Getting patients started with NHS login

This guide supports health and care staff as they help patients access health and social care services with NHS login. Watch our instructional video or read our step by step guidance.

NHS login and Microtest

NHS login works differently in services that connect to the GP medical record, for patients at practices that use the Microtest clinical system. View specific guidance for Microtest practices.

1. Choose a website or app

Patients can create an NHS login from any health and care website or app that shows the NHS login button.

Continue to NHS login

2. Set up an NHS login

When they click the button, the patient will be asked to:

provide an email address (with more than 6 characters)
choose a password
accept the NHS login terms and conditions

They will then receive an email containing a security code. They must enter this security code to confirm their email address. They will then be asked to give their mobile phone or landline number. Another security code will be sent to this phone number. They must enter this security code to confirm their phone number.

This means they have an NHS login with the lowest level of identity verification.

This will allow the patient to do simple tasks like book a COVID-19 test.

3. Prove who they are

The patient must then verify their identity to a medium level or a high level. The level of verification will depend on the website or app the patient wants to use and the type of information they want to access.

Medium level verification

The patient will be asked to enter their NHS number, date of birth and the postcode of their home address as registered with their GP practice. If they do not know their NHS number, they can enter their name instead. This information is then checked to correspond to an NHS record on the Personal Demographics Service (PDS).

Medium level verification will allow patients to do things like contact their GP or receive notifications. It does not provide access to health records or personal information.

High level verification

The patient must prove who they are in order to gain access to health records or personal information. To do this, the patient has 4 options.

Use a fast-track ID check

The patient can choose to transfer a previous ID check for GP online services to NHS login if they use the mobile number on their NHS record. This means they do not need to have their ID re-checked and the process is much quicker.

Submit photo ID and a face scan

The patient will be asked to submit a photo of their ID and then take an automated scan of their face. Instructions will be given on how to do this using the camera on their device. The scan will then be used to match the patient’s face with their photo ID.

The accepted types of photo ID are:

passport
UK driving licence, either full or provisional
a full European driving licence
European national identity card
Biometric Residence Permit (BRP), UK Residence Card, or EEA Biometric Residence Card (BRC)

During the scan the screen will flash and change colour. If flashing lights or colours make the patient feel unwell, they can record a video instead.

Submit photo ID and a video

The patient will be asked to submit a photo of their I.D. and record a short video of their face.

The accepted types of photo ID are:

passport
UK driving licence, either full or provisional
a full European driving licence
European national identity card
Biometric Residence Permit (BRP), UK Residence Card, or EEA Biometric Residence Card (BRC)

Before they record their video, the patient will be shown 4 randomly generated numbers. They will be asked to tell us what the 4 numbers are.

To do this the patient can:

say the numbers
sign the numbers using British Sign Language
write the numbers down and show them

Once submitted, the patient’s identity will be carefully checked by our ID checking team and should be verified within two hours. The patient will be emailed to let them know if the ID check has been successful.

Use registration details from their GP practice’s online services

When a patient signs up to use their GP practice’s online services, they will be given three registration details.

The registration details are:

a Linkage Key (which could be called a Passphrase)
an ODS Code (which could be called an Organisation Code or Practice I.D.)
an Account I.D.

If the patient uses this information to prove who they are, it is automatically checked with the GP practice’s system, along with the patient’s name and date of birth. During this process, the patient’s NHS number and health information is matched to their NHS login.

To use this option, the patient should select ‘No, I do not have photo ID', when asked if they have photo ID.

If the patient has not already been verified to medium level, they will also be asked to enter their date of birth, the postcode of their home address as registered with their GP practice, and NHS number. If they do not know their NHS number they can enter their name.

4. Log in and use the website or app

Once they have completed these steps, the patient will be able to use their NHS login to access their chosen websites and apps, wherever they see the NHS login button.

The patient can continue using their email address, password and the security code sent to their phone number for authentication. They can also choose to be 'remembered' on their device, the first time they log into a website or app after setting up their NHS login. This means they can log in using their username and password, without the need to enter a security code.

Some websites and apps will allow users to authenticate with biometric data, using fingerprint or facial recognition.

GP practice information

If you work at a GP practice, patients may need your help with NHS login. See GP practice NHS login guidance for step-by-step guidance on how to provide GP Online registration details to patients, in your clinical system.

Last edited: 28 November 2023 2:58 pm