INSS ‘tightening’: new rule is mandatory and comes into force on this date

Edifício da Segurança Social. Crédito: Lusa

Social Security will make two-factor authentication on the Social Security Portal mandatory from May 12th. The measure aims to reinforce the security of citizens’ accounts and prevent improper access and fraud situations.

The new feature will apply to users who enter the portal with their Social Security Identification Number, known as NISS, and password.

According to , and with this change, in addition to the password, an additional verification code will be required at the time of access. This code works as a second layer of protection on the portal.

Users must activate the system by May 11

Social Security recommends that users activate two-factor authentication by May 11th.

The objective is to avoid constraints on the day the measure becomes mandatory, namely technical difficulties or overload of support services.

The entity emphasizes that early activation will ensure normal access to the portal, especially for those who regularly use digital services.

Measure reinforces data protection

According to Social Security, two-factor authentication prevents unauthorized access to accounts, even when third parties know the password.

In practice, anyone trying to log into an account will have to confirm their identity using an additional code, sent to the contacts associated with the user.

This protection is considered important at a time when digital fraud attempts continue to affect public and private services.

Another new feature associated with the activation of 2FA is the possibility of simplifying the login process.

Users will now be able to access the portal with their registered email address, replacing the NISS.

For the system to work correctly, it is essential that the contacts associated with the account are up to date, including email and cell phone number.

Social Security warns of scams

In the same statement, Social Security once again warned of fraud attempts.

The entity remembers that it does not request bank details, passwords or access codes through links sent by SMS or email.

Any data update must be done exclusively through the Social Security Portal, avoiding access via calls received in suspicious messages.

Companies already use this model

This authentication model has been in effect for companies since February 26th.

Now, the obligation will be extended to citizens who use the portal with NISS and password.

Social Security had already warned, in March, of a phishing attempt aimed at obtaining sensitive data from citizens. The new measure therefore appears as yet another way to reduce the risk of fraud and protect access to digital services.

Also read: