Skip to content

Multi-factor authentication for the ESH apps


When logging into ESH after Thursday 4 June, you will need to enter your username, password, and then a verification code sent to your email. This adds an extra layer of security to your account.

Setting up MFA for ESH

  1. 1

    Enter login details

    • Navigate to the ESH login page

    • Enter your Username and Password, then select Sign in.

  2. 2

    Code required screen

    • After signing in, you will be taken to a Confirm Email Code screen.

    • A message will confirm that a code has been emailed to your registered email address.

  3. 3

    Retrieve your email code

    • Open your email inbox and locate the email titled 'Your authentication code'.

    • The email will contain a verification code.

    Note: Codes expire within 15 minutes.

  4. 4

    Enter and confirm the code

    Return to ESH, enter the code in the Code field, and select Confirm to complete login.

  5. Finished!


Troubleshooting

If the code expires

If you see a message that your verification code has expired, select Resend Code to receive a new code.

Open the most recent email, copy the new code, return to ESH, enter the code, and select Confirm.

Signing in again

Each login attempt generates a new code. Only the most recent code will work.

Changing email

A Change Email option is available within ESH.

Enter a new email, confirm it, and provide your password to submit. This will then take you back to the login screen.

Important notes about changing email

  • Changing an email address will generate codes for both the old and new email addresses. Only the code sent to the new email address will work. The code sent to the old email address will not work.
  • This does not update the Assessor Online email address. This only updates the ESH app login email address. Assessors should also update email addresses via EMS Assessor Online when updating their login email.

Key things to remember

Verification code required on every login.

Codes expire after 15 minutes.

Use Resend Code if needed. Only the most recent code works.