Create your own Care Identity profile

You can create your own profile if you need access to national authenticated systems, but only systems that do not provide clinical information.

At the moment, this service is for health and social care staff who need access to NHS Service Finder.

Before you start you will need:

• a smartphone that can read a QR code
• an authenticator app installed on your smartphone, such as Microsoft Authenticator
• an email address to receive a security code - any email address that you have access to will work

Note: you will find a link to open this application within the service you are trying to access, such as NHS Service Finder.

Create your profile

Read the short on-screen instructions, and select 'Start'

Enter your name and email address. You can use any address you have access to - it does not have to be an NHS address.

You'll also need to complete an image verification section to confirm that you are human. Follow the on-screen instructions and select 'Confirm' to complete the image verification.

Do not select the green 'Continue' button before you have seen a message confirming that you've completed the image verification. You may see 'Human user check passed', 'That is correct' or a similar confirmation message.

With your details entered and the image verification complete, select 'Continue'. Please note, if you see 'You will be redirected shortly', this is not the case - you will need to select 'Continue' yourself to proceed.

You'll now be sent a security code by email. Enter the code that we've sent to your email inbox, then select 'Continue'.

The service will now check your security code and create your profile.

Set up multi-factor authentication (MFA)

You'll need to set up MFA on your smartphone to complete the process.

You will only have 3 minutes to complete this section. If you do not complete it within 3 minutes you will be timed out, but you can start again with the same email address.

To set up MFA, read the on-screen instructions and select 'Continue'.

You'll now be asked to create a password of 8 characters or more.

Note: at this stage you might see that the banner within the service has changed from 'Care Identity Management' to 'CIS2 Authentication'. This happens because the MFA section of the profile creation process is handled as part of the CIS2 Authentication service.

Enter your password in both boxes and select 'Continue'.

You'll now see a QR code.

Open the authenticator app on your phone.

Note: the on-screen instructions ask you to open Microsoft Authenticator, but you can use any authenticator you have installed on your phone.

Scan the QR code with the authenticator app. The app should show you a 6-digit code - enter this and select 'Submit'.

Finally you'll see a confirmation message that your device has successfully been set up with MFA.

Note: to complete the process you'll need to return to the service you came from and sign in there, such as NHS Service Finder.

If you do not complete the process or you are timed out

To complete the process you must complete both these steps:

• create your profile by entering a security code we send to your email address
• set up MFA on your smartphone using an authenticator app

You will have 3 minutes to complete the MFA stage. The 3 minutes begin from the moment you see this screen:

If your session times out you will see this error:

If you do not complete the process within the time limit, or the MFA process fails for any reason, your profile will be deleted.

You can start again and reuse the same email address. You may see a message asking you to wait a few minutes before trying again.

If your email address is already associated with a Care Identity profile

If your email address is already in use you will see this screen.

You may have already created a Care Identity profile, or had one created for you. Try returning to the service you need to access and logging in with your email address.

If you have a Care Identity profile but you cannot log in to the service you need to access, you may have a Registration Authority who can help you. They can:

• find out if you have a smartcard or other authenticator already assigned to you
• issue you a new smartcard or other authenticator if you need one
• delete your existing profile

Read how to find your Registration Authority.

If your email is in use but do not have a Registration Authority, you will need to get help from the service you are trying to access.

If you change your mobile device

If you change the mobile device the authenticator is registered to, you'll need to transfer it to the new device. Find out how to do this.