21 October 2026
To further strengthen security and protect information accessed through POLAR, multi-factor authentication (MFA) will become mandatory for all clinic user accounts from 26 October 2026.
MFA adds an additional layer of security by requiring a second verification step when logging in. This helps reduce the risk of unauthorised access if usernames or passwords are compromised.
What this means for POLAR users
If you already use MFA, no action is required and you can continue logging in as usual.
Users who do not currently have MFA enabled will be prompted to enter a verification code sent to their registered email address after entering their username and password.
What practices should do now to prepare
Ahead of the transition, practices are encouraged to:
- Confirm users can access the email address linked to their POLAR account.
- Review active POLAR user accounts and ensure access is limited to current authorised staff.
- Remove or deactivate accounts for staff who have left the practice.
- Review user roles and permissions to ensure staff only have access appropriate to their role.
- Include POLAR user account management in staff onboarding and offboarding processes.
Strong user access management supports practice information security and aligns with RACGP Standards F8 and F9, which requires practices to maintain secure electronic systems and information and communication technology and patient privacy.
Regular reviews of user accounts and access permissions can help reduce the risk of unauthorised access and support privacy and security obligations.
Practices seeking guidance on managing POLAR users can refer to the POLAR User Management Guide and POLAR Walkthrough: Adding Users.
Need help?
If you need assistance accessing the email address linked to your POLAR account, review the available POLAR User Management Guide or contact the POLAR Service Desk through the POLAR Support Portal.
