Account, sign-in & approval

Register and confirm your email

Email confirmation and account approval are separate steps. Confirming your email alone does not mean you can bid.

1. Register with accurate details and an email address you can access. Upload the required identity documents in the registration form.
2. Open the confirmation message and confirm your email.
3. Complete requested details or documents in your account. Wait for the approval response.
4. Before bidding, check your account status and the lot's terms.

Prepare registration and upload documents

First choose Individual or Company / Business in the form. The “Please have these ready” list shows the documents you need. Email and phone are under Contact details; username and both password fields are under Access credentials. Title, phone and an existing customer number are optional. Enter a customer number only if AustroBid has already issued one to you.

Each document field accepts one PDF, JPG or PNG file, up to 8 MiB. For a passport, use the page with the photo and personal details. For an identity card, combine the front and back in one PDF or image. Combine multi-page documents in one PDF.

Company accounts require three documents: ID of the person authorised to sign, a current commercial register extract (no more than three months old) or notarised power of attorney, and evidence identifying the individuals who ultimately own or control the company. Examples of ownership evidence include a beneficial ownership register extract, a certified shareholder agreement or equivalent evidence.

Sole proprietors and companies outside Austria may have differently named documents or may not have the listed documents in that form. Open the relevant note in the documents section and use Contact to clarify suitable equivalent evidence before submitting. All three fields remain required.

Submitting with missing details highlights the affected fields and focuses the first one. Account type and file selection also work with the keyboard. File errors leave the instructions visible. Privacy details expand in place; contact and legal documents open a new tab so your entries stay in the form.

After registering, confirm your email. Approval follows a manual review and is not immediate; no fixed turnaround or automatic outcome email is promised. Check the current status in your account.

Secure your account

Use a strong, unique password and enable additional sign-in verification in your security settings. Do not share passwords, one-time codes or recovery codes.

If you forget your password, use password reset. Check spam if messages do not arrive. Requesting several links or codes can replace earlier ones.

Keep account details current

Maintain your address and contact details in account settings. When changing your email, the currently confirmed address remains valid until the new one is confirmed.

Sign out on shared devices when you finish. If access looks suspicious, review active sessions and change your password.

Buyer accounts and seller access

Buyers can register as individuals or businesses. Public seller registration is currently closed; an old seller link or seller invitation does not reopen it. Existing seller accounts use the normal sign-in page.

Sign-in attempts, factor changes and recovery

After five unsuccessful password attempts, sign-in for that account is limited until the end of its 15-minute window. Username and email share this limit. Other accounts on the same network are unaffected. A short busy message instead means: wait briefly and try again.

A second-factor challenge and the account each allow at most five code attempts. Authenticator/email codes and recovery codes share these limits. Signing in again with the correct password does not reset the MFA limit: after five wrong codes, wait until the end of the 15-minute window, then sign in again. A successful MFA challenge can only be used once and resets the MFA attempt counter.

At most three MFA email codes are sent within ten minutes. Only the most recently requested code remains valid. When the limit is reached, wait instead of repeatedly requesting codes.

To change an active MFA method, first disable it in Security using your current password, then set up the new method.

A valid recovery code disables MFA and discards all previous recovery codes, other sessions and pending sign-in challenges. The recovering sign-in receives a new session. Set up MFA again immediately and store the newly generated codes securely.