Extra protection for your Capricorn account

Learn how our new cybersecurity measures keep your business secure.

At Capricorn, we’re working hard to protect your Trade Account and business assets from fraudulent activities. To protect against unauthorised access, we’re introducing two new security features – Capricorn ID and multi-factor authentication (MFA).
alt

Capricorn ID

Your unique personal identity

alt

MFA

An extra layer of security

Capricorn ID

Soon, we'll begin issuing all Members with:

  • a unique Capricorn ID number, giving you more control over who has access to myCAP with the functionality and authority to give others in your business full access to myCAP with their own unique Capricorn ID number and
  • transparency over who is using myCAP and for what purpose.

If you are a Shareholder, you will also experience a consolidated myCAP view. This means you will have access to your Trade Account and your Shareholder Account using your single and secure Capricorn ID.

 

Multi-factor authentication (MFA)

MFA is a common security measure that verifies your identity. You may have used MFA before when logging in to your bank account, doing online shopping or even when accessing your emails or health fund accounts.

Once set up, you will need to verify your identity when accessing Capricorn Rewards, when providing myCAP access to others and when trading with our Ecommerce Partners.

 

Keep an eye out for an email inviting you to set up your Capricorn ID and MFA. You will receive your invitation over the next few weeks. We recommend setting up your Capricorn ID and MFA before you can access myCAP.

Thanks for your patience as we roll out these extra security measures.

 

Frequently asked questions (FAQ)

  • What if I don't receive a one-time-password to my mobile phone?
    • Confirm you have network or Wi-Fi connection.
    • Restart your phone.
    • Check that you haven't accidently blocked the sender's number in the past.

     

    Android

    • Your verification code can sometimes be sent to a spam folder located in your phone, rather than by standard SMS.
    • Search unread, unknown or blocked numbers and spam to find your verification code.
    • If you are still experiencing problems finding your verification code, please contact us.

     

    iPhone

    • Enable the Filter Unknown Senders setting in the Messages app.
    • Open the Messages app and tap on Filters and then Unknown Senders.
    • Check your settings and enable Send as SMS and MMS Messaging.

     

    If you've tried these steps and still haven't received your one-time password, contact us.

  • When do I need to set up my Capricorn ID and MFA?
    We will send invitations to sign up to Capricorn ID and MFA over the next few months. Until then, continue to log in with your Member number (Trade Account number) and current password.
  • Why are we making this change?
    We are adding an extra level of protection to your Trade Account to prevent unauthorised access. Setting up your Capricorn ID and MFA is quick, simple and adds another layer of security, making it harder for someone else to access your Trade Account.
  • What is Capricorn ID? How is it different from my Member number (Trade Account number)?

    Your personal Capricorn ID is an 8-digit number that is separate to the Member number (Trade Account number) and is unique to you.

    • Your Capricorn ID is used for queries and when you log in to myCAP.
    • Your Member number (Trade Account number) is used for making purchases to our Preferred Suppliers through your Trade Account.

     

    Think of it like opening a new account at the bank. Your Capricorn ID is your customer number. It stays with you forever. Your Member number (Trade Account number) is more like your credit card number. You use it to make purchases.

  • What is multi-factor authentication (MFA)?
    Multi-factor authentication, or MFA, is a security measure that requires you to set up additional ways to verify your identity. It adds an extra layer of security in myCAP beyond your Member number (Trade Account number) and password.
  • Will I get instructions on how to set up my Capricorn ID and MFA?
    Yes. You will receive an email with everything you need to do to set up your Capricorn ID, MFA and new password.
  • What method of verification does Capricorn use?

    You will need to set up your MFA using your mobile number. We use a time-limited 6-digit one-time password (OTP) sent by SMS to your mobile number. All owners and Authorised Representatives must set up their own MFA using their own mobile number.

    When you receive your invitation to Capricorn ID and MFA, you will be prompted and guided through each step.

  • What happens after I set up my Capricorn ID, MFA and password?
    Once you are all set up, you will need to use your Capricorn ID and new password to log in to myCAP and access your Trade Account. You will also be prompted to use MFA when trading with our Ecommerce Partners, when redeeming your Capricorn Rewards Points, and when providing myCAP access to others in your business.
  • What happens with my Member (Trade Account) and Shareholder numbers?
    You will still need to use your Member number (Trade Account number) when making purchases from Preferred Suppliers, and when accepting goods at your workshop. Your Capricorn ID, once set up, will replace your Shareholder number.
  • Why do I need a new password?
    To make sure your personal and business information is safe, we need you to set up a new password. This ensures that no one has access to your account unless they have their own Capricorn ID.
  • Does this mean I need to assign myCAP access to another person?
    Yes. You will be able to assign access to others in your business in myCAP. However, whoever you assign access to will also have full access to myCAP.
  • How do I set up a new user for Capricorn ID and MFA in myCAP?

    To give access to a team member:

    • Log in to myCAP and select ‘Account Settings’ on the left-hand menu.
    • Select ‘Account Users’ and verify your identity with your one-time password (OTP).
    • Select ‘Add User’ and enter the user’s details and select ‘Save Changes’.

    Note: The mobile number you add must be unique to the person you are adding.

    • Read and agree to the terms and conditions by ticking the box, then select ‘Confirm Access’.
    • Click the button Enable myCAP Access.
    • The person you are adding access to will receive an email invitation with instructions on how to register their Capricorn ID using their unique mobile number.
  • How do I remove someone’s access?

    To remove a user:

    • Log in to myCAP and select ‘Account Settings’ on the left-hand menu.
    • Select ‘Account Users’ and verify your identity with your one-time password (OTP).
    • Select ‘Edit User’ and ‘Remove’ to remove their access.
  • What happens if I need to update my mobile number and email address?
    Contact us or your Area Manager.
  • What should I do if I encounter registration issues with MFA or myCAP access?
    If you need help registering for MFA, accessing myCAP or recovering passwords, please contact us.
  • How does Capricorn use my personal data?
    Please read our Privacy Policy for more information on how we collect, use and store personal information.