NAB Connect login, explained simply

What is NAB Connect, and who is it for?

NAB Connect is National Australia Bank's online banking platform built for businesses rather than individuals. Where personal internet banking is designed for one person checking balances and paying a bill, NAB Connect is built for organisations: several staff members can be given their own logins, payment approvals can require two people, and the business can connect its accounting workflows to the bank in a controlled way.

Businesses typically use it to:

• View balances and transactions across business accounts in one place
• Make and approve payments, including payroll-style batch payments and BPAY
• Send and receive international payments
• Manage who on the team can see accounts and who can authorise money movement
• Download statements and transaction files for bookkeeping and accounting software

Because real business money moves through it, NAB Connect uses stronger sign-in security than personal banking. Most users sign in with a User ID and password, plus a security token — either a small physical token device or a token generated inside the NAB Connect mobile app. That extra step is the part that trips most people up, and it is why a simple, careful login routine matters.

How to log in to NAB Connect, step by step

Follow these steps in order. The whole routine normally takes under a minute once your details are handy.

1. Open the official login page

   Type nabconnect.nab.com.au directly into your browser's address bar, or use the official button at the top of this page. Avoid search-engine results and links in unexpected emails — those are the two most common ways people land on lookalike pages run by criminals.

2. Check the address before typing anything

   Look at the address bar. It should show the bank's domain, nab.com.au, with a padlock icon. If the domain is anything else — extra words, doubled letters, a different ending — close the tab and start again from the address you typed yourself.

3. Enter your User ID

   Type the User ID your business was issued. Take care with similar-looking characters: a zero is not the letter O, and a one is not a lowercase L.

4. Enter your password

   Type your password exactly as you set it, remembering it is case-sensitive. If your password manager fills it in, confirm it filled the NAB Connect password and not an old or personal-banking one.

5. Enter your token code when prompted

   Generate a fresh code on your physical token or in the NAB Connect app and type it in straight away. Token codes expire quickly, so if you were interrupted, generate a new one rather than reusing the first.

6. Confirm you are in the right place

   After signing in you should see your business's accounts and, if your access includes it, the name of your organisation. If anything looks unfamiliar, sign out and contact the bank through official channels.

Signing in for the very first time

A first-time login works a little differently. Your business's administrator (or the bank, if your company set it up directly) provides your starting credentials, and you are usually asked to change your password during the first sign-in and to register or link your token. Keep the letter or email that contained your initial details somewhere safe, and do the first login on a computer you trust — not a shared machine.

Two first-timer traps catch people out. The first is mixing up NAB Connect with ordinary NAB internet banking: they are separate services with separate logins, and your personal banking password will not work here. The second is skipping the token step: some actions inside NAB Connect need a token even after you are signed in, so set it up properly at the start rather than postponing it.

If the word-order of the service's name confuses your searches, you are not alone — our quick-start login checklist and the page for people who search "nab login connect" both explain the naming and give shorter versions of the routine.

One more piece of first-day advice: do your first login at a desk, with time to spare, rather than in a rush between meetings. The initial password change and token setup deserve your full attention, because every later login depends on them being done properly. If anything in the setup is unclear, that is the moment to ask your administrator — not the morning a payroll run is due and the login suddenly matters.

Common login problems, at a glance

Most failed sign-ins come down to one of a handful of causes. Work through this table before you assume something is seriously wrong.

A small slip in the web address is behind more "the site must be down" moments than genuine outages — the address has to match exactly, letter for letter. The next section covers the short forms people search most often.

Short forms people use to find the login

People search for NAB Connect in all sorts of shorthand — shortened forms, run-together words, the name in a different order. If one of these looks like the way you searched, tap it: each page has the login steps, the official button and the checks that get you in safely.

However you found us, the important check happens at the address bar: lookalike websites exist purely to catch banking traffic, so confirm the address ends in nab.com.au before you type anything. The security section below explains how to tell the difference.

Real page or lookalike page? A 30-second check

Banking login pages are among the most imitated pages on the internet. Before you enter a single character, run through these checks:

• Domain: the address must end in nab.com.au. Anything like nab-connect-login-something, a different country ending, or extra words before the domain is a warning sign.
• How you arrived: did you click a link in a text message or an unexpected email? Banks do not ask customers to sign in through links in messages like that. Close it and type the address yourself.
• Padlock and certificate: the connection should be secure (https). A browser warning about the certificate means stop, full stop.
• Pressure tactics: lookalike pages often add urgency — "account closing in 24 hours". Real security events are handled through official contact channels, never by rushing you through a strange page.
• The page asking for too much: the genuine login asks for your User ID, password and token code. A page asking for card PINs or full card numbers at sign-in is not the genuine login.

