First, the login itself
- Arrive by a route that can't transpose
Use the button above or a bookmark — anything that removes hand-typing from the address. If you must type, type nabconnect.nab.com.au and then read it aloud slowly; hearing the order catches shuffles your eyes skip.
- Confirm the domain
It must end in nab.com.au. If you spot your own transposition in the address bar, correct it and reload before entering anything.
- User ID, then password — one field at a time
Fill one field, re-read it (where visible), then move on. Doing both from memory in one rush is where transpositions breed.
- Token code last, typed from a fresh look
Read the code off the token or app in two chunks of three digits, and type each chunk as you say it. Chunking defeats digit-shuffling, which is the numbers version of the same shuffle.
A note on transposed letters, without the lecture
Swapping adjacent letters while typing or writing is extremely common. It happens to fast typists, tired people, and people under time pressure — and for some readers, including many people with dyslexia, it's a persistent pattern rather than an occasional slip. Banking systems, unfortunately, make no allowances: a User ID or password with two letters swapped is simply not the sequence the system has on record, and the error message won't tell you that's what happened.
Standard advice ("just be careful", "slow down") is genuinely unhelpful for a persistent pattern. What follows is the practical toolkit that people who transpose regularly actually use. None of it requires effort at login time — you set it up once, and it quietly removes the problem.
The transposition-proof toolkit
1. Let a password manager do the typing
A password manager stores your User ID and password exactly as you first saved them and fills both fields with one action. It doesn't matter if the order of letters scrambles in your head at 8:55 on a Monday — the stored version never changes. Choose a reputable manager, protect it with one strong master password you write in a chunked, memorable form, and save your NAB Connect details in it the next time you've successfully signed in manually (so you know the stored version is a working one). This single step eliminates most transposition lockouts.
2. Bookmark the destination, not the journey
As with the address, remove typing: create the login bookmark while you're verifiably on the real page (the button above takes you there), name it clearly, and use it every time. Instructions are on our bookmark guide page.
3. Proofread backwards, and out loud
When you must type something checkable — like the address or a User ID in a visible field — read it from the last character to the first, or say it aloud. Forward reading is pattern-matching (your brain shows you what should be there); backward and spoken reading force letter-by-letter seeing, which is where swaps become obvious. Our verification page uses the same trick for domains.
4. Make the screen easier to read
If your device offers accessibility settings — larger text, increased spacing, dyslexia-friendly display fonts — they're worth enabling for admin work. At minimum, zoom the browser to 110–125% on banking pages: bigger fields are easier to proofread, and there is no prize for doing finance at small font sizes.
When the login still won't go through
If carefully-checked details fail twice — especially a password you may have originally set with a transposition in it (it happens: the "correct" password in your head may not be the one the system recorded) — stop before the third attempt. Lockouts are triggered by persistence, not by slowness. Your path from there is the access help page or your business's NAB Connect administrator, who can reset credentials without drama. When you set the new password, save it into your password manager at the moment of setting it, so the stored and recorded versions can never quietly diverge again.
Questions from "nab conenct" searchers
Is "conenct" how it's spelt in some other country?
No — unlike "conect" (the standard form in Spanish and Portuguese), "conenct" isn't a standard form anywhere. It's what fast typing makes of the English "connect". The product name is NAB Connect everywhere.
Why can't the login just accept close spellings of my password?
Because passwords are checked as exact character sequences — accepting "close enough" versions would multiply the guesses available to attackers. The system can't know a near-miss was you. That's why storing the exact password in a manager is the robust fix.
Are password managers safe to use for business banking?
Reputable password managers are widely recommended by security professionals and are far safer than retyping from memory or keeping credentials in a spreadsheet or notebook. Use a well-known product, keep its master password strong and private, and follow your employer's IT policy if you have one.
I think I set my password with the letters swapped. Can I find out?
There's no way to view a set password. If your usual password fails and you suspect a transposition at setup time, the clean solution is a password reset via your administrator — then store the new one in a manager immediately.