What is 2FA?

Two-factor authentication (2FA) is an enhanced security measure that requires a person to use two different verification methods — such as a password and a one-time security code — to gain access to their account. After signing in to my529, users will employ 2FA to verify their identity via a code sent by text message, phone call, or third-party application.

Why does my529 require 2FA?

2FA enhances security for account owners and account agents. 2FA security has become an industry standard for financial institutions, bolstering password-based account security with an authentication procedure to ensure the authorized user is the person requesting access.

How do users register for 2FA?

When a user logs in to their my529 account they will be required to complete a 2FA registration process. The process will require the user have either a ten-digit U.S. phone number or an authenticator app.

To register, users will need to choose their authentication method:

• Text.
• Phone call.
• Authenticator app to generate a random code (e.g. Google or Microsoft Authenticator).

For text and phone call, the user will receive a unique code that will be valid for a brief time. They will need to enter the code where designated online to access their accounts. The authenticator app will provide a security code for users to enter where designated.

If the authentication process does not work, the user should choose a different authentication method.

What is an authenticator app?

Authenticator apps support 2FA by verifying identity. Companies such as Google and Microsoft provide authenticator apps. my529 does not endorse any third-party authenticator app over another.

Does my529 provide technical support for authenticator apps?

my529 does not provide technical support for authenticator apps. Users should contact the authenticator app provider for support if they are having difficulty using an app. They can avoid using an authenticator app by choosing the call or text verification methods when registering with 2FA.

To change the 2FA verification method, users need to log in to their my529 account and go to the Settings page.

Can a user disable 2FA on their account?

To manage my529 account(s) online, users must register for 2FA. Users who do not want to register for 2FA can manage their accounts and make transactions by mail. Use forms available for download on my529.org/how-to-save/forms-documents/ or by request at 800.418.2551. my529 will send account statements to the my529 account owner via their preferred statement delivery method.

What happens if the user doesn’t receive a security code?

Security codes are generally sent within 20 seconds to the registered phone number. If the user has been waiting longer than one minute for a code, they should make sure they are using a phone with the same phone number used during the 2FA registration. If the number is the same and they still have not received a code, they should select the option to send a new code or choose a different 2FA method.

Will users receive confirmation of their registration?

Once users have successfully registered for 2FA, they will receive a confirmation email from my529.