Go to content

Multi-factor authentication

Multi-factor authentication (MFA) is a security process that uses at least two methods of verifying the identity of people accessing digital information.

Legal Aid NSW has implemented MFA to reduce the risk of unauthorised access to sensitive client data in our external systems. Users will need to enter an SMS code as well as their username and password when logging into Grants Online, the Panels Application website and our Learning Management System.

Still need help? Call the Legal Aid NSW Service Desk on (02) 9219 5999 or email: servicedesk@legalaid.nsw.gov.au

  1. How does MFA work?

    After entering your username and password, a One Time Passcode (OTP) is sent to your registered mobile phone number by SMS. When you enter the code into the login screen correctly, you’ll be logged into the system as usual.

    See the following tip sheets for more detailed instructions:

    Tip sheet – MFA for Grants Online
    Tip sheet – MFA for Panels
    Tip sheet – MFA for LMS

  2. Why do we have to use MFA?

    Legal Aid NSW needs to reduce the risk of unauthorised access to sensitive client data in our external systems. The use of MFA will add an extra layer of protection in case usernames or passwords have been compromised in some way. This is particularly important due to the prevalence of threats such as malware, email phishing and insecure password practices.

  3. What is an OTP?

    OTP is an abbreviation for One Time Passcode.  This is the six digit number that is sent to your phone by SMS in order to verify your identity as you’re logging in.

  4. How long do I have to enter the passcode?

    You’ll have about five minutes to enter the passcode after the SMS is sent to your phone. If you miss the One Time Passcode (OTP) you can request another one by clicking on Resend OTP. If you’re timed out you’ll be taken back to the login screen to start again.

  5. What happens if I enter the passcode incorrectly?

    A message on screen will let you know if you’ve entered the code incorrectly.  You can try again if you’ve made a mistake, or just request a new One Time Passcode (OTP) by clicking Resend OTP.

  6. How many times can I request a new passcode?

    If you haven’t entered the One Time Passcode (OTP) correctly and you’ve requested a new OTP two or three times, you’ll be taken back to the login screen.  Start again with your username and password and be sure to enter the passcode correctly when you receive it.

  7. I didn’t receive an SMS with the passcode. What should I do?

    If you don’t see an SMS with the passcode on your mobile phone, you can try requesting a new One Time Passcode (OTP).  If you still don’t receive the SMS, it may be because we don’t have your correct mobile phone number recorded. Use the following instructions depending upon which system you’re trying to access.

    Grants Online users: Check your details on Grants Online and update the information if necessary. If you still can’t receive a passcode, contact the Legal Aid NSW Service Desk for help.

    Learning Management System users:  Contact the Legal Aid NSW Service Desk to add or update your mobile phone number.

  8. Why can I sometimes log in without using a passcode?

    To make it easier for users who log in frequently during the day, we don’t require MFA for repeated logins within a short time period.  If you haven’t logged in for several hours, you’ll need to reauthenticate with a passcode.

  9. I don’t have my phone with me. How can I log in?

    You must have your mobile phone with you whenever you’re logging in to a Legal Aid NSW system, otherwise you won’t be able to access and enter the One Time Passcode.

  10. My phone number has changed. How do I get the code sent to my new number?

    Grants Online users: Update your details in Grants Online.

    Learning Management System users:  Contact the Legal Aid NSW Service Desk to update your mobile phone number.

  11. I have someone else’s phone number recorded against my registration. How can I get the code?

    You must have your own mobile phone number recorded in your details. You’ll need access to that phone whenever you’re logging in to a Legal Aid NSW system.

  12. I don’t have my own mobile phone. How can I log in?

    You won’t be able to access Legal Aid NSW systems without receiving a passcode via SMS.  Please contact the Legal Aid NSW Service Desk to discuss your situation.

  13. I share a username and password to access Grants Online so the code is going to someone else’s phone. How can I log in?

    Sharing login details is not allowed.  It is a breach of the Terms and conditions of use of Grants Online. Each user must have their own individual registration. Ask your firm’s Grants Online administrator to contact the Legal Aid NSW Service Desk to arrange your registration, or contact the Service Desk yourself.