Troubleshooting


What do I need to troubleshoot Action ID & 2FA?

  • Please ensure you've created your ActionID and are using it to log in. Confirm as well that you have Two-Factor Authentication (2FA) set up - more information below.


Confirming 2FA is set up

  • Go to Action ID Login page at accounts.ngpvan.com.
  • There is an on/off toggle for 2FA (Two Factor Authentication)
    • If it is on, great!
    • If it is off, follow the instructions below


Setting up Two-Factor Authentication

Please remember that 2FA is mandatory for all VAN users. If you do not set it up, you will not be able to log in.

  • Go to accounts.ngpvan.com and log in with your ActionID and password
  • There is a toggle on that page for "Two Factor Authentication" that you will need to set to "On" after clicking Edit Profile. When enabling it, you will have the option of either using an Authenticator app (which we recommended), such as Google Authenticator. We strongly recommend using an authenticator app because this is the most secure method -- since your SMS/Text can still be hacked and you only have a limited amount of backup codes to use.
  • Download Google Authenticator on your Tablet or Smart Phone by going to Google Play (Android) or the App Store (iPhone)—Google Authenticator is an example of a free one, but there are others.
  • Another way to set up 2FA is using your phone number to receive a one time use code via SMS. 
  • Follow the on screen prompts to complete verifying your ability to provide a one time use code.
  • Once you are done setting up your authenticator app or phone number for two-factor authentication, you will also have the option to view your backup codes in case you ever need to log in and you are unable to use either an SMS message or an authenticator app. Store these backup codes in a secure place (like a password manager). 
  • Passwords.google.com & LastPass.com are examples of free password managers—but there are others
  • Whenever you are logging in from a new device, you will be prompted for a code, and also given the option to “Trust” the device and browser you are using. If you choose to "trust," you will no longer have to complete Two-Step verification from that device and browser combination moving forward. If you do not “trust” the device, you will be required to verify the device and browser each time you login from it. Select “Enable two-step verification,” and the process is complete. 


2FA FAQ

What is 2FA?

  • Two-Factor authentication is an additional security measure that helps make sure your login process is as secure as possible. This is becoming an increasingly common security measure on many websites and applications, particularly where sensitive information is stored.

Types of 2FA

  • Authenticator App (Most secure, recommended)
    • Most Authenticators should work, but we specifically tested the following:
    • Google Authenticator
    • Microsoft Authenticator
    • LastPass
    • Authy.com (This one is recommended if you don’t have reliable WiFi because you can download it on your desktop and use it without internet)
  • SMS/Text to Primary Phone & SMS/Text to Backup Phone
  • Backup Codes (more information below)


I lost access to my 2FA phone number

  • This will only happen if you do not have an authenticator app set up, or a back up phone set up, or, a saved and secure list of Backup Codes. 
  • An admin cannot change the phone number associated with your ActionID due to security reasons, since this defeats the purpose of two-factor authentication. 
  • Instead you can try to regain access to the old phone number or log into accounts.ngpvan.com on a computer that you’ve previously marked as trusted and change the phone number associated with the ActionID
  • If that doesn’t work you can submit a help ticket and we can change the email associated with your account

My 2FA code is not being sent

  • If the ActionID is set up with the correct phone number but the code isn’t coming in a text message, you may need to create a new ActionID at accounts.ngpvan.com.
    • You cannot use the exact email that you had your Action ID with before since you are locked out of that Action ID and there can only be one Action ID per “exact” email 
    • So, you need to create a new Action ID with a separate email
  • Once you have a new Action ID....
    • Either an administrator (such as the VAN Admin for your County Party/Campaign; or anyone with a VAN user profile above yours; or the state party if you are the committee admin txdem.co/VAN-Help) will need to unlink any VAN accounts linked to your old ActionID email so the user may link these accounts to their newly-created ActionID. 
    • VAN Admins: you can do this by going to Users, clicking on your user’s User Profile, clicking the dropdown of more     info, and selecting Unlink Action ID then send your user a new Action ID invite.
    • Or if you are trying to link your Action ID to a new/old user account that doesn’t have an Action ID linked, then you can use the invite link you received by email (as long as it hasn’t expired (48 Hours)


How do I get to/download my backup codes?

  • Go to accounts.ngpvan.com and log in using your ActionID. Once logged in, click “Edit Profile” near the bottom. 
  • Find “Backup Codes” and click “View”. You will then have the option to download or print them. We recommend you to do both so that way you will always be able to access them.
  • Keep in mind that each code can only be used once, so do not abuse them by using them as your 2FA on a regular basis. 


I forgot my password for my Action ID - what do I do?

  • Click “Forgot my password?” on the Action ID login screen after you click on Login with Action ID on texasvan.com to start the password reset process. DO NOT RESET YOUR PASSWORD FOR YOUR ACCOUNT NAME. As stated at the beginning of this document, no user has been able to login with account name since 9/5/18. So, resetting the account name’s password is pointless.


Do I need to re-authenticate with two-factor every time I log into a new site?

  • If you select "Remember this device," when you log into Action ID, then no. This will remember the device for 30 days. If you login from another device, however, you will have to re-authenticate.


I heard the authenticator app is more secure than texting - how do I switch over?

  • If you already log into VAN with Action ID and have 2FA set up, we recommend that you set up 2FA with an authenticator app rather than just stay with your SMS/Text Primary Phone Code since this can still be hacked.
  • Please set up your 2FA with an Authenticator App by going to accounts.ngpvan.com and log into ActionID. Click “Manage My ActionID Profile,” and under “Authenticator App,” click “Add Application.” This will take you through the workflow to enable an authenticator app.
  • A recommended authenticator app is Google Authenticator
  • Download Google Authenticator on your Tablet or Smart Phone by going to Google Play (Android) or the App Store (iPhone)—Google Authenticator is an example of a free one, but there are others


Do my volunteer accounts need to turn on 2FA?

  • If by Volunteer Accounts you mean Texas (7), no.  Texas (6) and up are impacted.  Check out txdem.co/TDP-User-Profiles for a listing of all User Profiles, also known as permission sets. 


I don’t have a smartphone - what do I do?

  • You don’t need a smartphone for 2FA - you can set up by receiving texts on any regular phone or tablet with internet connection

I don’t have a cell phone - what do I do?

  • If you have a tablet you can setup the authenticator app there and/or backup codes.  Otherwise, we recommend using Authy.com because you can download it to your desktop and use it without the internet.