UPDATED: Because of the information technology (IT) incident that impacted businesses around the world on Friday, July 19, we didn’t implement the MFA enhancements on July 21 to avoid related potential complications to users. Our implementation will now occur during the month of August 2024 – beginning August 5 and completed by August 26. This means the removal of SMS/text and voice as MFA options and registering for the Ping ID® mobile application will not be available until after the implementation in August.

Freddie Mac is committed to continuously enhancing and improving our security standards. We previously instituted multifactor authentication (MFA) to provide greater security when accessing our systems. To further strengthen security, we’re no longer going to support SMS/text or voice for MFA.

Risks Associated with SMS/Text and Voice MFA

Recent information suggests SMS/text and voice-based MFA are more vulnerable than other MFA methods to different types of attacks. Due to an increased number of cyberattacks focused on financial institutions, lack of encryption, network outages, social engineering and SIM swapping, there are additional risks associated with these authentication methods.

We’re Enabling a Stronger Form of MFA

Starting in August 2024, you’ll have two options for MFA: email and the new Ping ID® mobile application. We encourage you to register both methods so you’ll still be able to access our password-protected applications in the event you don’t have access to your primary method. The Ping ID mobile application is the preferred authentication method. It's also the most user-friendly, secure option and works on any modern mobile device.

How Does This Impact Me in August?

If you access Freddie Mac password-protected applications, you’re already registered for MFA. The impacts of this change will be minimal; they depend on what method(s) you’re currently using for MFA.

I’m Already Using Email as My Primary or Secondary Method

If you’re already using email as a primary or secondary MFA method, there will be no impact to you after implementation in August, for this MFA method. If you’re also registered with SMS/text or voice, these methods will go away and email will become your primary method. However, we recommend that you also register for the newly introduced Ping ID mobile application.

I’m Only Using SMS/Text or Voice as My Primary or Secondary Method

After implementation in August, these methods will go away. When you access Freddie Mac applications for the first time after implementation in August, you’ll be prompted to re-register for MFA using the email address associated with your account or by using the new Ping ID mobile application. It’s recommended that you register for both Ping ID mobile and email.

How to Register for Ping ID Mobile App

After implementation in August, you can register for the Ping ID mobile application from any Freddie Mac application login page.

Select the Management Portal link and login. After logging in: 

  • Click the image with your username in the upper right corner 
  • Select “Devices” 
  • Select “Add” 
  • Follow the directions to download and register the Ping ID mobile application.

Access our our Help Guide: Introduction to MFA for more information.