If you were already registered to EAPF Online before 9 May 2024 and haven’t set up MFA yet, when you next log in using your current password and PIN, you’ll see a message banner on your dashboard prompting you to sign up for MFA. If you choose to do this, you’ll be taken to the ‘Change Account Details’ screen.
We strongly recommend that you sign up to MFA, however, you can skip this if you don’t want to set up the new process.
If you decide to use MFA, you’ll be presented with 2 different options to confirm your identity – SMS or Authenticator App. Depending on your preferred option, you’ll be sent a passcode via that method.
The next time you log in, you’ll simply enter your full password and use your preferred method (SMS or APP) to authenticate. The method of authentication can be changed at any point or reverted back to entering random pin and password characters.
MFA authentication method – SMS or App?
If you chose SMS, you’ll have 5 mins to log in using the passcode.
If you prefer to use an Authenticator app, your passcode is refreshed automatically every few seconds.
You can change your MFA authentication method whenever you wish on the 'Change account details' page when logged into EAPF Online.
You can download a free app from the Google Play store or Apple store. You can use any Authenticator App that generates temporary codes based on time-based one-time passwords (TOTP). There are lots of free or paid Authenticator Apps to choose from. Widely used free apps include Google Authenticator and Microsoft Authenticator.
A very small number of users may be asked to change their current EAPF Online username (also known as your 'Login name'). This is because there can't be more than one person with the same online username across the whole Capita Hartlink Online system (which provides the EAPF Online portal and many other pension fund portals). If this applies to you, you’ll automatically be sent to the Change Account Details screen to update it when you log n for the first time after 11am on 9 May using your existing username.