Multifactor Authentication FAQs

Biometric Device

A biometric device uses unique, physical traits to verify your identity. ERIE will offer fingerprint scanning and facial recognition as options.

Passkey

A passkey uses a unique pin of your choosing to verify your identity. Passkeys only work with the device that is registered.

Biometric devices and passkeys are considered the most secure MFA method because they are unique, tied to your physical device, and not stored on vulnerable servers.

Passkeys are designed to be unique to each device for security reasons. Each passkey is linked to the specific device where it’s created. This helps keep accounts secure, since the passkey uses that device’s built-in security (like Face ID, fingerprint, or PIN). If passkey is your preferred MFA method, you will need to set up a passkey for each device you plan to use to access your Online Account or Mobile App.

If you can’t sign in on your alternative device because MFA is required, you’ll need to set up SMS text and/or an authenticator app on your original device first. The SMS text and/or authenticator app will generate a passcode you can use to sign in from any device. 

Once you’re signed in using the SMS text and/or authenticator app’s passcode, you can then create a new passkey on your alternative device by going into your Online Account Settings.

Passkeys are device specific. Some devices only permit the use of a plug-in authenticator as the device’s passkey method. A plug-in authenticator is a small security device – such as a USB key or hardware token – that is connected directly to a computer or mobile device to verify your identity during sign-in.

Instead of entering a code or approving a notification, you simply inserts or tap the device when prompted. 

Erie Insurance cannot control a device’s passkey options and does not expect our Customers to purchase a plug-in authenticator. If a plug-in authenticator is your only passkey option, it is recommended that you use SMS text and/or an authenticator app as your MFA method. 

What it is:

An authenticator app is an app downloaded to a physical device of your choice that generates a short-lived login code.

How it works:

• After you download and pair the authenticator app to your Online Account or Mobile App, the authenticator app and ERIE will share a secret key.
• The authenticator app uses that key, plus the current time, to generate a new 6-digit code every 30 seconds.
• When you log in, you will enter the code from the app in addition to your password.
• The service verifies that the code matches what it expects at the exact time.

Erie Insurance does not have a preference for a specific authenticator app – any trusted option will work. Some commonly used authenticator apps include, but are not limited to: Google Authenticator, Microsoft Authenticator, Authy and Duo Mobile. 

When setting up an authenticator app, you will be given two options: A QR code or a pairing key.

• If you are setting up the authenticator app on a web browser, the QR code is usually the easiest option. Simply open the authenticator app on a cell phone, scan the QR code with the camera, and the app will automatically sync.
• If you are setting up the authenticator app on a mobile device, the pairing key is the better option. Just copy the key, then paste it into the authenticator app when prompted.

 

Access our step-by-step guides on how to pair devices to an authenticator app.

SMS is the standard text messaging feature on mobile devices. When you select SMS as your MFA option, a one-time code is sent by text message, which is then entered along with your password to confirm your identity. 

Passkey

A passkey uses a unique pin of the user’s choosing to verify the user’s identity. Passkeys only work with the device that is registered.

Pairing Key

A pairing key is a temporary code used only once – when you’re setting up an authenticator app for MFA. It links your account with the authenticator app.

Passcode

A passcode is the 6-digit code generated by your authenticator app after setup. The code changes every 30 seconds and is what you enter at sign-in to verify it’s really you.

Once you have successfully set up multifactor authentication, you can manage your multifactor authentication methods on your Online Account and Mobile App under the Login & Security tab, found in Settings.

After clicking “manage multifactor preferences,” you will be redirected to the “Your Multifactor Authentication Methods” screen where you can make the necessary revisions.

For your security, you will need to successfully set up at least one multifactor authentication method before you can access your Online Account or Mobile App. If you start the setup process but don’t finish it, you’ll need to restart the setup process the next time you log in.