E-Prescribing: Identity Proofing & EPCS

Last updated: May 29, 2026

Complete the below steps to be able to prescribe controlled substances through DrFirst.

⏱ About 10 minutes — Just follow each step carefully and you'll be all set! All steps are required to fully activate your EPCS account.

Watch DrFirst's instructional video

  1. In your email invitation from DrFirst, click the link "Enroll now".

image.png

  1. In the box labeled "I have an Invite," the NPI # and the Invite ID will auto-populate. Click on "Proceed".

image-2.png

  1. Complete your information. Enter your personal address and cell phone number.

IDP proof.png

Then scan the QR code with your phone — it will ask you to take a photo of your driver's license and a selfie.

f2fc63bd-2a74-4c99-8b17-4e9c75c023e2.png

📝 Write down the alphanumeric code shown on screen — it saves your progress if something goes wrong!

Once done, go back to your computer and click "Check Status."

  1. Download the VIP Access app on your phone: vip.symantec.com

Choose ADD under "Code Generator".

58f396ff-4365-43b9-8c33-457253a6b49e.png

Enter the following details:

Token Manufacturer: SYMANTEC

Token Issuer: DRFIRST

Token Type: OTP SOFT TOKEN

Token Name: Any name you like

Serial / Credential ID: Found at the top of your app — format: SYMCXXXXXXXX (no spaces)

cred ID.jpeg

One-Time Password (OTP): The 6-digit code currently showing in the app

Click Save when done.

  1. Create a passphrase you'll remember — you'll enter this every time you prescribe a controlled substance. *DrFirst recommends that you do not include a special character for your passphrase.

    Click Continue when done.

    a1017a71-8657-4d71-9b4b-da43f6814b29.png

  1. Enter the number texted to your mobile device. If you did not receive a text message, you will receive a letter in the mail with the number in 5-6 business days.

dc9dd866-63b0-47a9-9bf6-a8842db087b6.png

  1. Complete the Logical Access Control (LAC) step. This requires help from another person. Instructions are HERE. If your admin has issues, contact support at getsupport@osmind.org. We are happy to help!

  2. 🎉 You're done! You can add medications and send prescriptions to pharmacies directly from the 'E-prescribing' tab in Osmind.

E-Prescribing Setup: Common Issues and Solutions

While the main setup checklist covers submitting your e-prescribing request, the actual enrollment process has several steps where users commonly get stuck. This guide addresses the most frequent pain points to help you complete EPCS setup smoothly.

Understanding the E-Prescribing Enrollment Process

After submitting your e-prescribing request through Osmind, you'll receive DrFirst credentials and need to complete three steps:

  • Identity Proofing — The prescriber completes this step to verify their identity

  • Logical Access Control (LAC) — Your designated admin completes this step with the prescriber present to authorize e-prescribing permissions

Resolving Common Setup Issues

Email Address Conflicts
If you get an "email address is in use" error during enrollment, you likely have an existing Dr. First account from a previous EHR. You'll need to either disable that account or provide a different email address for your Osmind e-prescribing setup. Contact support if you encounter this error.

LAC Process Confusion
Your designated admin (not the prescriber) logs into DrFirst to complete Logical Access Control. The prescriber must be present during this step to provide their NPI and passphrase for verification. If you encounter authentication errors when entering the prescriber's NPI during LAC, try switching to Chrome browser.

Password Requirements
DrFirst uses two different credentials that users often confuse:
Signature Password — Your first name in lowercase + "rx" (e.g., "janerx") — used for all prescriptions.
Signing Passphrase — The passphrase you create during identity proofing — used only for controlled substances.

Two-Factor Authentication Setup
Use the VIP Access app by Symantec (not iPrescribe) for two-factor authentication. Download from your app store or from https://vip.symantec.com/. The DEA requires this app be on a different device from the one you use to prescribe.

Feature Not Appearing After LAC
E-prescribing won't appear in your Osmind account immediately after completing LAC. You must contact Osmind support to enable the feature on their end before you can begin prescribing electronically.

FAQ

1. What is a token? How do I get one?

  • A token is used for completing identity proofing and using EPCS. A Soft Token can be downloaded. A Hard Token, which is optional, can be requested from DrFirst. Please contact us at getsupport@osmind.org. It may have an additional fee.

2. What if I'm using DrFirst with another EHR currently?

  • You will not lose access to your other account. Your token(s) and passphrase may be used to sign controlled prescriptions for both accounts.

3. Does medication history transfer?

  • DrFirst has the ability to display 12 months of medication history from Surescripts. From this display you will need to mark as active any medications the patient is currently taking in order for them to show within the EHR. Check out the e-prescribing collection of articles in our support center or reach out for more information on using DrFirst.

4. I got a new phone. What do I do now?

5. I forgot my passphrase or got locked out. What should I do?

  • If you've forgotten your passphrase, reset it at: https://ui.epcsdrfirst.com/pob/forgotpass

  • If you're locked out after multiple failed attempts, wait 15 minutes for the lockout period to expire before trying again

  • Verify you're using the correct token—the credential ID must match what's on your phone

  • If you still have access to your old phone, follow these steps.

  • If you do not have access to your old phone, you will need to complete the identity proofing process with DrFirst again. Please contact us at getsupport@osmind.org.