Purpose: This article explains how to reset your EPCS passphrase if you completed identity proofing via Experian during EPCS registration and are receiving an Authentication Failed error.

Audience: Providers who were invited for EPCS and then completed Experian identity proofing (this included creating a passphrase and security question). 

Note: If you are a provider who self-registered with ID.me, please see Activate e-prescribing of controlled substances (EPCS) in iPrescribe or Add and reactivate EPCS tokens in iPrescribe if you need support prescribing a controlled substance. 

Background: If you enter an incorrect passphrase (controlled substance password) or one-time pin (OTP) when e-prescribing a controlled substance, you will see the error message: Authentication Failed, Access is denied.

After 3 failed attempts, you will be locked out for 15 minutes; wait for the lockout period to end to try again. If after 15 minutes, the problem persists, try resetting your passphrase using instructions below. 

Note: Attempting to enter two-factor authentication during the lockout period will restart the 15 minute lockout period and still result in the Authentication Failed, Access is denied error message, regardless of whether the information was corrected. 

1. Go to EPCS Gold. 

2. Click Forgot Passphrase.

3. Enter your NPI number. Then enter the Serial Number (S/N) or Credential ID from your token without spaces or dashes. Select Continue. 

4. Select the token you will be using from the drop-down menu. 

5. Enter the email address associated with your account. 

6. Enter the one-time pin or one-time passcode (OTP) from your selected token. 

7. Select Continue. 

8. You will receive an email to reset your password. The subject of the email is Prescriber reset passphrase notification. Click the Reset Passphrase Link provided in that email.

9. Enter your NPI number. Then enter the Serial Number (S/N) or Credential ID from your token without spaces or dashes. Select Continue. 

10. Select the token you will be using from the drop-down menu. Enter the one-time pin or one-time passcode (OTP) from this token. Select Continue. 

11. You will be prompted to answer the Security Question that you initially set up during the EPCS registration process. Enter the Security Answer, then click Continue.

Note: Security answers are case sensitive. If you don't remember the Security Answer to your security question, please submit a request. We will send you a new EPCS registration link, where you will need to complete registration again and create a new passphrase.

8. Enter a New Passphrase, then retype it next to the Confirm New Passphrase field. Click Continue when finished. Your new password must adhere to the following requirements:

• 8-20 characters
• at least 1 upper case letter
• at least 1 number
• no more than 2 consecutive uses of the same character
• avoid special characters