Multi-Factor Authentication for NOAA Fisheries Public Applications

This page serves as a centralized resource to announce, educate, and alert the public and industry partners about upcoming changes to NOAA Fisheries web applications. All external facing applications that require a login will be transitioning to a new authentication method. Impacted applications are required to complete the transition by July 31, 2027.

What is happening?

Approximately 70 of NOAA Fisheries public-facing web applications are transitioning to Login.gov for secure, public federal authentication. These government applications must comply with the federal Zero Trust Cybersecurity Principle mandate to ensure public data protection and prevent phishing attacks. 

NOAA Fisheries web application teams will contact individual user groups during the coming months to share more information about when to expect the change.

Issues related to a specific permit, logbook submission, or local user roles must be sent directly to that application's help desk or regional product owner. 

What is Login.gov?

Login.gov is the public’s secure sign-in service for the U.S. federal government. It allows you to use a single username and password to securely access services across participating government agencies, including the Small Business Administration, the Social Security Administration, and now, NOAA Fisheries.

Instead of managing dozens of different passwords for various federal websites, you can use your single Login.gov account to sign in quickly and securely wherever you see the Login.gov logo.

What should users expect?

Centralized Security

Login.gov uses advanced encryption and multi-factor authentication to protect your private information against identity theft and phishing

Privacy First

Your data is strictly protected—Login.gov does not share your information between agencies or use it for any purpose other than securely verifying who you are

One Account, Multiple Services

If you already have a Login.gov account (for example, to access TSA PreCheck, federal jobs, or passport services), you can use that exact same account for your NOAA Fisheries applications. You will not need to create a new one.

Seamless Integration

When you access the application, the login screen will automatically route you to Login.gov. Once you have successfully logged in there, you will be automatically routed back to the application to use it as you are used to.

How does this impact you (the user)?

Legacy login credentials (usernames and passwords native to specific apps) are gradually being replaced by Login.gov accounts. 

What You Need to Do

Public users will need to complete a one-time registration setup after creating a Login.gov account to connect their secure Login.gov credentials to their preferred Fisheries applications.  

Security Steps

• Identity verification (one-time setup): For some applications, users must verify their real-world identity using government-issued identification once during initial setup  
• Authentication (every login): Proves you own your account using standard Multi-Factor Authentication through Login.gov
• Low-frequency users: For applications requiring only one-time annual registration, users will not have to repeatedly undergo dense identity verification tracking loops 

Other Frequently Asked Questions

What applications are impacted?

If you use a NOAA Fisheries application that requires a login, it will most likely be impacted by this transition. Application operations teams will communicate additional details with individual user groups regarding the timeline for implementing the solution within each application.

How will I know when the login process will change on the applications I use?

Application teams will be reaching out directly to their users notifying them of the change and when they can expect the transition to take place. Information will also be shared directly on the application.

What if I already have a Login.gov account?

You can use your existing Login.gov account (from TSA PreCheck or other agencies) to access NOAA Fisheries. Create an account if you do not have one.

Why are you adding steps to my login process? 

Cybersecurity threats are becoming increasingly sophisticated, and legacy systems that rely only on usernames and passwords are highly vulnerable to phishing attacks and data breaches. In line with the federal government's Zero Trust Cybersecurity Principle mandate, NOAA Fisheries is modernizing its systems to ensure public data protection. Once your one-time setup is complete, logging in will be a routine step that ensures your data reaches us securely, without administrative bottlenecks.

Is my personal information safe with a third-party verification tool?

Yes, your information is highly secure. Login.gov is not a commercial third-party vendor. It is a shared service provided by the U.S. General Services Administration, an official federal agency. Login.gov uses advanced, state-of-the-art encryption to protect your private data both while it is being transmitted and while it is stored. Login.gov adheres to strict federal privacy guidelines: Your data is never sold, shared between different agencies without your explicit permission, or tracked for any purpose other than securely verifying your identity. 

Can I just call in my data or permit request instead? 

No. To ensure security, speed, and accuracy, all transactions must be processed through our official digital applications. Our teams are not equipped to manually intake, verify, or log data over the telephone, and attempting to do so would create massive processing delays for your permits and logbooks. The transition to Login.gov is designed to keep your digital portal fast, accessible, and operational.