The Social Security Administration does not issue a traditional Social Security PIN the way a bank issues a debit card PIN. When people search for one, they usually mean one of two codes: the Security Authentication PIN (SAP), a short numeric code you generate to prove your identity during a phone call or office visit, or the one-time access code the system texts or emails you each time you sign in to your my Social Security account online. Both sit on top of the username and password you set up through Login.gov or ID.me.
The Security Authentication PIN (SAP)
The SAP is a one-time code for situations where you need to prove who you are over the phone or in person. SSA introduced it in April 2025 to cut down on fraud during sensitive transactions like changing direct deposit information or resolving flagged claims.1Social Security Administration. What to Know about Proving Your Identity
To get one, go to ssa.gov/PIN. The page redirects you to sign in to your my Social Security account, and once you’re in, the system generates a short numeric code. You read that code to the SSA representative on the phone, they confirm it matches on their end, and the call continues with your request.2Federal Register. Agency Information Collection Activities: New Emergency Request
The SAP expires 30 minutes after you generate it. If the call runs long or you didn’t get through in time, sign back in and generate a new one.3Reginfo.gov. 0960-NEW Security Authentication PIN (SAP) Process
The Sign-In Access Code
Every time you sign in to my Social Security online, the system sends a one-time security code to your cell phone by text or to your email address, depending on which you chose during setup. You type it in after your username and password. Without that code, you can’t finish signing in, even with the correct password.4Social Security Administration. More About Multifactor Authentication (MFA)
When the code is sent by email, it sometimes lands in a spam folder. Adding NO-REPLY@ssa.gov to your contacts keeps it out of there.4Social Security Administration. More About Multifactor Authentication (MFA)
This code is not the same thing as the SAP. The access code lets you into your online account. The SAP proves your identity during a phone call or in-office visit. Different codes, different purposes, and you may need both at different times.
Setting Up the Account Behind the Codes
You can’t generate either code without a working my Social Security account. To create one, you must be at least 18 years old, have a Social Security number, a valid email address, and a U.S. mailing address (APO, FPO, and DPO military addresses count). If you have an international address, you may still be able to reach many services through an ID.me credential.5Social Security Administration. How to Create or Access Your Account
The username and password aren’t created with SSA directly. The site sends you to one of two credential service providers, Login.gov or ID.me. You create an account with one of them, verify your identity (usually by uploading a photo of your driver’s license or state ID, and sometimes a selfie), and then use those credentials to sign in to Social Security from then on.6Social Security Administration. Security and Protection If you already have a Login.gov or ID.me account from another agency, like the IRS, use it. You don’t need a second one.7Social Security Administration. Learn about Changes We’re Making to Your Personal my Social Security Account
One important date: if you created a my Social Security account before September 18, 2021, you likely had an SSA-specific username and password. Those legacy credentials stopped working on June 7, 2025. You now need a Login.gov or ID.me account to get back in.7Social Security Administration. Learn about Changes We’re Making to Your Personal my Social Security Account
If identity verification through Login.gov fails too many times in a row, the account locks for six hours. After the wait, go back to the SSA site, sign in with your email and password, and try verification again. Shorter lockouts, around 10 minutes, apply when the issue is a wrong password or too many code requests.8Login.gov. Why Is My Account Locked
Forgot Your Password or Username
On the sign-in page, choose “Forgot Password?” and enter your username, Social Security number, and date of birth. Answer the security questions you set up when you created the account, then create a new password.9Social Security Administration. Are You Having Difficulties Accessing Your Personal my Social Security Account
For a forgotten username, select “Forgot Username?” and provide your email address, Social Security number, and date of birth. The system displays your username so you can continue signing in.9Social Security Administration. Are You Having Difficulties Accessing Your Personal my Social Security Account
If you no longer have access to the phone number or email on file, self-service won’t work. Call 1-800-772-1213 and say “Help Desk” for priority assistance, Monday through Friday, 8:00 a.m. to 7:00 p.m. ET.10Social Security Administration. When You Need Additional Help With Your Account
If You Can’t Use the Online Codes at All
Not everyone can create a my Social Security account. If online identity verification keeps failing, or you don’t have a smartphone or email, you can visit a local Social Security office in person to handle your business. Direct deposit changes specifically do not require an appointment.1Social Security Administration. What to Know about Proving Your Identity
Bring unexpired identification: a driver’s license, a state photo ID, or a passport. You can also set up direct deposit through your bank without going through SSA at all, which is worth considering if reaching an office is difficult.1Social Security Administration. What to Know about Proving Your Identity To find the nearest office, call 1-800-772-1213. If your visit involves identity verification, you’ll need to prove who you are each time.
Keeping the Codes and Your Account Safe
The sign-in access code adds real protection: someone who steals your password still can’t get in without the code sent to your phone or email.6Social Security Administration. Security and Protection A few habits keep that protection intact:
- Use a unique password. Don’t reuse one from another site, and never put your Social Security number in it.
- Never share your access code or SAP. SSA will not call, email, or text asking for your password, access code, or SAP. Anyone who does is running a scam.
- Watch for phishing. A 2025 scam sent emails titled “Official Notice: Download Your Social Security Statement Now” and asked recipients to download a fake “security update tool” that was actually malware. SSA does not ask you to download software.11Office of the Inspector General. It’s a New Scam: The Security Update Tool
If you think your account has been compromised or someone is misusing your Social Security number, report it to the SSA Office of the Inspector General at oig.ssa.gov or the fraud hotline at 1-800-269-0271, open 10 a.m. to 2 p.m. ET, Monday through Friday.12Social Security Administration. Fraud Prevention and Reporting
Blocking All Electronic Access
If you want the strongest protection and are willing to give up online convenience, you can ask SSA to block all electronic and automated telephone access to your record. Call 1-800-772-1213 (TTY 1-800-325-0778). Once the block is on, no one, including you, can view or change your information online or through the automated phone system.13Social Security Administration. How You Can Help Us Protect Your Social Security Number and Keep Your Information Safe It’s a strong step, aimed at people who’ve already been hit by identity theft. If you change your mind, call the same number and ask to have it lifted after proving your identity.