Agency overhauls online safety
Waka Kotahi is beefing up its security requirements to keep its data safe and to protect people who use its registers.
The new requirements are around the strength of passwords and introducing multi-factor authentication.
Users’ passwords will have to be changed to meet the government standard. This means they will have to consist of between 10 and 12 characters with at least three of the following – upper case A-Z, lower case a-z, numbers and special characters.
You can’t reuse previous passwords or a similar one within the next eight changes, and there will be controls in place to prevent using common or easy-to-guess ones, such as “Password123” or “NZTA12345”.
These changes will also apply to monthly fee-waive passwords, warrants of fitness (WOF) online, LANDATA and to any system connections that link to the transport agency’s registers. The changes will apply at your next password reset after May 20.
As for multi-factor authentication (MFA), this adds an extra layer of security by asking for a second piece of information to ensure it’s you. It protects against the leading cause of data breaches, which is compromised log-in details.
If you access motor vehicle or driver-licence registers via registers.nzta.govt.nz or devices-registers.nzta.govt.nz, you will be required to complete a one-off, sign-up for MFA using an email address specific to you that you have access to at work.
You will be prompted the first time you access the registers each day and, unless you change devices or locations, you shouldn’t have to enter them again for the rest of the day.
The MFA steps are as follows: 1. Log into the registers as normal. 2. You’ll be emailed a six-character code. 3. Check your email and enter the six-character code in the space provided on your registers log-in screen.
You will then have access to MVR or DLR. The code expires after 10 minutes. After that, another one will have to be requested.
The MFA requirements, which don’t apply WOF online users, will be gradually rolled out from May 22 with most people receiving them by May 28. The password changes will apply at your next reset after May 20.
Waka Kotahi will send an agent memo with detailed instructions closer to the time. In the meantime, questions can be emailed to SUPSupport@nzta.govt.nz.
Nicole Botherway, senior manager of safer vehicles, says her team’s first prosecution under the Crimes Act 1961 was recently filed in court.
“On March 16, a man pleaded guilty to one charge of dishonestly accessing a computer system,” she says in the April issue of Inspection News for vehicle inspectors and certifiers.
“While sentencing is due in May, I’m pleased with the outcome of the case to date. It helps us protect the integrity of the vehicle-inspection process and contribute to the safety of vehicles on our roads.
“Situations like this are a reminder to make sure your Waka Kotahi passwords are safe, and to make it hard for unqualified people to falsely use your log-ins without your knowledge.”
