On this page
MFA for PPSR is coming - what you need to know
To strengthen the security of the Personal Property Securities Register (PPSR), AFSA will introduce Multi‑factor authentication (MFA) for all PPSR accounts in 2026.
Why MFA is being introduced
MFA provides stronger protection for your PPSR account by adding an extra step when you sign in. MFA helps to:
- Prevent unauthorised access – even if someone obtains your password, they won't be able to access your account without the second verification step.
- Reduce the risk of fraud – stronger authentication lowers the chance of registrations being created, amended or removed without permission.
- Protect high-value and high-volume users – many PPSR accounts manage large volumes of registrations and transactions, making robust security essential.
What to expect
Users will be able to set up MFA before it becomes mandatory later in 2026. We will provide clear instructions and support to make the transition as smooth as possible.
How to prepare
The best way to get ready is to check that the email address linked to your PPSR account is correct. Having the correct email address will help ensure a smooth setup process once MFA becomes available.
More information
More details about the MFA rollout will be available on the PPSR website.
New improvements to help small businesses
The small business landing page on the PPSR website has been updated, guided by feedback from small business users.
The changes make the page clearer and easier to follow. We have updated the content to help small business owners find the information more easily.
This work reflects our commitment to understanding the needs of small business and ensuring the information we provide is practical, accessible and tailored.
Stopping personal information misuse on the PPSR
AFSA is strengthening our oversight of the PPSR by adding clearer warnings across the PPSR Register.
These warnings remind users not to enter personal identifiers in their registrations.
Important note:
Do not enter any personal identifiers, such as tax file numbers (TFNs), individual healthcare identifier (IHI), Medicare numbers, birth certificate or passport details. The PPSR is a public register and placing these identifiers in registrations may expose you to the risk of identity theft or even legal action. Registrations containing these identifiers will be restricted and/or removed.
Why this matters
The PPSR is a public register. If personal identifiers, especially TFNs, are included in a registration, they can be accessed by anyone who searches the Register. This creates significant and unnecessary identity‑related risks to individuals.
What AFSA is doing
These new warnings are an important part of our broader work to:
- reduce the misuse of personal information
- protect users from identity theft
- maintain the integrity and security of the PPSR.
What happens if personal information is found on the PPSR
If personal information is identified in a registration, AFSA will:
- Remove the registration from the PPSR to prevent further exposure
- Restrict access to the registration, meaning it will not appear in search results.
This ensures personal information is protected and that the PPSR remains safe and reliable for all users.
How the PPSR and IP can protect your ideas and reduce risk
AFSA is working with IP Australia to help more businesses understand how intellectual property (IP) and the PPSR can work together to support growth and reduce risk.
What is IP and why it matters
IP refers to creations of the mind, such as brands, logos, inventions, designs and creative works. These assets often shape a business’s identity and competitive edge.
Registering your IP with IP Australia gives you legal protection and the exclusive right to use, license or commercialise it, helping to protect your ideas and strengthen your business.
Learn more about the four types of registered IP on IP Australia’s website:
For more information about IP basics and business resources visit IP Australia | Business Resources.
How the PPSR supports your registered IP
While the PPSR does not prove ownership of IP, it can help protect the commercial arrangements that rely on your IP.
Once your IP is registered, a business or investor may take a security interest over a registered trade mark, patent or design right.
Registering that security interest on the PPSR:
- helps establish priority if the borrower defaults
- gives lenders more confidence
- makes it easier for a business to access finance based on the value of its brand or innovation.
Why you should register your IP before using the PPSR
For businesses built around ideas, technology or reputation, registering IP with IP Australia before entering into PPSR‑related arrangements can:
- strengthen commercial agreements
- reduce the risk of disputes
- support investment and business growth.
Working together to support business
AFSA’s collaboration with IP Australia aims to help businesses understand the value of their IP and how protecting and leveraging these assets can contribute to long-term success.
PPSR trends at a glance
The latest PPSR statistics show continued growth in searches and registrations, highlighting strong industry engagement and the vital role the PPSR plays in supporting lending, business transactions and managing financial risk.
Snapshot of PPSR activity:
- 35 million searches were conducted on the PPSR in the December quarter 2025 – an increase of 4.3% on the same quarter last year
- 571,986 new registrations were created – up 2.1% from the December quarter 2024
- Users made 364,387 amendments, and 572,294 registrations were discharged or removed during the December quarter
- As at 31 December 2025, there were 10.67 million current registrations on the PPSR.
For more information visit Australia’s Personal Property Securities Register – AFSA statistics release December quarter 2025.
Keeping SPG contact information current and governance strong
Keeping your secured party group (SPG) contact information current and your governance processes strong, reduces the risk of missed notices, prevents administrative issues and supports the overall integrity of the PPSR.
Keep your SPG email up to date
Using a generic or shared email address for your SPG helps ensure you do not miss important PPSR updates. Many businesses lose access to critical notices when staff leave and their individual email addresses become inactive.
A shared mailbox – such as ppsr@yourbusiness.com.au – helps ensure your organisation continues receiving confirmations, alerts and renewal reminders, even when teams change.
Confirming the ongoing validity of registrations on the PPSR
AFSA has been contacting secured parties whose registrations may be at higher risk of becoming invalid. This includes organisations with significant numbers of registrations that have no end dates. We have asked many of these organisations to review their registrations and strengthen internal processes where needed. Through meetings and emails, secured parties are being reminded of the importance of maintaining accurate SPG contact details and ensuring their internal governance supports timely updates to their registrations – particularly ending registrations when they are no longer required.