Does Login.gov accept a VoIP number? Sign-in, identity checks and my Social Security

Why a lockout here is serious

Login.gov is plain about it: “Login.gov cannot grant you access to your account if you get locked out and/or lose your authentication method. If you get locked out, you’ll have to delete your account and create a new one.” That's why it asks for a spare: “We encourage you to add two authentication methods to your account.” (Login.gov)

Two phone checks, two different rules

Login.gov uses a phone number for two separate jobs, and the rules differ. Most confusion comes from mixing them up.

Sources for each row: changing your phone number, text or phone call codes, verifying your phone number and international phone number support.

Why a new number struggles with identity verification

The identity check isn't only about line type. Login.gov says “We check your phone number and other personal information with public and proprietary records”, and that it's “most likely to successfully verify your phone number if you enter your primary number or the number that you use most often.”

Read that as someone who's locked out and the message is clear: a number you got last week, whoever issued it, isn't the number records tie to your name. That includes a Cleat line. For this step, use the phone you've had for years. If that fails, Login.gov also offers verifying your address by mail or verifying in person, though it notes that some agencies don't allow the mail option.

The methods that don't need a phone number

• Face or touch unlock. A passkey on your device. Login.gov groups it with security keys and PIV/CAC cards as “more secure against phishing and theft.” (Login.gov)
• A security key. “Using a security key is more secure than relying on your phone because it has built-in protections against hacking and phishing attacks.” Login.gov doesn't provide one, and it has to meet FIDO standards. (Login.gov)
• An authentication app. The trade-off, in Login.gov's words: “While authentication applications are not protected if your device is lost or stolen, this method offers more security than phone calls or text messaging against phishing, hacking, or interception.” (Login.gov)
• Backup codes, but not on their own. “If you ever lose your backup codes, you will not be able to sign in to your account.”

About texts and calls themselves, Login.gov doesn't soften it: “Text/SMS or phone calls are convenient but are extremely vulnerable to theft, hackers, and other attacks.”

If codes aren't arriving

• Wait before you retry. Your account can lock for 10 minutes if you've “requested too many security codes for the time period.” (Login.gov)
• Only the newest code works. If several arrive at once, you may have to try more than one. (Login.gov)
• No extensions. Login.gov can't send codes to a number with an extension.
• Opted out of texts? You can opt back in 30 days after the opt-out. Until then, use another method.
• Landline? Pick the phone call, not the text.

my Social Security and Login.gov

Social Security's online services sign you in through Login.gov, and Login.gov's page for SSA users is worth knowing: “Login.gov is for secure sign in only. Your Login.gov account does not affect or have any information about your Social Security card, number, or benefits.” If you created a Social Security username more than 3 years ago, it says you'll need to move to a Login.gov account “to have continuous access to SSA online services.” (Login.gov)

Login.gov can only help with signing in. Questions about your number, card or benefits go to SSA, at 1-800-772-1213 according to that page. SSA's own help pages refused our requests, so everything here comes from Login.gov's side.

When a real mobile line is the answer

For Login.gov itself, rarely, and we'd rather say that. As a sign-in method, a real mobile line is allowed where VoIP isn't, but a security key or face or touch unlock is stronger and works anywhere. For identity verification, a new number of any kind is the wrong tool. Where a line does help is everything around Login.gov: the bank, the brokerage, the other US services that only text a code. A Cleat line is a real US mobile number that receives texts and call transcripts, for $24.99 a month. No provider can promise every service accepts every number. Why line type matters.

If you're abroad

Login.gov keeps a list of countries it can text or call, and warns: “Due to spam issues, or changes made by our SMS and voice providers, this list can change and your number may no longer be supported.” When we checked, the list itself failed to load. Identity verification needs a US-based number either way. For someone overseas, the setup that holds up is a security key or face or touch unlock, plus a second method. Login.gov's SSA page adds: “If you live abroad, SSA.gov provides contact information by country.” More for Americans overseas: Cleat for expats.