Services / Government / US Veteran Affairs

US Veteran Affairs

Government · va.gov

Five second factors on offer: security key, authenticator app, approval in an app, text message and phone call. The strongest is a security key.

Recommended setup

Security key + app backup

A security key only answers the real site, so it can't be phished. Set up a second method too, so a lost key doesn't lock you out.

KeySecurity keyBest option
AppAuthenticator appSupported
PushApproval in an appID.me Authenticator
SMSText messageSupported
CallPhone callSupported

Not offered: hardware token, email code.

Switch it on

General steps; menu names vary. US Veteran Affairs's own guide has the exact screens.

  1. Sign in to US Veteran Affairs and open your account's security settings. Look for two-step verification or two-factor authentication. US Veteran Affairs's own guide shows the exact screens.
  2. Choose authenticator app. A QR code appears.
  3. Open your authenticator app, add an account and scan the QR code. Type the 6-digit code it shows to confirm.
  4. Choose security key. Insert a USB key, or hold an NFC key to your phone, and touch it when it blinks. Register a spare key too.
  5. Save the backup codes. Keep them in your password manager or print them; they're your way back in if you lose your phone or key.
US Veteran Affairs's setup guide ↗