Security and privacy

Your Queensland Digital Identity (QDI) is secured by best-practice technology, to keep your personal information safe and secure.

When you use your personal documents to strengthen your QDI, we verify the details from those documents through a secure online checking system.

Once a QDI is verified, we register the credentials that were used, so that they cannot be used again to strengthen a different QDI.

Your information is protected by industry-best security practices and technology. We have undergone rigorous security testing to ensure your information is protected, and this testing will continue in the future.

We will never contact you via email to ask for your personal details or password. If you receive any contact that claims to be from us, you can contact us to confirm it is legitimate.

You can read the Privacy Notice for the QDI, to find out how we store and use your private information.

Device malware notification

Our cyber security monitoring systems may detect when customer devices are infected with malware. These systems alert us when sensitive information, such as login details, appears in data logs associated with malware activity.

Malware is malicious software that may have been installed on your computer, smartphone or other device, to capture your login details for online sites and services. These details are then often illegally shared with third parties (for example, through the dark web), who may use them fraudulently.

If we are advised that your QDI login details may be compromised, we will send you an email, with steps to protect your QDI, and your other accounts.

The email will:

  • come from an @tmr.qld.gov.au email address
  • NOT ask you to click a link to login to your QDI, nor ask you for your password – we will never do this
  • have a signature block  with official government branding, including the department name.

If you have any questions, please contact us.