Our pages on "nab connecty" and verifying you are on the bank's own domain go deeper on lookalike websites — pages built to imitate the bank's login and harvest credentials — and what to do if you think you entered details on a page that wasn't the bank's.

What a normal day inside NAB Connect looks like

New users sometimes expect the login to be the whole story. In practice, signing in is the doorway to a working day that, for many businesses, revolves around a handful of recurring jobs. Understanding them helps you understand why the platform guards its entrance so carefully.

Morning balance checks. The day often starts with a sweep of account balances: what cleared overnight, which direct debits are due, whether a large expected receipt has landed. Because several accounts can be viewed together, a bookkeeper can spot a problem — a missing payment, an unexpected fee — before it becomes a phone call from a supplier.

Payments and approvals. This is the heart of the platform. A payment might be prepared by one staff member and released by another, which is why user roles and approval limits exist. Wages runs, supplier batches, tax payments and one-off transfers all move through some version of the same pattern: create, check, authorise. The second pair of eyes is not bureaucracy; it is the control that catches the transposed account number and, occasionally, the fraudulent invoice.

International money. Businesses that buy or sell overseas use NAB Connect to send payments in foreign currencies and to track what is coming in. Exchange rates, cut-off times and beneficiary details all matter here, and mistakes are expensive to unwind — another reason the platform prefers deliberate, verified steps over speed.

Statements and files. At month end, the platform becomes a records room: statements to download, transaction files to feed into accounting software, audit trails showing who approved what and when. When a business is asked to prove a payment months later, this is where the proof lives.

Administration underneath it all. Behind the daily work sits an admin layer: creating logins for new staff, removing access the day someone leaves, adjusting approval limits as roles change. The businesses that run NAB Connect well treat this layer as seriously as the payments themselves — most real-world security failures in business banking are stale-access failures, not movie-style hacking.

Five habits that keep a business's access safe

If you are the person who administers NAB Connect for your organisation — formally or by default — these five habits carry most of the security weight. None of them requires new software.

1. One person, one login. Shared User IDs destroy accountability. If a payment goes wrong, "the office login did it" is not an answer anyone — least of all your bank or insurer — will accept. Every user gets their own credentials, and the small inconvenience is the price of a usable audit trail.

2. Remove access on the last day, not the next payroll. When someone leaves or changes role, their access should change the same day. Departed-staff credentials sitting active for months are the quietest risk in business banking.

3. Keep approval limits honest. Set authorisation limits that match what each person genuinely needs to approve. Limits quietly raised for a busy week and never lowered again are how a small error becomes a large one.

4. Guard the tokens like keys. A physical token left in a desk drawer next to a sticky note with the password is not two-factor security; it is one drawer. Tokens and token-phones should be held by the person they were issued to, and losses reported immediately.

5. Teach the domain check. The single most effective anti-fraud training you can give staff takes one sentence: we only ever log in at nabconnect.nab.com.au, and we never log in from a link in a message. Say it at induction, repeat it when the phishing emails do their rounds, and make sure new starters hear it before their first login, not after their first mistake.

None of this is glamorous, and that is the point. Business banking security is mostly housekeeping done consistently. The login routine at the top of this page, the verification habits, and these five administrative disciplines together cover the overwhelming majority of what actually goes wrong for small and mid-sized organisations.

Why this guide exists

This site is an independent guide written for the bookkeepers, office managers, business owners and finance staff who use NAB Connect every day and occasionally get stuck at the sign-in screen. We explain the process in plain Australian English, keep our pages focused on one problem each, and always point you to the bank's own domain to actually log in. We can't see your accounts, and we never ask for or handle your credentials — read more on our About page and in our editorial policy.

If you want to go deeper on a particular topic, the guides linked throughout this page each take one problem at a time — login steps, password help, token help and the security checks. For the fastest route back to work, though, the login steps above and the official button at the top of this page are all most people need.

A short glossary, because the names genuinely confuse people

User ID. The identifier issued to you personally for NAB Connect. Not your account number, not your email, not your customer number — a separate thing, created when your access was set up, and the first field on the login form.

Token. The source of your one-time codes: a small physical device, or the token function inside the NAB Connect app. "Token" confuses newcomers because the same word is used for the device, the feature and the code itself. When the login asks for a token code, it wants the current six digits from whichever source you were issued.

Administrator. The person (or people) inside your business who control NAB Connect access: creating users, resetting credentials, setting approval limits. Many roads in our guides lead to "ask your administrator" because, by design, that is where business-level control lives.

Authoriser. A user whose role includes approving payments prepared by others. The two-person pattern — one prepares, another authorises — is the platform's core safety design, and it is why your login may let you create a payment but not release it.

Internet banking vs NAB Connect. The first is the personal service for individuals; the second is the business platform this entire site is about. Same bank, different doors, different keys — the distinction that resolves more failed logins than any other on this page.