myPay announces mandatory Two-Factor Authentication now available
 

Make sure you check out the Two-Factor Authentication FAQs at myPay View our how-to guide to set up Two-Factor Authentication   Ready to make your selections? To ensure that you receive SmartDocs messages, please add DFAS-SMARTDOCS@MAIL.MIL to your email safe senders list and to your mobile phone contacts.

 
Two-factor authentication is rapidly becoming the standard for banks, credit unions, online shopping accounts and other organizations to make sure the individual accessing the online accounts is, in fact, the person who created and is responsible for that information.

myPay, the online pay management application for military members, military retirees and many federal civilian employees launched two-factor authentication as an added layer of security for users who depend on their accounts for pay information, important tax documents and to make changes to their online profiles.

myPay's two-factor authentication became mandatory for all users in April 2021.

How it works

New myPay users will be greeted with a message when logging in, offering two-factor authentication. Those who choose to add this feature will select a method to receive their one-time PIN each time they login into myPay using their ID and password.  

Once activated, a customer will receive the one-time PIN via their choice of email or text message. It is important that the customer has access to email or their smartphone to retrieve the PIN and enter it on the myPay login screen. Once entered, access is provided to the myPay account.

Many myPay customers can use their CAC or PIV smart cards instead of the login ID and password. While they must set up two-factor authentication for those times when they access their accounts away from their CAC or PIV-enabled computers, two-factor authentication will not activate when using a smart card.

Account holders can set two-factor authentication and update their preferred email address or phone number for receiving one-time PINs in the Personal Settings menu at any time. Changes require validation by entering the one-time PIN.

How important is it?

There are many examples and explanations of online security precautions available today. For myPay customers who rely on the ability to change and monitor their pay accounts and retrieve information when they need it, that security becomes vitally important.
  
According to the myPay program manager, “Along with financial institutions and government agencies, we’ve been warning customers to take care of their online presence at least as well as they do their homes, families and belongings. Rolling out two-factor authentication for myPay puts us on par with some of the most security-conscious organizations in the world, such as the IRS.”

The Internal Revenue Service now requires multi-factor authentication for remote access to Federal Tax Information (FTI). According to the IRS website, “Multi-factor authentication decreases the probability that the requestor is not the person who he says he or she is.” The number of factors is important, as it implies a higher probability that presenter of the identity evidence is who they claim to be.”

myPay’s new two-factor authentication meets the IRS standard to ensure accounts are only accessible to a verifiable account owner.

Get with the program

Even myPay customers who login one time a year benefit from two-factor authentication when they keep their login ID and password secure from potential thieves by adding the additional security validation of the one-time PIN during login.

According to DFAS officials, two-factor authentication adds to the partnership between the agency and its customers that is necessary to protect personally identifiable information and individual financial records.