Permits Online: How to Use One-time Verification Code

When it comes to securing online accounts, most of us are familiar with the standard combination of using a username and a unique password. For many years, this was considered a reasonably secure way to limit access to just the authorized users of the account. However, due to normal human behavior, people tend to choose easy to remember passwords or reuse the same passwords at multiple online accounts.

MFA is a mechanism to verify individual’s identity by requiring them to provide more than just a username and password. MFA requires a user to provide two or more of the following:

• Something the user knows – e.g., a password, pass phrase, or PIN
• Something the user has – e.g., a physical token, a phone-based authenticator, or one-time verification code
• Something the user is – e.g., a biometric, such as fingerprint or retina pattern

• See Permits Online: How to Identify Email Associated With Account.

• Please check your email’s Spam or Junk folder
• Add ponlnotify@ttb.gov and do-not-reply-myttb@ttb.gov to your safe list to prevent future emails forwarded to your Spam or Junk folder.
• Request a new verification code using the request a new verification code link (shown below).

• Unfortunately, the email address shown/associated with your existing Permits Online account CANNOT be changed.
• A new Permits Online account must be created with a different email address. With the new Permits Online account, submit a Link Request to get access to all the permit(s) information from your previous Permits Online account.

NOTE: You cannot use an email address that is already in use by Permits Online (already associated with an account) when creating a new account.

• You have 30 minutes to enter your code before it expires after the email has been sent.
• If the code has expired or is entered incorrectly 3 times you can request a new verification code using the request a new verification code link (shown below).

• Yes, you are required to provide one-time verification code in order to access your Permits Online account.
• Anytime you log off from Permits Online or close your internet browser, you will be required to provide a new one-time verification code in order to access your Permits Online account.

• The President’s Executive Order (EO) 14028 on Improving the Nation’s Cybersecurity issued on May 12, 2021, it requires all federal government agencies to employ and fully adopt multi-factor authentication (MFA).
• New login process provides an increased level of security for all industry members when accessing TTB applications.