Terms of use

myID terms of use – glossary

Term	Definition
Accredited participant	Entities that have been accredited under section 15 of the Digital ID Act 2024.
Certificate	An electronic document, signed by the Certification Authority, which: identifies a subscriber by way of a distinguished name binds the subscriber to a key pair by specifying that the public key of that key pair contains the information required by the certificate profile.
Certificate Policy (CP)	A named set of rules applying to, and providing, policy and operational guidance on the deployment and use of a Certificate issued by a Certification Authority (CA).
Certificate store	Storage location for certificates on a computer or device.
Certification Authority (CA)	An entity that issues and digitally signs certificates using the entity’s private key.
Certification Practice Statement (CPS)	A statement of the practices that a Certification Authority (CA) employs in managing the digital Certificates it issues. This includes the practices that a Registration Authority employs in conducting registration activities on behalf of that Certification Authority. These statements will describe the PKI certification framework, mechanisms supporting the application, insurance, acceptance, usage, suspension or revocation, and expiration of digital Certificates signed by the CA, and the CA’s legal obligations, limitations and miscellaneous provisions.
Public Key Infrastructure (PKI)	The combination of hardware, software, people, policies and procedures needed to create, manage, store and distribute keys and digital Certificates based on public key cryptography.

How these terms and conditions apply

The myID Privacy Notice explains how we manage the personal information we collect.

These terms and conditions relate to how we use the myID system.

myID (previously known as myGovID) is a digital service administered by the Australian Taxation Office (ATO) as part of the Australian Government Digital ID System (AGDIS).

When you use this service, we make it available to you on the conditions of use current as at that time. These terms and conditions may change over time. Those current at a given time are published on this page.

Your use of the service must be consistent with the Digital ID Act 2024 and Digital ID Accreditation Rules. For more information, see Digital ID system.Opens in a new window

These terms of use are governed by and follow the laws for the time being in force in the Australian Capital Territory, Australia.

Our terms

Access to, and use of, the myID system is subject to these terms of use. These terms of use may change over time. The myID terms of use current at a given time are those published on this page at that time.

By accessing or using the myID service, you agree to be bound by these terms of use current at that time.

You are responsible for the security and use of your myID account and the device on which it is stored. You must comply with all security requirements and instructions provided by the ATO about your use of the myID system.

You must:

• not use your myID credential for any unlawful or improper purpose
• not disclose your myID passwords to any other person
• provide information that is true, accurate, current and complete to create your myID account and verify your identity
• always close your myID browser sessions and lock your device when not in use
• contact the myID support line if you believe the security of your myID account or myID credential has been compromised.

These terms of use form the:

• Subscriber Agreement for the myID Public Key Infrastructure (PKI)
• myID Certification Practice Statement (CPS)
• myID Certificate Policy – user (CP).

The myID CPS and CPOpens in a new window should be read in conjunction with these terms of use.

The Glossary has more information about some terms used in this document.

Organisations, participating agencies and Machine Credential Administrators (MCA) that use machine certificates to directly interact with government online services through their business software should read and understand the Terms of use – machine.Opens in a new window

myID system

The myID system includes each of the myID service, the myID credential and the myID software.

To use the myID system, you must:

• provide information that is true, accurate, current and complete to create your myID account and verify your identity – this includes personal information contained in Commonwealth or state-issued identity documents
• not use the myID system to use or create a false identity, impersonate any person or otherwise misrepresent your identity.

To the extent permitted by law, the ATO:

• provides each of those elements of the myID system ‘as is’ and without charge
• gives no express or implied warranties or makes any representation (and to the full extent permitted by law excludes all statutory warranties) for each of those elements (including its availability, security, performance or fitness for a particular purpose)
• will not be liable for any loss or damage (including special, indirect or consequential) arising from or in connection with any of those elements of the myID system or its availability, use or performance either directly or through a third-party provider.

