Step 1: What you need BEFORE starting the EPCS identity proofing (IDP) process:

Effective as of February 28, 2024, DrFirst will have an updated process for:

  • Identity proofing (IDP)
  • Registering to e-prescribe controlled substances (EPCS)

This change is necessary for DrFirst to be compliant with Identity Assurance Level 2 (IAL2) federal security standards for identity proofing completed from a remote setting.


To meet federal standards, DrFirst will now require: 1 piece of strong evidence (e.g. identification card) plus 2 pieces of fair evidence (e.g., demographics).


You will see different workflows depending on whether:


  • You've completed identity proofing (IDP) before
  • You're only going to e-prescribe non-controlled substances
  • You're going to e-prescribe non-controlled AND controlled substances

Welcome to the first step of our guide! Before diving into the EPCS identity proofing (IDP) process, it's crucial to be well-prepared. This article will outline the necessary items and information you should have on hand to ensure a smooth and efficient registration. Let's get started!



  1. Either a soft or hard EPCS Token. You cannot complete IDP without a token.
    • Hard token – Provided by DrFirst.
    • Soft token – VIP Access smartphone/ tablet app by Symantec.
    • A physical mailing address to deliver your DrFirst hard token.


  1. If there is a freeze on your credit report, it must be lifted first. Learn how to lift a security freeze from your credit report.

  1. Ensure your NPI information is up-to-date. Any discrepancies may delay the EPCS registration process by up to a week, as the DrFirst synchronizes with the NPI registry every Wednesday.

  1. Prepare to answer identity-proofing questions. These are formulated based on your credit history, such as home/auto loans, bank account information, places of residency, etc. Having your credit report available can assist in correctly answering those questions to complete the IDP process successfully. Obtain your free Experian credit report.

  1. One valid personal credit card: Visa or MasterCard only. 
    • Only the first 8 digits are required.
    • It cannot be a business credit card or personal debit card.
    • Your card will NOT be charged.


Note: Even though the credit cards and/or phone numbers are not mandatory fields, they will help with passing the Identity Proofing EPCS. If you choose to use the credit cards field, make sure it is registered under your name at your home address. If you choose not to use a credit card, we strongly recommend providing a telephone number associated with your home address (landline or cell phone).


  1. Valid personal phone number.
    • Whether landline or cellular, it must be associated with your home address
    • RECOMMENDED: If you enter a mobile phone number and Experian confirms that you are the primary account holder for that phone, they will immediately send you a text message with your IDP transaction ID. 


  1. Social Security Number.

  1. An Identification card or passport - You will be asked to take a photograph of this during the process.

  1. DEA number (not NADEAN) and state license number. 

  1. An idea for a passphrase of a minimum of 8 characters with at least one capital letter, one lowercase letter, and a number.
    • A passphrase is necessary for the two-factor authentication required for sending controlled scripts.
    • It is highly recommended that you write down the passphrase and save it in a secure location.


  1. An idea for a security question and answer (necessary for resetting your passphrase.

    • Example: Mother’s maiden name or make/model of your first car.
    • Security answers are case-sensitive.


Once you have obtained these items, please carry on with Step 2: Clinician invite.


If you have any questions, please contact us

Did this answer your question? Thanks for the feedback There was a problem submitting your feedback. Please try again later.