DWP Authenticate - Acceptable Use Policy

This document should be read in conjunction with the DWP Personal information charter.

By using DWP Authenticate you agree to adhere to Gov.uk terms of use.

What is DWP Authenticate?

DWP Authenticate allows DWP staff, and people who work for organisations contracted to DWP, access DWP services securely. To access DWP services staff who work for contracted organisations must be registered on DWP Authenticate.

Multi Factor Authentication (MFA)

DWP Authenticate uses Multi Factor Authentication (MFA). MFA can also be called ‘2-step verification’ or ‘2 factor verification’.

Using MFA gives DWP a higher level of confidence that the person attempting to access a service online really is the person they claim to be. It is based on the principle of:

  • Something a person knows (e.g. a username and password) and
  • Something a person has and only that person can access (e.g. a code sent to a mobile phone by text or via an authenticator app, such as Google Authenticate or Microsoft Authenticator).

Full details of MFA and how it works are available on the National Cyber Security Centre.

Mobile Phone use

When you sign up to DWP Authenticate you will be given the choice of two authentication methods. These are:

  • Having a code sent via text to a mobile phone that only you can access OR
  • Generating a code via Google Authenticate.

The mobile phone number used must belong to or be registered to you. Sharing of mobile phones for MFA is not permitted.

DWP is not responsible for any loss or damage that may come from your use of this service if you have shared a mobile phone for MFA.

If your mobile phone is stolen or compromised in any way DWP is not responsible for any loss or damage that may come from your use of this service.

Password Use

DWP Authenticate will also ask you to set up a secure password on your account when you register for this service. The password must meet a set of specified rules. These are:

  • Minimum of 8 characters
  • one upper case letter
  • one lower case letter
  • one number
  • one special character

Websites and connecting services disclaimer

DWP Authenticate lets you sign into other DWP services and does not have any control over the content of these services.

Also, DWP Authenticate is not responsible for:

  • the protection of any information you give to these services/websites
  • any loss or damage that may come from your use of these services/websites, or any other websites they link to.

By using DWP Authenticate you agree to release us from any claims or disputes that may arise from using these services.

You should read all terms and conditions, privacy policies and end user licences that relate to these websites before you use them.