IHSS One-Time Passcode: What Changes October 24 and What to Do Now

The IHSS Electronic Services Portal (ESP) is changing how you sign in. Starting October 24, 2026, ESP begins using a one-time passcode — a temporary code sent to you — to confirm who you are. The change is being rolled out in phases, so you may not see it right away. There is one thing worth checking today: the email address and phone number IHSS has on file for you, because that is where your passcode will be sent. Source: California Department of Social Services — IHSS Electronic Services Portal help.

What’s changing on October 24?

Instead of signing in with your password, you will enter a temporary passcode. The passcode is good for 10 minutes and can be used only once. A new one is sent every time you need it.

CDSS describes this as a way to keep your account safer: even if someone else knows your old password, they cannot sign in without the passcode, and because the code changes every time, it is harder for anyone else to get into your account.

You choose how your passcode arrives:

• Email
• Text message
• An automated voice call to your phone

The options you see depend on the contact information already on file. One more thing to expect: the change is being rolled out in phases, so you may not see it on October 24. If a co-worker is asked for a passcode and you are not, nothing is wrong.

Do this before October 24: check your contact info

Your passcode goes to the email address or phone number IHSS has on file. You can confirm what is on file on the Contact Information screen in ESP.

There is one timing rule worth knowing before you change anything. If you recently changed your email address or phone number, you must wait 24 hours before the new contact information can be used to receive a passcode — unless additional verification is completed.

When will I need a one-time passcode?

A passcode is used when you log in to your ESP account or the EVV Mobile App, when your password has expired or you choose to reset it, when you register for an ESP account for the first time, when you update your contact information, when you set up direct deposit, when the IHSS Service Desk helps you change your email address, and when a recipient assigns you as their provider through the eHire process.

In list form, a passcode is used when:

• You log in to your ESP account
• You log in to the Electronic Visit Verification (EVV) Mobile App
• Your password has expired
• You choose to reset your password
• You are registering for an ESP account for the first time
• You are updating your contact information
• You are setting up direct deposit
• You are changing your email address with help from the IHSS Service Desk
• A recipient assigns you as their provider through the eHire process

If you are new to the portal, our Direct Deposit & ESP guide walks through setting up the account itself, and the EVV guide covers how check-in and check-out work.

How do I log in to ESP with a one-time passcode?

1. Go to etimesheets.ihss.ca.gov.
2. Enter your ESP username, then select Continue.
3. You are taken to the ESP One-Time Passcode Login screen.
4. Choose how you want your passcode: Email, Text, or Phone Call. The choices available depend on the contact information on file with your county IHSS office.
5. Select Continue.
6. Enter the passcode you received, then select Login.

Check your email or phone right away after you request the passcode, so you have enough time to enter it. Type it carefully and follow the instructions on the screen.

Why didn’t I get my IHSS passcode?

Wait a few minutes for it to arrive. If you chose email, check your inbox and your spam folder. If it still has not arrived, select Resend Passcode. A passcode also will not reach you if the email address or phone number on file is wrong, or if you changed it within the last 24 hours.

Work through it in this order:

• Give it a few minutes. The passcode may still be on its way.
• If you chose email, open your spam or junk folder as well as your inbox.
• Still nothing? Select Resend Passcode.
• Check whether the contact information on file is still correct. If it is not, see the section on changing your phone number or email below.

What happens if I enter the wrong code too many times?

Your ESP account is temporarily locked if you enter your one-time passcode incorrectly 5 times, or if you request more than 3 passcodes. If that happens you can wait 30 minutes, or unlock the account yourself by selecting Unlock Account Now and answering your security questions. You can also unlock it by calling the IHSS Service Desk at (866) 376-7066, Monday through Friday, 8 a.m. to 5 p.m., except holidays.

So there are three ways out of a locked account:

• Wait 30 minutes, then try again.
• Select Unlock Account Now and answer your security questions.
• Call the IHSS Service Desk at (866) 376-7066 (Monday through Friday, 8 a.m. to 5 p.m., except holidays).

Source for this section: CDSS ESP One-Time Passcode Guide(the “Things to Remember” page), posted on the CDSS ESP help page.

My passcode expired. What now?

A passcode expires 10 minutes after it is sent, and it can only be used once. If yours expires, select Resend Code to get a new one, then enter it right away.

An expired passcode is not a problem with your account, and it does not mean you did anything wrong. Because each code works only once, the same thing happens if you reuse an older code from an earlier email or text: request a fresh one and use that.

How do I change my phone number or email for ESP?

You can see what ESP has on file on the Contact Information screen. To change it, request a passcode, choose how you want to receive it, enter the passcode, then select Edit. Your email address is changed by contacting the IHSS Service Desk at (866) 376-7066, Monday through Friday, 8 a.m. to 5 p.m., except holidays. If you cannot get into your account at all, contact your county IHSS office.

Step by step:

1. In ESP, open the Contact Information screen and check what is on file.
2. Request a one-time passcode and choose how you want to receive it.
3. Enter the passcode as instructed.
4. Select Edit and make your updates.

Two exceptions are worth remembering. Email address changes are handled by the IHSS Service Desk at (866) 376-7066 (Monday through Friday, 8 a.m. to 5 p.m., except holidays) — and that call is itself one of the moments a passcode is used. And if you cannot get into your ESP account at all, contact your county IHSS office to update your contact information.

I got a passcode I didn’t request — is it a scam?

A passcode is only sent when someone requests it. If you get one you did not request, ignore it and delete it, and do not click any suspicious links. Never share your passcode with anyone.

Three rules from CDSS are worth repeating:

• Do not share your one-time passcode with anyone.
• A passcode is only sent to you when it is requested.
• If you receive a passcode you did not request, ignore it and delete it — and do not click any suspicious links.

Where can I get help?

• IHSS Service Desk — (866) 376-7066, Monday through Friday, 8 a.m. to 5 p.m., except holidays. This is the line for one-time passcode questions.
• Your county IHSS office — if you cannot access your ESP account and need your contact information updated. Find yours on our county pages.
• CDSS training materials — the ESP OTP Guide is posted on the CDSS ESP help page.
• CDSS webinars for providers and recipients cover the latest ESP features, including the one-time passcode, and each one includes live questions and answers. The webinar schedule is posted by CDSS.

Once you are signed in, our timesheet guide covers submitting hours correctly, and the timesheet violations guide explains what counts as an error.

Source: California Department of Social Services — IHSS Electronic Services Portal help, and the CDSS/IHSS provider notice dated October 14, 2026 announcing the One-Time Passcode.