About ISED's 2-Step Verification for OSB online services

Two-step verification, also known as two-factor or multi-factor authentication, adds an extra layer of security to the login process to make sure that you are the only person who can access your account.

We’re using mandatory 2-Step Verification to protect your identity and personal information by preventing unauthorized access to your account, even if someone else knows your password. Each time you login to an ISED service, you’ll need to use a 2-Step Verification method of your preference to confirm your identity.

Set up 2-Step Verification for OSB online services

Password Icon
Log in to an OSB online service, or go to My ISED Account
Verification Method Icon
Choose a method to receive a one-time verification code
One-Time Code Icon
All users are required to enter a one-time code each time they sign in to OSB online services


  1. Step 1: Log in to an OSB online service beginning September 18, 2023, or go to My ISED Account.

  2. Step 2: Choose your verification method.

    Choose one of the following methods to receive a one-time verification code:

    Authenticator application option

    You can use a supported smartphone authenticator application (Authenticator or FreeOTP):

    • Install the supported authenticator application on your smartphone.
    • Set up an authentication app by scanning a QR code.
    • Use the one-time code from the app during login.
    Call or text message option

    Provide your mobile phone number to receive a security code by text message or by automated phone call.

    • For a text message, provide your mobile phone number (local or international).
    • For an automated phone call, provide your mobile or landline phone number.
    • Receive a one-time code by text or automated message.
    • Enter the code during login.
    E-mail option

    For the email verification, the email you provided for registration will be used.

    • Use your registered email account.
    • Receive an email with a one-time code.
    • Enter the code during login.

  3. Step 3: You are all set! You've successfully added an extra layer of security to your account.

    If you ever wish to change your 2-Step Verification method, you can do it at any time by going to My ISED Account - Security.

    Note: All users are required to enter a one-time code each time they sign in to our online services.


What is a one-time code?

Once enrolled in 2-Step Verification, users are required to enter a one-time code each time they sign in to our online services. This code is good for a single sign in session.

When users enroll with or add 2-Step Verification via phone, text, email, or an authentication application, a new one-time code will be sent via their pre-selected chosen method each time they attempt to sign in to an online service that uses the My ISED Account in the future.

What if I didn't receive my 1-time code?

If you enrolled for 2-Step Verification using email, phone or text and did not receive your one-time code, you can ask for it to be resent. If issues persist, please contact us.

Can I make changes to my 2-step verification?

You will be able to make changes to your 2-Step Verification settings through the My ISED Account security page.

My ISED Account

  1. Sign in to your My ISED Account
  2. On your profile page, you will find the Security section
  3. Select the method of verification services you prefer and follow the steps provided on screen.

If you are unable to access our online services to update the phone number you provided for 2-Step Verification, contact us.

What should I do if I have been locked out of my account?

If your account becomes locked due to entering the wrong code too many times, contact us to have your account unlocked.

Can I disable the 2-step verification feature?

If you cannot use the 2-Step Verification feature there is no option to disable it, please contact us.

Can I use an international phone number to receive one-time code with 2-Step Verification?

Yes, however, at this time you can only use phone numbers based within North American countries that participate in the North American Numbering Plan (i.e., countries that an individual can call from Canada by dialing 1 + 10 digits).

Phone numbers in the following countries that can receive a one time code: American Samoa, Anguilla, Antigua and Barbuda, Bahamas, Barbados, Bermuda, British Virgin Islands, Canada, Cayman Islands, Dominica, Dominican Republic, Grenada, Guam, Jamaica, Montserrat, Northern Mariana Islands, Puerto Rico, Saint Kitts and Nevis, Saint Lucia, Saint Vincent and the Grenadines, Saint Maarten, Trinidad and Tobago, Turks and Caicos Islands, United States, and the United States Virgin Islands.

The phone numbers must be supplied by telephone providers (i.e. landline or mobile phone). Additionally, if you enroll with an email option, you will not need access to a phone at all.

What does 'Standard message or data rates may be charged by your telephone service provider' mean?

ISED does not charge for this service. However, your provider may charge standard message and data rates. Please contact your mobile service provider if you have questions about your plan and costs.