Two-factor authentication for OECI e-tool users
From 1 September 2026, all users of the OECI e-tool, including auditors and centres currently involved in the process, will be required to use two-factor authentication (2FA) to access the system.
This additional security measure is being introduced to better protect user accounts against unauthorised access and to further strengthen data security within the e-tool.
What does this mean in practice?
OECI has chosen to implement 2FA through the use of an authenticator app. Users may select the app of their preference. Examples include:
- 2FAS
- Microsoft Authenticator
- Google Authenticator
- Bitwarden (free for users with a premium subscription and already used by some organisations)
These apps work using the TOTP method (Time-based One-Time Passwords). This means the app generates a unique code that changes every 30 seconds. Users will need to enter the displayed code during login.
What happens from 1 September?
Starting on 1 September, users will receive a prompt during login to set up two-factor authentication. A QR code will be shown on screen and must be scanned using the selected authenticator app.
Important for centres using shared accounts
For centres where one account is currently used by multiple users, OECI kindly requests that you contact the A&D Coordinator to arrange an individual account for each user.
