EPCS Enrollment FAQ for Providers
Last updated: September 28, 2026
Answers to common questions about enrolling in Electronic Prescribing of Controlled Substances (EPCS) with DrFirst. For the full walkthrough, see Enrolling in EPCS with DrFirst: Step-by-Step Guide for Providers.
Timeline and process
How long does EPCS enrollment take?
Timelines vary, but it typically takes 3 to 5 days. The most common delay is finding a time for you and your EPCS administrator to activate your access together.
Can I start identity proofing before ePrescribing is set up?
No. You only receive the DrFirst invite after your ePrescribing enrollment is complete. The steps have to happen in that order.
Why is EPCS enrollment so complicated?
Federal regulations for controlled substances require extra security to prevent misuse and diversion. Identity proofing, two-factor tokens, and passphrases are all required by law.
After my access is activated, when can I prescribe controlled substances?
After your EPCS administrator activates your access and Canvas Support finalizes your enrollment, it can take up to 24 hours before prescriptions go through, depending on when pharmacies update their directories.
Identity proofing
Do I need to turn off fraud alerts on my credit report?
No. Fraud alerts don't need to be turned off.
What if I don't pass identity proofing?
Your EPCS administrator will see an IDPFAILED status. You can try up to 3 more times that day. After 3 failed attempts, Experian locks your account for 24 hours, and it can't be unlocked early. Before trying again, check your details against your credit report at annualcreditreport.com. If your credit history uses a P.O. box, enter that instead of your home address. You need a U.S. address on your credit history to pass. If you still can't pass, contact DrFirst Support.
What does "IDP Verified" mean?
Identity proofing is done, but enrollment isn't finished. Go back to the DrFirst page and click Check Status. If more than 24 hours have passed, you'll need a new invite.
Sessions and time limits
What if I forget to click Check Status?
If you don't click Check Status within 24 hours of starting, your enrollment gets stuck and you'll need a new invite. Ask your practice administrator to request one from Canvas Support.
What if I get disconnected or my session times out?
Open the link in your invite email and enter the resume code DrFirst showed you on the identity documents screen. It's also shown on the Progress saved screen. If you don't have the code, ask your practice administrator to request a new invite from Canvas Support.
Tokens and codes
I can't scan the QR code.
Open your phone's camera and hold it so the QR code is in the viewfinder. Move your phone closer or farther until it focuses, then tap the banner that appears. You may need to try a few times.
My VIP Access code isn't working.
Make sure you're entering the current code, since it changes every 30 seconds. Check that your phone's date and time are set to automatic, because the codes depend on the clock. When DrFirst asks you to choose a token, pick the one that starts with SYMC.
I chose Push Notification (iPrescribe Authenticator) by mistake.
It depends on how far you got. If you registered a token and paid for iPrescribe, ask your practice administrator to request a new invite from Canvas Support, then contact DrFirst Support about a refund. If you didn't register a token or pay, go back to the token page: open the link in your invite email, enter your resume code (or repeat identity proofing if you don't have it), click Add New Token, and click Add under Code Generator.
Should I register a backup token?
DrFirst recommends it. If you lose access to your only token, you'll have to repeat the entire identity proofing process.
I'm getting a new phone.
In the VIP Access app menu, choose Migrate to move your credential to the new phone. See Setting Up VIP Access on a New Phone.
Passphrase and sign-in
I forgot my passphrase.
You can reset it through DrFirst using the security question you set during enrollment. See Resetting Your DrFirst Passphrase.
I'm seeing "Authentication failed. Access is denied."
Check three things: you picked the SYMC token, you're using the current code, and your passphrase has no special characters. See Troubleshooting DrFirst Error | Authentication failed. Access is denied.
I'm locked out after several failed tries.
DrFirst locks your account for about 15 minutes, even if the screen doesn't say so. Wait, then try again with a fresh code. You can't reset your passphrase while you're locked out.
Getting help
Where do I get help with DrFirst?
For VIP Access, passphrase, token, or lockout problems, contact DrFirst Support. Their chat bubble gets the fastest response. Have your NPI and Invite ID ready. For a new invite, ask your practice administrator to request one from Canvas Support.