’ heading, click the ‘Remove’ button to the far right of the associated device you wish to remove:

You will receive a confirmation screen, following which the device will be removed; using this device to log in again will trigger the need for MFA to be entered.