If a member has already registered for an online account, they will have created a memorable phrase. When they log in, they will be asked to enter certain characters of this phrase before they can access their account. However, some members have told us that this step of the process can be difficult for them. 

To make logging in more convenient, and secure, we are introducing two-factor authentication (also known as 2FA) from 31 January. 

Two-factor authentication - an easier and more secure way to access online accounts

Two-factor authentication will make logging in to or registering for an online account much more convenient. 

When members log in for the first time on or after 31 January, they will still be asked to enter their password correctly. They'll then be sent a unique, one-time security code to their registered email address. 

Step 1: The first time a member uses 2FA to log in to their online account, they will only be able to use their email address. 

Once they've done this, they can add or verify their mobile number. There's more information on this in the 'What members need to do' section of this article. 

Adding and verifying a phone number is really important. It will allow members to receive their code via either their phone or email in the future. 

Step 2: Members will then receive an email with a unique code. They need to copy this code, go back to either the RPS or BTPFSF website and enter it in to the 'Security code' field. Then, select 'Confirm' and they'll be taken to the dashboard of their online account. 

The security code will expire in 15 minutes, but members can easily request another security code if they need to. 

With 2FA, members will need both their password and a unique security code that they'll be sent each time they log in to their account. 

What members need to do

When 2FA is in place from 31 January, members will first need to use an email address to log in to their online account. 

However, we recommend that once they've logged in to their online account for the first time using 2FA, they then add and verify their phone number so they have the choice of which device they would like to use in the future. 

Once they've logged in to their online account via their email address, go to the 'Contact Details' section - they can find this in either the myRPS Account or myFund Account menu under 'My Details'. 

In the 'Mobile Number' section, members can add or verify a mobile number - the mobile number they would like to use needs to be verified before they can use it to log in. 

This is because we need to make sure that this is the member's mobile number we're sending important details to, and not anyone else's. 

Adding a mobile number increases the security of a member's account, as if they ever lose access to their email account, they can receive security codes via text message. Railpen will never share members' mobile numbers with third parties. 

Adding a mobile number to an account 

If members would like to add a mobile number, they can enter their number in the 'Mobile Number' field and then click 'Request a security code'. A unique security code will then be sent to their phone. They can copy this code, enter it in to the 'Security code' field and click 'Save'. 

Once they've done this, they'll then be able to log in to their online account by using their phone number. 

If a member has already added a mobile number to their account before 2FA

If members have previously added a mobile number to their account, all they need to do is verify it. Next to their phone number, they need to click 'Verify your number' and then request a security code. 

A unique security code will then be sent to their phone. Copy this code and then enter it in to the 'Security code' field, and then click 'Save'. 

Once members have done this, they'll then be able to log in to their online account by using their phone number.