Setting Up VIP Access on a New Phone
Last updated: February 18, 2026
Getting a new phone? Before you trade in your old device, you'll need to migrate your credential or register a second authenticator to your EPCS account. If you don't, you'll lose access to your authenticator app and won't be able to e-prescribe controlled substances.
What you'll learn
How to migrate your credential to a new device
How to add a second token to your EPCS account
How to disable your old token after switching devices
Already got rid of your old phone? Unfortunately, authenticator apps don't transfer to new devices automatically. You'll need to contact DrFirst Support to complete identity proofing again and register a new token.
Migrating Your Credential
If you still have your old phone, you can migrate your credential directly to your new device using the VIP Access app.
Open the VIP Access app on your current device
Select Migrate Credential from the menu
Select Generate Code to generate a migration code on your current device
Download the VIP Access app on your new device
Use the VIP Access app on your new device to scan the code generated on your current device
Once the migration is complete, your new device will have the same Credential ID as your old one.
Adding a New Token
If you'd prefer to add a second token instead of migrating, this keeps your old token active as a backup until you're ready to disable it.
Access the token management screen
Go to the EPCS Gold Prescriber Dashboard and go to Utilities > Token Management
Log in with your NPI number and existing passphrase
Select your existing token from the Token dropdown
Enter the one-time pin from that token
Click the Tokens tab
Click Add New Token
Add a VIP Access soft token
Install the VIP Access app on your new device
iOS — Download from App Store
Android — Download from Google Play
Select Code Generator > Add
Complete the required fields
Token Manufacturer: SYMANTEC
Token Issuer: DRFIRST
Token Type: OTP SOFT TOKEN
Token Name: Create a nickname to identify this token — don't use underscores
Credential ID: Enter the Credential ID from the top of your VIP Access app. Use the format SYMC########### with no spaces.
One-time pin: Enter the current security code from your VIP Access app
Click Save
You'll see a confirmation that your token was successfully paired
After You Switch Devices
Once you've set up your new device and confirmed your new token works, disable the old one.
Return to the Tokens tab in the EPCS Gold Prescriber Dashboard
Find your old token and click Disable
Enter a reason for disabling
The old token will now show as Inactive
Keep in mind — DEA requires that you e-prescribe controlled substances on a separate device from your authenticator.
Next Steps
Once your new token is active and your old one is disabled, you're all set to continue prescribing controlled substances.
Frequently Asked Questions
Q: What if I already got rid of my old phone?
A: You'll need to contact DrFirst Support to complete identity proofing again and register a new token. There's no shortcut—this is a security requirement.
Q: Can I have more than two tokens?
A: Yes. Having multiple tokens gives you backup options if one device is lost or unavailable.
Q: What's the difference between a soft token and hard token?
A: A soft token is an app on your phone that generates one-time pins. A hard token is a physical key fob that does the same thing. Both work for EPCS authentication.
Q: Should I migrate or add a new token?
A: Migrating is faster if you just want to move to your new device. Adding a new token is better if you want to keep your old device as a backup until you're sure everything works.
Related Articles
Keywords: VIP Access, new phone, authenticator, soft token, migrate credential, EPCS token, two-factor authentication
Categories: EPCS, DrFirst, Troubleshooting
Roles: Providers