Two critical health systems used by many New Zealanders were compromised by malicious actors in the opening months of 2026. A contributing factor in both breaches was the absence of multi-factor authentication (MFA) by the software providers.
Noted has offered MFA for some time, but has left the decision to enable it to its customers. Recognising that Noted stores highly sensitive personal information about individuals in the care of its customers, we have decided to make MFA mandatory for all users.
What does this mean for you?
If you already use MFA, you will not notice any change. If you don't, from Wednesday 18 March, you will be guided through a process to set up MFA using an authenticator app on your phone when you next log in (see setting up a Noted ID for how MFA setup works).
If you have any questions or experience issues while setting up authentication, please contact us through the app in Noted or email support@noted.com.