Multi-Factor Authentication (MFA) is an extra layer of security used by systems like Availity, PECOS, and others to protect your account from unauthorized access.
When MFA is turned on, you’ll log in using:
A second form of verification, like a code from your phone Even if someone guesses your password, they still can’t log in without that second step. That’s what makes MFA so important—especially when handling protected health information (PHI), payor data, or provider credentials.
How MFA Works
When you log in to a secure portal like Availity or PECOS, here’s what happens:
You enter your username and password The system prompts you for a second verification You verify your identity using one of these options: A phone call with a spoken code An app like Google Authenticator that generates a code on your device Once verified, you’re in.
Some systems may ask you to verify every time. Others will remember your device for a short period—usually 24 hours or a week.
What You’ll Need
A smartphone (for the app or text message) A reliable phone number or email Sometimes, an authentication app like: Google Authenticator (free) We recommend downloading Google Authenticator from the or before starting account setup. It only takes a minute. Common Questions
What if I lose my phone?
Each portal has a backup option, but you may need to reset your MFA by contacting their support team. It’s best to save any recovery codes during setup.
Can I share my login with someone else?
No—each person should have their own login and MFA. This protects you and keeps systems compliant with HIPAA and other regulations.
Do I have to do this every time?
Some systems will let you “remember this device” for a limited time. But MFA is designed to re-check your identity periodically, especially on new devices or browsers.
Need Help or Have a Question?
We know that credentialing doesn’t always follow a script. If something’s unclear or not covered here, reach out—we’re here to help.