Back to Security

Understanding two-step authentication


Update on NetGuard card removal

If you register for Internet Banking from 8 April 2025, you won’t be issued with a NetGuard card. Instead, you’ll need to use the BNZ app for two-step authentication within Internet Banking. That means any reference to NetGuard cards on our website won’t apply to you.

If you already have a NetGuard card, you can continue using it until they’re removed on 31 July 2025.

Find out more


Two-step authentication protects your account with an extra layer of security in Internet Banking. The first step is your login details, and the second step confirms that it’s really you. This extra security makes it harder for others to access your accounts or collect your personal information.

Step 1: Log in to Internet Banking with your access number and password.

Step 2: When you’re prompted, authenticate with the BNZ app or with your NetGuard card.

Two-step authentication for login

You can turn off authentication for login so you only need to authenticate for specific actions.

How to turn off two-step authentication for login

Actions that require authentication

These actions always require two-step authentication, each time you do them in Internet Banking:

  • paying someone new
  • adding a payee
  • editing a payee’s account number
  • updating your contact information including email address and phone number
  • activating your eftpos, Flexi Debit Visa, or credit card
  • setting or changing your PIN on your eftpos, Flexi Debit Visa, or credit card .

These actions may require two-step authentication:

  • making international payments
  • updating personal details
  • changing your password
  • sending or replying to a message
  • joining the BNZ KiwiSaver Scheme
  • turning authentication at login on or off.

After logging in, if your first action is one from either of these lists you’ll be asked to authenticate. After that, you’ll only need to authenticate for actions from the first list.