Answer:

Multi Factor Authentication (MFA) refers to an additional layer of security that's added to the login process.

MFA relies on two forms of authentication: something you know, and something you have with you. The something you know is your password. The something you have with you can be a mobile device.

Answer:

Cybercrime continues to rise and as a result it's increasingly important that your personal information and data is protected. MFA is being implemented to do exactly this, using a widely utilised security tool, to keep personal data secure.
Teachers' Pensions MFA adds an extra validation step after a username and password has been entered, making it significantly more difficult for hackers to access our tools and systems. This extra protection is needed because of the increasingly sophisticated levels of attacks used by hackers to gain access to online services.

Answer:

All employer accounts will require MFA to be enabled.

Answer:

We'd recommend using a mobile device with Authenticator App.

Answer:

We do recommend the installation of an Authenticator App as it offers the highest levels of account protection.

Answer:

Yes. MFA offers additional levels of security over a static PIN and enhances the safety of your account. We recommend the installation of an Authenticator App as it offers the highest levels of account protection.

Answer:

Yes. You can log in with MFA on desktop, tablet or mobile.

Answer:

The Authenticator App is the most secure method. One-time passcodes delivered via SMS text messages are less secure. This is because text messages can be intercepted. Gaining control of a mobile device with an Authenticator App is more difficult.

Answer:

You can use any Authenticator App that generates temporary codes based on time-based one-time passwords (TOTP). There are many free and paid Authenticator Apps to choose from. Widely used options include Google Authenticator, Microsoft Authenticator, and Authy.

We highly recommend that users set up a PIN or biometric requirement on their mobile device.

Answer:

A TOTP Authenticator App is an app that generates a one-time security code every 30 seconds to help verify your identity when you log in. TOTP stands for time-based one-time password.

Answer:

No. MFA is required for all My Pension Online accounts to secure your data.

Answer:

MFA SMS codes are valid for 15 minutes. Authenticator App codes rotate every 30 seconds and are only valid for those 30 seconds.

Answer:

You can remain logged in for 40 minutes when you're inactive. After this time you'll be logged out for account security.

Answer:

Log in to your Employer Portal account and click 'Change Mobile Number' which can be found on the right hand side of the Dashboard.

Answer:

If you didn't receive your six-digit code via SMS, check that the phone number you provided is correct. If it is, make sure you've got a phone signal. If you still aren't receiving the messages, check with your service provider to confirm that messages aren't getting blocked. If you still can't access your account, please contact our Employer Support Team. Visit our contact options for further details.

Answer:

First check to see if you can restore settings if you install the App again. Some Authenticator Apps will allow you to restore from the cloud. If you're unable to restore, contact our Employer Support Team. Visit our contact options for further details.

Answer:

You can change your Multi Factor Authentication method from within the Employer Portal via 'Change Authenticator Method'. If you're unable to access your MFA details, contact our Employer Support Team. Visit our contact options for further details.

Answer:

If you’ve lost or damaged the phone you used to set up MFA, visit our contact options for further details (This link opens in a new window).

Answer:

If you’ve replaced the phone you used to set up MFA, you can still log in to your account. If you have the same phone number and are using SMS nothing will change. If you're using an Authenticator App please follow the migration instructions from the old device to the new device.

Still having trouble? Contact our Employer Support Team. Visit our contact options for further details.

Answer:

If you select ‘Remember Me’ when logging in, a secure cookie will be stored in your browser. This allows you to sign in without entering a new MFA passcode for up to four hours when using the same browser and device. After four hours, or if you clear your browser cookies, you’ll be asked to verify your identity again using MFA.

Answer:

No. However you can change your MFA method if you want.

Answer:

Yes. All members are required to use MFA. Please see member FAQs for more information.

Answer:

If you're unable to log in due to technical issues please contact our Employer Support Team. Visit our contact options for further details.

Answer:

• Authenticator App (recommended)
• SMS

Answer:

A Passcode is randomly generated every time you log in. A PIN is used if Multi Factor Authentication isn't active on your account and remains the same each time.

