Authenticator apps generate a random OTP and are more secure than receiving a code by SMS. Popular options include Google Authenticator, Microsoft Authenticator, Okta Verify, Authy Authenticator and LastPass Authenticator. You can set up MFA for Member Online using your existing authenticator app via the QR code or registration code in your Member Online portal.
If you don’t have an authenticator app, you can install one of the apps mentioned above, or another reputable free authenticator app, from your mobile app store. You'll also still be able to receive an OTP via SMS or voice call. For more details, read the government’s advice on MFA.
Our products and services
Retired and looking for more certainty over your returns?
Introducing CPIplus, a Pension investment option that aims to deliver a consistent and predetermined return above inflation each year.
Not available for Transition to Retirement Pensions. Though returns above inflation are predetermined annually, Hostplus can shorten the return period. Hostplus may also adjust the rate of return with at least 30 days’ notice.
Learning Hub
Try SuperSmart today
An interactive way to get financial education and tailored advice* online to help supercharge your future.
Exclusive to Hostplus members 24/7 via Member Online at no extra cost.
*Members with Term Allocated Pension, Lifetime Pension, Defined Benefit Pension, nil balances, non-standard investment options and some Maritime Contributory Accumulation members cannot access SuperSmart financial advice services.
Retirement
Retired and looking for more certainty over your returns?
Introducing CPIplus, a Pension investment option that aims to deliver a consistent and predetermined return above inflation each year.
Not available for Transition to Retirement Pensions. Though returns above inflation are predetermined annually, Hostplus can shorten the return period. Hostplus may also adjust the rate of return with at least 30 days’ notice.
Why Hostplus
Retired and looking for more certainty over your returns?
Introducing CPIplus, a Pension investment option that aims to deliver a consistent and predetermined return above inflation each year.
Not available for Transition to Retirement Pensions. Though returns above inflation are predetermined annually, Hostplus can shorten the return period. Hostplus may also adjust the rate of return with at least 30 days’ notice.
Product and fee information for advisers
Retired and looking for more certainty over your returns?
Introducing CPIplus, a Pension investment option that aims to deliver a consistent and predetermined return above inflation each year.
Not available for Transition to Retirement Pensions. Though returns above inflation are predetermined annually, Hostplus can shorten the return period. Hostplus may also adjust the rate of return with at least 30 days’ notice.
Taking steps to protect you online
All of our digital platforms come with robust security features, including multi-factor authentication, to protect your funds and personal data.
Keeping your data secure
We're committed to keeping your accounts and data safe across our digital platforms using multi-factor authentication, including:
- our Member Online, Pension Online, and SMI portals, giving members and investors 24/7 access to their accounts
- Adviser Online, through which financial advisers can access and submit client information
- the Hostplus mobile app, which lets members access their super and pension accounts anywhere, anytime.
The same controls extend to products accessed through Member Online and the mobile app, including:
- Choiceplus, our direct investment option
- SuperSmart, our digital advice platform, and
- our insurance portal where members can manage their cover.
What is multi-factor authentication?
To safeguard the security and privacy of your Hostplus details, we require multi-factor authentication (MFA) for each login. It’s one of the most effective security measures, as it requires you to provide at least two different types of verification to access your account.
What does this mean for you?
MFA requires additional information when you log in to Member Online or Pension Online, our mobile app, or other Hostplus portals.
Using our online portals
When registering to use our online portals, you’re asked to choose a password, then set up an MFA verification method. For Member Online and Pension Online, you can receive your one-time PIN (OTP), or push notification, as a key component of your MFA via the following options:
- an SMS sent directly to your mobile
- voice call authentication, with the OTP communicated in a voice call to your mobile or landline
- an authenticator app, like Google Authenticator or Okra verify, allowing you to receive an OTP even when outside mobile network coverage.
Each time you return to Member Online or Pension Online, a new OTP will be sent to you via your preferred method. You can change your OTP preference any time after logging in to your account and can register multiple options for flexibility.
Using our mobile app
For the Hostplus mobile app, you’ll receive an OTP only for your initial registration. Once registered, the app uses a secure digital certificate instead of OTP. Instead of a password, you can choose a PIN or a biometric authentication using fingerprint or face ID to log in. Your biometric information is stored only on your device and is not accessed by the app, ensuring privacy and security.
FAQs
We recommend installing the authenticator app on your mobile phone only, as it’s a personal device that’s always with you and generally less prone to malware than PCs.
You can choose to receive an OTP via SMS or voice prompt.
We require you to set up an OTP for accessing Member Online and Pension Online, and for registering for the Hostplus mobile app, because we’re committed to ensuring appropriate security standards for all our members’ data and privacy. Once registered, the mobile app provides seamless access to your account without using OTP.
Search for ‘Hostplus’ on Google Play or the Apple App Store. Click here for more details.
No. Once you complete your MFA setup, it will apply to both platforms. However, your OTP will be triggered each time you log in to web-based online portals like Member Online and Pension Online.
The service is a free security feature and we won’t charge you for the voice call or SMS. Some mobile network providers may charge fees if you’re overseas and using global roaming. We recommend using an authenticator app for OTP, as it doesn’t require a data connection and is more secure than SMS.
Yes, the OTP generated through Member Online or Pension Online will expire three minutes after it’s delivered via SMS or voice call. An OTP generated by an authenticator app will expire after 30 seconds. After an OTP expires, you’ll need to generate a new one.
Yes, if you change your mobile number, you’ll need to reset your MFA.
You can change your mobile number via the mobile app, Member Online or Pension Online.
Once you’ve changed your number, follow these steps to reset your MFA in Member Online or Pension Online:
- Go to ‘My profile’, then ‘Manage Multi-Factor Authentication’ and select ‘Reset’. You’ll then be logged out of Member/Pension Online.
- Log back in to Member/Pension Online. An MFA code will be sent to your new mobile number so you can log on securely.
Click 'Forgot password' on the Member Online or Pension Online login screen and follow the prompts to reset your password via email.
The mobile app does not use a password to log in after the initial setup.
Helpful resources
Retirement ready. Tick.
The Epic Retirement Tick is a new recognition from Chant West for super funds that meet a high standard across key retirement criteria.
Hostplus is proud to be among the first of only six funds to earn the Tick - helping members feel confident about their retirement today and into the future.
The Zenith CW Pty Ltd ABN 20 639 121 403 AFSL 226872/AFS Rep No. 1280401 (Chant West) Epic Retirement Tick issued October 2025 is solely a statement of opinion and not a recommendation in relation to making any investment decisions. The Tick is current for 12 months and subject to change at any time without notice. Ticks from previous years are for historical purposes only. Liability is not accepted, whether direct or indirect, from use of the Tick. Full details on the Tick at www.chantwest.com.au/solutions/epic-retirement-tick
