NCID for Individuals & Business Users

Your NCID account will expire if you do not confirm it within three days of creating it. 

It will also expire if you do not use it within 15 months. You will receive an email 21 days before your account expires, prompting you to log in. If you do not take action, you will receive another email reminder seven days before your account expires.

NCID passwords cannot be used more than once. Passwords must:

• Be case sensitive (note which characters you capitalize)
• Be between 8 and 64 characters
• Not include your first name, last name or username
• Not include a common word or commonly used sequence of characters such as “password,” “ABC,” “AAA,” or “123.”
• Have at least four types of the following characters:
  • Uppercase letters (A-Z)
  • Lowercase letters (a-z)
  • Numbers (0-9)
  • Symbols (!, #, $, etc.)

Service desk administrators can unlock your NCID account, but only you can change your password.

• For help unlocking your account call the NCDIT Service Desk at 919-754-6000 or 800-722-3946.
• Check out step-by-step instructions for resetting your NCID account password.

Federal regulations require all users to wait and use their new password for at least three days before changing it online.

After three days, you can reset your NCID password by following these step-by-step instructions.

Passwords for individual and business NCID accounts do not expire.

Residents and business users will always set their passwords themselves and will never have a temporary password.

Multifactor authentication, sometimes known as two-factor authentication, is a security enhancement that adds another layer of security to your online account beyond your username and password. It combines two or more methods (or factors) of authentication from independent categories of credentials to verify your identity for a login or other transaction.

Learn more about MFA from:

• Microsoft
• U.S. Cybersecurity Infrastructure & Security Agency

As the state of North Carolina continues to improve security to protect state data, more and more applications used for state business will begin employing multifactor authentication.

Government entities are a prime target of cybercriminals and hackers looking to steal data or even cripple government infrastructure, which is critical in providing services to the people of North Carolina. Combined with practicing good cybersecurity habits when checking email and using the internet, MFA increases the security of your accounts and state data, even if your password is hacked.

You must authenticate each time you are prompted to log in to an application using MFA. Let’s say you have authenticated to your application using MFA. As long as the session is active, you will not be prompted for MFA again. When your session expires, you will be prompted to log in again along with the MFA.

The MFA enrollment is not used for accessing the MyNCID Portal. You will be prompted to use MFA only when you are accessing a North Carolina government application that requires MFA. You can view, add or modify your MFA enrollment for the MyNCID account on the MyNCID Portal.

1. Log in to the MyNCID Portal. If you do not have a MyNCID account, you must first register on the portal.
2. You will be taken to your profile page after a successful login.
3. Click on the MFA tab.
4. Click on the Add Enrollment button. This will allow you to choose from one of the MFA authentication options (i.e., email, text message, voice call, authenticator app).

1. Log in to the MyNCID Portal.
2. You will be taken to your Profile page after a successful login.
3. Click on the MFA tab. You will see your existing MFA enrollment options.
4. Click on the Add Enrollment button. This will allow you to choose from one of the MFA authentication options (i.e., email, text message, voice call, authenticator app).

1. Log in to the MyNCID Portal.
2. You will be taken to your Profile page after a successful login.
3. Click on the MFA tab.
4. Click the Delete icon present on the existing enrollment. Note: You cannot delete the default enrollment.

If you do not have your phone with you, try authenticating using your secondary, or backup, authentication method.

If the backup method is not available, log in to the MyNCID Portal and change your MFA authentication method.

1. Log in to the MyNCID Portal.
2. You will be taken to your Profile page after a successful login.
3. Click on the MFA tab. You will see your existing MFA enrollment options.
4. Click on the Add Enrollment button. This will allow you to choose another one of the MFA authentication options (i.e., email, text message, voice call, authenticator app) and set them as a default.

This authentication method is currently unavailable but will be soon.

1. Log in to the application that requires MFA.
2. When prompted for MFA, click on the Alternate MFA Options.
3. Choose any of the enrolled MFA options. 
4. If your preferred MFA option is not listed, you need to log in to the MyNCID Portal.
5. You will be taken to your Profile page after a successful login.
6. Click on the MFA tab. You will see your existing MFA enrollment options.
7. Click on the Add Enrollment button. This will allow you to choose from one of the MFA authentication options (i.e., email, text message, voice call, authenticator app) and set them as a default.

Check by logging in to the MyNCID Portal. If you can log in and see your profile page on the North Carolina Identity Management system (as shown in the screenshot below), your NCID account is functioning properly.

If you still cannot access your application with your account, contact the NCDIT Service Desk at 919-754-6000 or 800-722-3946. Tell them you are having problems accessing the application but can log in to the MyNCID Portal.  

For the best experience, use the latest version of Google Chrome or Microsoft Edge.