TABLE OF CONTENTS

Summary

If you have forgotten your password, or if you are yet to set one up and your link to do so has expired, you can follow these instructions to log into our platform.


Detailed Description

Step 1. Open up your browser (preferably Google Chrome or Safari) 



Step 2. Head to the First AML platform to see the log-in screen: 

Choose your country: 



 Australia: https://app.firstaml.com 




New Zealand: https://app.firstaml.com 




United Kingdom: https://app.eu.firstaml.com



Step 3. Enter your email address


Step 4. After entering the email address connected to your account, select "Continue" to proceed to the next screen.

Step 5. On the next page (below), select the link "Forgot password, or have not set one yet?"
Step 6. Enter your email address.

 
Please make sure to enter the email address that you have your First AML account with. Other email addresses will result in no email generated.


Step 6.1. Check your email inboxes


If you did not receive the password reset email. Please check your other inboxes (Spam, Junk)

Try resending the email if you have checked all inboxes.


Step 7. Find the email in your inbox and click on the green "Reset your password" button. 

This will prompt a page on your default browser.




Step 7.1 (If browser not prompting) 

Right click on the Green "Reset your password" button and click on "Copy Link". Then open either Google Chrome or Safari browser and paste the link there.


Step 8. Type in your new password and then click on "Reset password" 

(The password needs to meet the requirements mentioned) 


A password can be rejected even when it meets all the requirements shown. This happens when that email address and password combination has appeared in a known data breach on another website. If this happens, choose a different password.



Step 9. Success! You can now click on the "Back to login" button to login with your new password.



If you are asked to reset your password for security reasons


From 12 October 2026, First AML checks the email address and password combination you use against a list of publicly known data breaches on third party websites. The check is run by Auth0, the identity provider First AML uses to manage logins. It applies in three places: when you set up a new account, when you log in, and when you reset your password.

If your combination appears on that list, we block it and ask you to choose a different password before you can continue. At login, you will see a message telling you the combination was found in a public data breach and that you need to reset your password to proceed.



This does not mean First AML has had a data breach, and it does not mean anyone has accessed your First AML account. It means the same email and password pairing has been exposed somewhere else on the internet, which makes it unsafe to keep using here.


Getting back into your account

  1. On the login screen, select Forgot password, or have not set one yet?
  2. Enter the email address associated with your First AML account.
  3. Open the reset email and select Reset your password. If it is not in your inbox, check your spam or junk folder.
  4. Enter a new password. It must be different from the one you were using, and it cannot be a password that has appeared in a known breach.
  5. Return to the login screen and log in with your new password.


If your new password is also rejected


The same check runs when you reset your password. If the new password you have chosen has also appeared in a known breach, you will see a message asking you to choose a different one. Enter another password and continue.



Choosing a password you have not used on any other website is the quickest way through this, and is the safest option in any case.


If you are setting up your account for the first time


The same check runs when you create your password from your account setup link. If the password you choose has appeared in a known breach alongside your email address, it will not be accepted and you will be asked to choose a different one. Your setup link stays valid, so you can carry on and finish setting up your account with a new password.


Frequently asked questions


Has First AML had a data breach?

No. The check looks at breaches on other websites. If your email address and password combination appears in one of those, we block it here so that an exposed password cannot be used to reach your First AML account.


Has someone logged into my First AML account? 

No. This message appears before anyone gets in, not after. It is a preventative block, not a report of unauthorised access.


My password meets all the requirements. Why is it being rejected? 

Length, numbers, and symbols are one part of a strong password. A password can meet every one of those rules and still be unsafe if it has already been exposed in a breach somewhere else. Both checks have to pass.


Can I reset my password back to the same one? 

No. The password you were using has been blocked, so it cannot be reused. You will need to choose a new one.


I have reset my password and I am still being blocked. 

This means the new password has also appeared in a known breach. Reset it again and choose a password you have not used on any other website.


I am setting up a brand new account and my password was rejected. Why? 

The check runs on new accounts as well as existing ones. If the password you have chosen has already been exposed in a breach alongside your email address, it cannot be used here even though the account is new. Choose a different password and continue. Your setup link is still valid.


I log in using single sign-on. Does this affect me? 

No. This check applies to accounts that log in with an email address and password. If your organisation uses single sign-on, you sign in through your own provider and nothing changes for you. See Single Sign-On (SSO).


Where can I get help? 

If you have reset your password and still cannot log in, raise a support ticket and we will help you from there.



If you are still having issues with logging on to our platform, you can launch a support ticket at the top of this page.