To the extent that the ATO's liability for the myID system (or any part of it) cannot be excluded, it is limited to the resupply of the relevant goods or services, or the cost of such resupply, at the ATO's option, or otherwise limited to the minimum amount permitted by law.

myID software

The ATO makes the myID app and software (Software) available to you to use, in unaltered form, solely for use with the myID system.

You may not:

• decompile, reverse engineer, disassemble or attempt to derive the source code for the Software
• create derivative works based on the Software or modify it in any way
• distribute copies of the Software or versions of it.

You must not access the Software other than through:

• the Apple App Store
• Google Play Store
• other means approved by the ATO.

The ATO makes no guarantee that the myID software will function outside supported platforms.

You should ensure that the Software does not interfere with your systems or devices.

You must ensure your use of the Software complies with all applicable conditions of use, including third-party software licensing conditions of use, relevant laws, including local laws in any relevant foreign country if you use the Software outside Australia. Those laws may impact your eligibility to get or use a copy of the Software.

myID software uses third-party software under licence. Annexure A – Third-party licences and software contains a full listing.

You can email us for information about our Software at support@myid.gov.au.

myID service

You can access and use your myID account through the myID service. While the ATO will use reasonable efforts to rectify any issues with the myID service that it is aware of:

• the ATO makes no guarantees that the myID service, and your access to it (and your myID account), will be continuously available, uninterrupted, and fault or error free
• your access to the myID service (and your myID account) is contingent on telecommunication services and other factors beyond the ATO’s control
• the ATO may suspend or terminate access to the myID service through some or all products or to some or all users at any time.

You should take appropriate and adequate precautions to ensure that the information obtained from the myID service is free of viruses or other contamination that may interfere with or damage your systems, devices or data.

myID credential

Your myID credential is a digital certificate associated with your myID account and is returned by the myID service to the application storage on the device you use for your myID account.

You are responsible for all transactions and communications carried out using your myID credential, and for the security and use of your myID account, your myID credential and the device on which it is stored or device used to authenticate.

You must:

• not use your myID credential for any unlawful or improper purpose 
• not use your myID credential for any purpose other than to establish, verify or authenticate your identity when accessing online services of participating agencies
• not disclose the passwords for your myID account or myID credential to any other person
• not store your myID credential in a certificate store to which any other person has access, or otherwise allow, grant, permit or enable any other person to use your myID credential
• close your myID browser sessions and lock or secure your computer or device when not in use or unattended
• not undertake any screen capture, sharing or like activities that might compromise the security of your myID account or myID credential
• phone the myID support line on 1300 287 539 (select option 2, then option 2) as soon as you suspect or become aware that the security of your myID account or myID credential has been compromised. This can include if your identity documents have been disclosed without your consent or authorisation, for example as the result of a data breach incident or theft, or there is a device or record you don’t recognise under My devices in your myID app.

General

myID will collect, use, store and share your personal and sensitive information as detailed in the myID Privacy Notice. The ATO will disclose your personal and sensitive information or myID credentials to third parties if you have provided your express consent to do so, or if authorised or required by law. We may use or disclose your information to analyse, prevent, detect, manage and investigate fraudulent activity or for another purpose allowable under the Digital ID Act 2024, Digital ID Rules and Digital ID Accreditation Rules.

You acknowledge that the ATO may suspend, cancel or revoke your myID credential when it is permitted or required as described in the CPS. If you no longer wish to use the myID system, you may uninstall the app from all devices. If you choose to uninstall myID, we will manage your personal information as required by the Digital ID Act 2024 and the Archives Act 1983.

Any disputes between you and any third-party provider, including another Accredited Participant of the Digital ID System, must be resolved between you and that party.

The ATO is not responsible for any fees charged by other Accredited Participants or third-party providers. You are responsible for ensuring the installation and use of the myID system does not cause you to exceed any data usage quotas or other limitations that may apply to your internet service, device or other third-party provider.

These terms of use constitute the entire agreement between you and the ATO as administrator of the myID System. They supersede all prior communications, representations, agreements or understanding about these terms.