OH|ID is a service run by the State of Ohio. It complies with state information technology policies as well as federal NIST 800-53 and NIST 800-63 AAL2 guidelines to protect your privacy and security. 

Your Information is Your Business

To make your OH|ID account secure, we need your legal name, email address, and date of birth. We also ask for a phone number or alternate email address, which we will use to help you recover your password if you forget it or it expires. 

Some agencies and applications that use OH|ID may require you to provide additional information to confirm your identity. This extra layer of security allows us to make sure you are you and not someone pretending to be you.

We use the information that you submit to OH|ID only to create or update your account or confirm your identity. We do not share, lease, or sell your information to anyone. Review our Privacy Notice and Policies for more information on how your information is collected, saved, and used.

Use a Strong Password

OH|ID requires strong passwords to protect your account. Our requirements follow state security policies and leading security practices. These requirements are provided for you each time you create or change your password.

OH|ID passwords must be between 8 and 30 characters long. They must contain both upper-case and lower-case letters and at least one number and one special character. They cannot include your first or last name or your OH|ID.

To choose the strongest password possible, follow these suggestions (Source: FTC.gov):

• Longer means stronger. Choose a phrase of three or four words instead of a single word. OH|ID passwords can be up to 30 characters long.
• Stay random. Do not use common words or phrases. Instead choose words that mean something to you but would not make sense to others. For example, “mothPl@sticGr33n” is a stronger password than “gobucks0$U2022.”
• One password, one account. Do not use the same password on OH|ID that you use for other accounts. 

Protect your passwords like you would your house keys. Do not share your passwords with others or write them down where others may find them. Consider using a password manager, which is a software program or app that remembers your passwords for you and helps you securely log into your accounts.

Going an Extra Step for Your Security

Some OH|ID agencies and applications use an extra process to make your login even safer. This process is commonly called two-step verification, multi-factor authentication, or MFA. In addition to your user name and password, a system using two-step verification will ask you for a one-time personal identification number, also called a PIN. This PIN is provided to you via text message, voice message, or email. You will choose at least two ways to get your PIN when you are asked to set up two-step verification.

For your protection, we will send a confirmation message to the email address and the SMS text message number in your account whenever a change is made to your 2-factor verification settings. If you made the change and the information is correct, you do not need to do anything else. If you did not make the change, or the information is incorrect, please contact the appropriate agency helpdesk.