Sign in

Your PIN is checked on the server and stored only as a hash, so nobody at the agency can read it back to you. After 5 wrong attempts the account locks for a while, and the wait doubles each time after that. If you have never been given a PIN, your supervisor sets the first one. If you have forgotten it, your supervisor can reset it, or you can reset it yourself at /recovery with a recovery code, if you were issued a set. There is no reset by email and no reset by text message.

A PIN is one factor. Two-factor authentication is optional, set up by each account at /2fa/manage. When it is off, the PIN is the whole lock, so treat it accordingly.