Starting in April, CareFirst BlueCross BlueShield and CareFirst BlueChoice, Inc. will introduce a new security feature—two-step verification—in My Account. Two-step verification adds a second layer of security to help ensure unauthorized users cannot access My Account, even if they have a member’s password. This process should be familiar to most members as it’s common in organizations such as Apple, Amazon and many financial institutions.
Members will receive emails from CareFirst showing the following:
When a member logs in to My Account from a new device, they will need to retrieve a six-digit verification code through an email or text message. Once they enter the code, the device is considered trusted and the member is logged in to My Account. This process repeats every time a member uses a new device to log in. Subsequent logins on any of the member’s trusted devices will only require the My Account username and password.
All members registered with My Account will receive an email the week of April 29th, notifying them of the new process and recommending they review and update their communication preferences.
A follow-up email will be sent later this summer, informing members the process will soon be mandatory, and they will not be able to log in to My Account without completing the verification steps.