Two-factor authentication and the RIW System

Two-factor authentication (2FA) is used to improve the security of your RIW account. It requires you to produce a combination of your RIW System username and password, and one of the following authentication methods:

  • Email security code
  • SMS security code
  • Authenticator App security code

You will need to authenticate your profile every day you log in to your account, or more frequently if using in-private or incognito browsing.

For 2FA to work effectively, ensure your email and mobile phone number is always up to date in the RIW System. If you are an Assessor, you can update your details in myRIW. 

This instruction applies to the following RIW System User Roles: 

  • Advanced Project Admin
  • Assessor (note: only SMS and email authentication methods are available)
  • Employer Admin
  • Employer Admin - No Payment
  • Employer Admin - Read Only
  • Helpdesk
  • Medical Provider 
  • Network Manager
  • Network Manager - Read Only
  • Project Admin
  • Site Admin
  • Training Provider


Go to and enter your Username and Password.

Click Login.


Choose an authentication option. In the example below, all verification methods are available. If you only have an email address on your account, only an email option will be available.

If you have not set up the Authenticator App, refer to How set up the Authenticator App.

It may take up to a few minutes for your security code to arrive. Try authenticating with an alternative method if you do not receive your code.

TIP! If sending the security code to your email, try looking in your junk mail.


Enter the security code delivered to your device and click Login.

Check out our tips and resolution steps if you haven't received your two-factor authentication security code.

Article Link:

Did you find it helpful? Yes No

Send feedback
Sorry we couldn't be helpful. Help us improve this article with your feedback.