Answer:

No. Once MFA has been activated, it can’t be removed from your account.

Answer:

All new employer accounts will require MFA to be enabled. Accounts created before 10 May 2022 aren’t required to use MFA but it’s highly recommended as MFA offers the following benefits:

• Enhanced security
• Better user experience
• Extended Employer Portal session time

Answer:

A password manager plays an important role in your account security, but it's not a substitute for MFA. Password managers help drive good password practices. You can use this type of tool to ensure that you create strong and hard-to-predict passwords, don't reuse passwords, and change passwords on a recommended schedule. Even strong passwords aren't sufficient protection against unauthorised account access because they can be compromised by common threats like phishing attacks, credential stuffing, and malware. Password managers don't provide the enhanced login security that you get with MFA.

Answer:

Yes. A voice call option is available, which delivers the verification code through an automated voice message. However, we can’t guarantee that this service will work with all landline providers or devices.

For the highest level of account security, we recommend using an Authenticator App wherever possible, as this provides the most secure method of MFA verification. 

Answer:

A password manager plays an important role in your account security, but it's not a substitute for MFA. Password managers help drive good password practices. You can use this type of tool to ensure that you create strong and hard-to-predict passwords, don't reuse passwords, and change passwords on a recommended schedule. Even strong passwords aren't sufficient protection against unauthorised account access because they can be compromised by common threats like phishing attacks, credential stuffing, and malware. Password managers don't provide the enhanced login security that you get with MFA.

Answer:

Yes. Please restart the log in process to request another code.

Answer:

Yes. If you haven’t received your SMS passcode, you can restart the log in process to request another code. Requesting a new passcode will make any previously issued passcodes invalid, even if they arrive later. To avoid confusion, we recommend waiting a few minutes for the latest passcode to arrive before requesting another one. 

Answer:

No. To receive MFA codes by SMS, you must have a valid UK mobile number registered on your account. Whilst you can register a non-UK mobile for MFA, SMS verification codes can’t be delivered to non-UK numbers. 

Answer:

Yes. MFA is required for all employer accounts.

Answer:

Yes. Some authenticator applications are available for desktop devices as well as mobile phones. If you're unable to use a mobile device at work, you may wish to explore desktop authenticator options that meet your organisation's security requirements. Widely used options include Proton and BitWarden, but please speak to your organisation for more information about your IT policies when selecting one.

Answer:

To reactivate your account you’ll need complete the delegation form and send it to epregistrations@teacherspensions.co.uk. We’ll email you a link to reset your password.

When completing the form, please include a mobile number if you’re considering using SMS text as your authentication method. We can only accept UK mobile numbers and can’t accept a landline. 

Once your account has been reactivated, you'll be prompted to set up an approved MFA method when you next sign in. 

Answer:

Your number will only be used to send MFA codes. All your data is handled in accordance with our privacy policy (This link opens in a new window).

Answer:

To access the Employer Portal, you'll need to use an approved MFA method. If you can't or don't want to use a personal mobile device, you may wish to discuss alternative arrangements with your organisation. Some authenticator applications can be installed on desktop devices, allowing you to use MFA without a mobile phone. 

Answer:

If you're unable to scan the QR code, many Authenticator Apps allow you to add an account manually using a setup key or code instead. Follow the instructions provided by your Authenticator App to add the account manually. If you continue to experience problems setting up MFA, please contact our Employer Support Team. Visit our contact options for further details.

Answer:

From 2 July, email will no longer be available as a Multi Factor Authentication (MFA) verification method for employers using the Employer Portal. 
The change has been implemented as we’ve seen an increase in fraud attempts using email-based verification, particularly involving providers such as BT Internet, so we’re strengthening security for all members and employers.
 
Using an Authenticator App provides stronger protection for your personal information and helps prevent unauthorised access to your account. The Government Digital Service guidance for online public services encourages users to use an authenticator app where possible. Authenticator Apps work anywhere and don’t rely on mobile phone networks.