Account Security
Add an authenticator app, a passkey, or recovery codes to your PGAS account.
Two-factor authentication (2FA) protects your account even if someone learns
your password. EOMIS itself does not store any of these settings. They live on
your PGAS account page at auth.pgas.ph, together with your password, and
they protect every PGAS system you sign in to, not only EOMIS.
Is two-factor authentication required?
No, it is optional, but strongly recommended.
- If you have not set up a second factor, you sign in with your password only and are never asked to set one up.
- Once you add any second factor, the PGAS sign-in page asks for it every time you sign in with your password.
Opening your PGAS account page
Under Password & Two-Factor Authentication, click Manage security.
Your PGAS account page opens in a new browser tab, on the section where you manage sign-in methods. Sign in there if asked.
You can add more than one method. Adding at least two (for example an authenticator app and recovery codes) means that losing one device does not lock you out.
Methods you can add
| Method | What you need | How you use it at sign-in |
|---|---|---|
| Authenticator app | An app such as Google Authenticator, Microsoft Authenticator, or Authy on your phone | Type the 6-digit code the app shows |
| Security key or passkey | A device with a fingerprint reader, face recognition, or device PIN, or a hardware security key | Confirm on your device |
| Recovery codes | Somewhere safe to keep a list of codes | Type one unused code |
Authenticator app
From then on, the PGAS sign-in page asks for a fresh 6-digit code after your password.
Tip
Changing phones? Add the authenticator on the new phone before you wipe the old one, or keep recovery codes so you can get back in.
Security key or passkey
A passkey lets your device confirm it is you, with a fingerprint, your face, your device PIN, or a hardware security key.
Your device must be able to verify you (with a biometric or a PIN). A security key without a PIN or fingerprint is refused when you try to register it.
Once registered, a passkey works in two ways:
- As a second factor after your password.
- As a complete sign-in on its own, with no password; see Signing in with a passkey. Because of this, register passkeys only on devices that you alone use and that are protected by your own fingerprint, face, or PIN.
Some older security keys cannot be offered automatically on the sign-in page. They still work as a second factor after your password.
Recovery codes
Recovery codes are a backup for when you cannot use your other methods, for example if you lose your phone. You get a set of 10 codes, and each code works only once.
At sign-in, type one unused code where you would normally enter your authenticator code. When you have used most of them, set up a new set from your PGAS account page.
Recovery codes are a backup, not a main method. Treat them like a password, keep them away from your phone and laptop, and do not rely on them alone.
If you are locked out
If you have lost every second factor and have no recovery codes left, contact an administrator for help.