All About Two-Factor Authentication (2FA)
July 14, 2022
At ASCAP, we’re serious about protecting your music. A crucial part of that is keeping your personal data secure. That's why we’ve introduced two-factor authentication (2FA), an extra layer of security for your ASCAP Member Access account.
Here’s everything you need to know about 2FA.
What is two-factor authentication?
Two-factor authentication (2FA) adds an additional layer of security: after you enter your Member Access username/password, you will be asked to enter a one-time code that we will send to a verified email address or mobile number. This security code is used to help us verify your identity when you access your Member Access account.
Why is 2FA important?
Your Member Access account includes sensitive data like your banking and tax info, royalty history and mailing address. It’s very important to ASCAP that your private data stays private, so we have decided to launch this additional layer of security to help further protect your Member Access account.
How can I sign up for 2FA?
2FA is mandatory for all ASCAP members and designated users. The next time you log into Member Access, you will be prompted to set up 2FA by selecting an email address or a US or Canada-based, SMS-enabled mobile number that you can easily access. We will send you a six-digit security code to verify your identity. Once you enter the code, you’ll be taken to the Member Access dashboard.
Does this mean I will have to enter two sets of credentials every time I log into Member Access?
Not necessarily. When you’re setting up 2FA on a computer or mobile device for the first time, you can check the “Remember this device” box and you won’t be prompted to verify your identity again for 90 days. Please note that you may be prompted to verify your identity, before the 90 days have elapsed, if you have updated your browser version or started using a different browser.
If you don’t check the box, you will need to request and enter a new security code each time you log into Member Access on that device.
Do I have to activate 2FA? What happens if I don’t set it up?
Two-factor authentication is mandatory for all ASCAP members and designated users. You cannot log into Member Access without setting up 2FA.
For anyone that hasn’t yet set up 2FA, ASCAP automatically uses your current primary email address and/or phone number as your options for receiving a code. If you don’t have access to either of those methods for some reason (or if your primary phone number cannot receive SMS text messages), you will need to contact ASCAP Global Services before you can log into your Member Access account.
I’m an ASCAP member with designated users assigned to my account. Do they need to set up 2FA, too?
Yes. Every designated user must set up 2FA to verify their identity when they log into your Member Access account.
Keep in mind that designated users can only receive security codes via email, and they cannot update their own contact info in Member Access. If your designated user wants to use a new email address to receive their 2FA security code, you must update it on their behalf.
I’m a designated user for an ASCAP member account. Should I set up 2FA/Do I have to set up 2FA?
Yes. Everyone who is authorized to access our members’ accounts must set up 2FA to verify their identities when they log in to Member Access.
The 2FA setup process is slightly different for designated users. We can only send a security code to a designated user’s email address. Please make sure the email address we currently have for you is one that can currently access in order to receive your security code.
If you need to update the email address that we have on file for you as a designated user, please contact the primary account holder. For security reasons, we require the primary account holder to make any updates to your contact info.
I have (or represent) multiple ASCAP accounts. Do I have to set up 2FA for each one?
Yes. 2FA is required for each of your ASCAP accounts separately, and every designated user on each account.
It is fine to use the same email address and/or mobile phone number for multiple accounts, but you will still need to go through the 2FA setup process for each one.
My mobile phone is connected to a number outside the US and Canada. What should I do?
ASCAP can only send security codes to mobile numbers that use "1" as their country calling code (US and its territories, Canada, and certain Caribbean nations). If your number uses a different country calling code, select a current email address when you are setting up 2FA. We will send your security codes to the email address you selected.
What else can I do to help keep my ASCAP account secure?
Here are a few steps we recommend:
- Keep your ASCAP username, password and member ID private! Treat it like your bank account credentials. Never share these credentials with anyone under any circumstances. If you want to give someone else permission to access your account, you should make them a “designated user” as described below.
- Assign a “designated user” for your account. Do you have a manager, attorney, agent, employee or other trusted person who is helping you with your music career? You can make anyone a designated user of your Member Access account, with their own password. That way they can view or manage your account on your behalf, without potentially compromising your private login info.
Click the “Designated Users” link under the Profile menu in Member Access. Hit “Add,” then check off the permissions you want to give that user. You can change or delete permissions at any time. - Share your IPI number (not your private ASCAP member ID) when you’re working with collaborators. Your IPI number is a publicly-available number that distinguishes you from all the other writers/publishers in the world. Whenever you register your music with ASCAP, make sure to include your IPI number. Send your IPI number to your collaborators, and make sure you get theirs, too.
Get more details on how to keep your account secure at www.ascap.com/accountsecurity.
What if I can’t access any of the contact methods listed during 2FA setup?
You will need to contact Global Services to add your current email address before you can activate 2FA. Reach them at 1-800-95-ASCAP during normal business hours, Monday – Friday.
I haven’t received the security code I requested. What can I do?
- Click the “Resend code” option.
- Confirm that the phone number you selected to receive 2FA security codes is capable of receiving SMS text messages, and that your phone is connected to a US or Canada-based number. If not, select a current email address for your security code instead.
- If you selected an email address for the security code, check your spam folder.
- Check to see if there’s a typo in the email/phone number you selected. You will need to contact ASCAP Global Services if there is an error in your contact information. They will be able to verify your identity and update your email address on your behalf. Reach them at 1-800-95-ASCAP during regular business hours, Monday – Friday.
- Select a different contact method for your security code.
- If you’re still having trouble, call ASCAP Global Services at 1-800-95-ASCAP during regular business hours, Monday – Friday.
How do I change my email/mobile number for 2FA verification once I’ve already set it up?
The next time you log into Member Access (or after 90 days, if you clicked “Remember this device”), you can select a different email address or mobile number where we should send your security code.
You can also add or update new contact info after you’ve logged into Member Access; the next time you are asked to verify your identity via 2FA, you can select the new contact method you added.
I’m trying to enter the code you sent me, but it keeps giving me an error message. Help!
Make sure that you’re entering the security code correctly. If you’ve requested multiple codes, enter the one most recently received.
If you’re still having trouble, call ASCAP Global Services at 1-800-95-ASCAP during regular business hours, Monday – Friday.
I got locked out while I was trying to set up 2FA. What should I do?
After multiple unsuccessful attempts to enter the security code sent to you to set up 2FA, you will be temporarily locked out of your Member Access account.
We know it can be frustrating to get temporarily locked out of your account. Please understand that we set up 2FA this way to help protect you against unauthorized attempts to access your Member Access account.
Don’t worry, you won’t be locked out forever! Please try logging in and setting up 2FA again later.
How do I add a new “remembered” device?
To add a new remembered device, simply log into Member Access from the device and you will be prompted to set up 2FA; check the “Remember this device” box and you will not have to request/submit a security code for 90 days.
Please note that you may be prompted to verify your identity, before the 90 days have elapsed, if you have updated your browser version or started using a different browser.