iPrescribe: New phone: activate EPCS tokens (ID.me registered users)

Before you update to a new phone, you will need to ensure that you have hard and soft tokens paired to your iPrescribe account on your old phone. 

• If you do not pair the hard token to your iPrescribe account on your old phone, you could lose access to EPCS and need to repeat the registration and identify verification process.
• If you did not pair the hard token to your iPrescribe account on your old phone and already lost access, go to Lost Access to Your Old Token? Pair a New Soft Token (ID.me Registered Users).

Note:

To continue using the ID.me authenticator on your new device, first ensure that your ID.me multi-factor authentication is properly set up. Review those steps here: https://www.iprescribe.com/idmeinstructions.

If you would like to add a backup soft token (VIP Access) to your new device, you can do that once you’ve taken the following steps with your hard token.

The basic steps are outlined below. Continue reading this article for a detailed explanation of each step.

1. Ensure you have a hard and soft token paired to your iPrescribe account on your old phone. If you do not have a hard token, contact DrFirst Support before continuing.

2. Download iPrescribe on your new phone. 
3. Use the hard token to sign into EPCS token manager on your new phone. 
4. Optional: Add your soft tokens (ID.me and/or VIP Access).

Before updating to a new phone:

Step 1. Ensure you have already added (paired) a hard token (also called an authenticator or a key fob) to your iPrescribe account on your old phone. 

Here are some examples of tokens you may have: Step 6: Add Controlled Substance Tokens to Your iPrescribe Account

• If you already have a hard token paired with your iPrescribe account move on to the section after No. 7 of the immediate list below (Step 2).
• If you do not have a hard token at all, Submit a request to DrFirst Support before attempting to log into iPrescribe on your new phone, as you will need to request a new hard token from DrFirst. If you skip this step, you may lose EPCS access.
• If you do not have a hard token paired with your iPrescribe account on your old phone follow these steps:
  1. Have your new hard token ready. 
  2. Tap the menu icon on the top-left side of your screen, then click Settings.

        

     (click to enlarge)

  3. Select Manage Authenticators. Note: This option is only visible after completing the EPCS activation.

      

     (click to enlarge)

  4. To enter Token Management, enter your iPrescribe login password (or passphrase, if you used Experian or Doximity), select your registered token from the Code Generator Device drop-down menu, and enter the 6-digit security code generated by that token. This is generated by your ID.me authenticator app.
     

          

     (click to enlarge)

  5. Register your hard token by selecting Add New Token.
     

     

     (click to enlarge)

  6. Finish registering your second token by populating the following fields, then select Add New Token.
     • Token Type. Tap the drop-down menu and select the type of token you are using.
     • Token Nickname. Choose a nickname for the token you are currently adding.
     • Credential ID. Enter your token serial number. If you are using the VIP Access App token, you will need to enter your Credential ID.
     • 6-digit Security Code. Enter the One Time Pin (temporary 6-digit code) generated by the token you are adding.

       

       (click to enlarge)

  7. If you successfully added your token, you will see it on the Token Manager screen.

Step 2. Once you have paired your hard token with your iPrescribe app on your old phone, download the iPrescribe app to your new phone. Reminder: The DEA requires that your soft token (code generator) is not on the same device you will use to prescribe controlled substances.

On your new phone:

Step 3. Log in to iPrescribe on your new phone with your iPrescribe account credentials. Have your new hard token ready and follow these steps: 

1. Tap the menu icon on the top-left side of your screen, then click Settings.

      

   (click to enlarge)

2. Select Manage Authenticators. Note: This option is only visible after completing the EPCS activation.

    

   (click to enlarge)

3. To enter Token Management, enter your iPrescribe login password (or passphrase, if you used Experian or Doximity), select your registered token (hard token) from the Code Generator Device drop-down menu, and enter the 6-digit security code generated by that token.
   

        

   (click to enlarge)

4. You have now entered token management. If you would like to add a new soft token, you can register your second token by selecting Add New Token. To use the ID.me Authenticator app, log into your ID.me account to add your new device and download the ID.me Authenticator app. To use Symantec VIP Access, download VIP Access from the Apple App Store or Google Play Store to your new device.
   

   

   (click to enlarge)

5. Finish registering your second token by populating the following fields, then selecting Add New Token.
   
   • Token Type. Tap the drop-down menu and select the type of token you are using.
   • Token Nickname. Choose a nickname for the token you are currently adding.
   • Credential ID. Enter your token serial number. If you are using the VIP Access App token, you will need to enter your Credential ID.
   • 6-digit Security Code. Enter the One Time Pin (temporary 6-digit code) generated by the token you are adding.

     

     (click to enlarge)

6. If you successfully added your token, you will see it on the Token Manager screen.

• It is recommended to have at least two authentication devices attached to your account. This can be physical authentication tokens from Symantec or OneSpan, software tokens (VIP Access or ID.me Authenticator) on your mobile devices, or any combination of the two.

Step 4. Optional: Add your soft tokens (ID.me and/or VIP Access). Learn more: Step 6: Add Controlled Substance Tokens to Your iPrescribe Account