Rest App Frequently Asked Questions

Our app is available from the App Store® and Google Play™ . Just search for “Rest App” . 

Yes. The app uses best practice security features to help ensure your personal information cannot be accessed by other sources.   

Having both your email and mobile connected to your account allows us to verify you with multi-factor authentication which helps  protect your account from unauthorised access.  

Multi-factor authentication (MFA) gives you stronger protection against cyber criminals. MFA is a security method that requires you to prove your identity using two or more different factors before you can access an account, system or device.  

These factors fall into three categories: 

• Something you know (e.g. a PIN, or passphrase) 
• Something you have (e.g. authenticator app, passkey, physical security key or SMS) 
• Something you are (e.g. a fingerprint or facial recognition) 

Biometrics are physical or behavioural characteristics that can be used to identify or verify a person. Basically, it’s using something that recognises you, instead of something you know (like a password). Some examples are fingerprint, facial recognition and voice recognition.  

Passkeys are a secure and simple way to access your account. They are a safer and easier alternative to passwords. They’re stored securely on your device (like your phone or computer) and protected by something like your fingerprint, face, or PIN.  Passkeys are phishing-resistant and more secure than traditional passwords. 

Yes. Passkeys offer enhanced protection against phishing and unauthorised access. They’re a cybersecurity best practice for the superannuation industry and introducing them to the Rest App is part of Rest’s commitment to keeping your super secure.  

Yes. If your devices are connected to the same cloud account (e.g. iCloud, Google, or Microsoft), your passkeys can sync securely across them. 

Yes. Passkeys are designed so that your private key never leaves your device. Rest doesn’t store your passkey and we can never see it.

Passkeys are a pair of unique public and private keys to protect you. The private key remains either on your device (for iOS) or in Google Password Manager (for Android) and is used for authentication whilst the public key is sent to the Rest App.

Passwords will no longer be used on the Rest App, they’ll be replaced by passkeys.   However, you will still need your password to access MemberAccess – your online account.   

If you prefer to use your password you can still use MemberAccess to access your account online. This is an alternate way to access your account that has other multi-factor measures in place to keep your account secure.