Skip to main content

New! Manage EPCS Tokens

This article will provide guidance on managing tokens for providers who completed Experian identity proofing (IDP) during EPCS registration, and will add their new token on the website.

Role Required: Enrolled ePrescribe EPCS Prescriber
  
Note: Use of iPrescribe as a soft token is not yet supported. Please disregard any suggestions to use iPrescribe as the soft token.

Step 1: Access the Token Management Screen

Important: Before trading in your current smartphone or tablet with your authenticator app ("soft token") on it, register a second authenticator application to your EPCS account. Authenticator applications/soft tokens do not transfer on to your new device, causing you to lose access to your authenticator app and the ability to e-prescribe controlled substances. If you do not already have a second authenticator registered to your EPCS account, you'll need to repeat identity proofing and EPCS onboarding to restore access.
  1. Navigate to any patient’s chart by clicking Patients > Patient Name > eRx tab.
  2. Open the Menu icon (☰) in the top left corner.
  3. Click Utilities > Token Management.

    af760855-d067-4af5-95f7-41e32411e147.png
  4. Log into the EPCS Gold Prescriber Dashboard by entering your NPI and EPCS passphrase (the password created during EPCS enrollment).

    36867b6c-00b7-4004-8e19-d4f9bcdcd34c.png
  5. Enter your One-Time PIN (OTP) from an existing token.

    0af65bd1-a0b5-4abf-924e-5491facb0b70.png
  6. Agree to the Terms of Use and Conditions for EPCS Gold Services to proceed.

    7149cf0c-ef92-4454-a24e-1916ea36b4ee.png
  7. Click the Tokens tab or the Manage Tokens button.

    09fddf21-0761-472b-833e-15173abbfc8c.png

Tip: To ensure the best ePrescibing experience with DrFirst, we recommend using a current version of one of the following browsers:

  • Chrome 121 or newer

  • Microsoft Edge 121 or newer

  • Firefox 122 or newer

  • Safari 17.3 or newer

Using an older browser may still work, but some newer features may not function as expected. Learn more about DrFirst’s browser support policy.

Step 2: Add a New Token

  1. Click Add New Token.

    30441dc3-cb79-4e66-be6d-e4ba65994546.png
  2. Fill in the required fields:
    • Token Manufacturer (e.g., ONESPAN)
    • Token Issuer: DRFIRST
    • Token Type: Choose OTP HARD TOKEN (physical token) or OTP SOFT TOKEN (virtual token via the VIP Access app).
    • Token Name: Nickname to identify your token (e.g., "iPhone token", "Fob").
    • Serial Number / Credential ID:
      • Hard token: Number on the back of the key fob (no dashes/spaces).
      • Soft token: ID shown in the VIP Access app at the top of the screen (no dashes/spaces).
    • OTP: Enter the current security code from the key fob/app token.
  3. Click Save.

    c9c83100-88c5-47b3-8053-405d49a04b28.png

Step 3: Enable a Token

  1. Locate the token you wish to enable by clicking Enable under the Action column.

    2d91f239-c7ba-4285-bdd4-86364b860f74.png
  2. Enter a valid One-Time PIN (OTP) from the token.
  3. Click Activate to enable the token.

 

Disable a Token

  • Locate the token you wish to disable by clicking Disable under the Action column.
  • Choose a reason from the dropdown:
    • For temporary issues, select Temporarily Unavailable.
    • Other options will permanently disable the token.
  • Click Disable to confirm.

    f34f200d-ab1c-4493-8248-17791b53c496.png

Quick Tips:

  • Hard tokens have non-replaceable batteries. Request a new token if it dies.
  • Per the DEA, the soft token must be on a different device than the one used for prescribing controlled substance.
  • Use unique nicknames to make tokens easy to identify later.

Request a New Hard Token

A hard token is a physical device used to generate a one-time passcode (OTP) when prescribing controlled substances through EPCS. New hard tokens are provided at no charge.

Follow these steps to request a new hard token:

  1. Visit the DrFirst Hard Token Request storefront to order a new hard token.

  2. Select the number of hard tokens you need, then click the Add to cart button.  
    hard-token-request-drfirst.png

  3. In the pop-up window, click View cart. You can also access your cart by selecting the shopping bag icon.

  4. Review your order, then click Check out.

  5. In the checkout screen, enter your shipping information. The payment and billing address fields can be left blank as new tokens are free. 

  6. Review your information, then click the Complete order button to finalize your order.

  7. After submitting your order, you’ll receive a confirmation email with a link to check your order status.

  8. Once your new token is shipped, you’ll receive another email with your tracking number. 

    • Hard tokens typically ship within 5-8 business days.

  9. Once your hard token is delivered, you’ll receive a delivery confirmation email.

Note: If you need to order a replacement hard token, you’ll need to verify if it’s still under warranty by contacting our 24/7 ePrescribe Team at (215) 658-4550 option 5. If it’s not under warranty, a $25 fee will incur.

 

Activate Your Hard Token

Your hard token will not be activated when it arrives. Before you can use it to prescribe controlled substances, you must add it to the DrFirst EPCS Gold Prescriber Dashboard.

  1. Log in to EPCS Gold Prescriber Dashboard.
  2. Select the Tokens tab, then click Add New Token.
  3. Enter the required token information:
    • Token Manufacturer: ONESPAN
    • Token Issuer: DRFIRST
    • Token Type: Select OTP HARD TOKEN
    • Token Name: Enter a nickname to identify the token, such as “OneSpan” or “Fob.”
    • Serial Number / Credential ID: Enter the serial number found on the back of the hard token. Do not include dashes or spaces.
    • OTP: Enter the current security code displayed on the physical token.
  4. Click Save.

Once the token has been added and enabled, it can be used for EPCS prescribing.

 

If you need help with any of these steps, please contact our 24/7 eRx Support Team for assistance at 215-658-4550 option 5.