Login Methods¶

Overview¶

The FISMA Document Upload System offers two secure login methods:

Password Login (with Multi-Factor Authentication)
Passkey Login (phishing-resistant, no password needed)

Go to: https://www.waed.uscourts.gov/fisma-upload/

Step 2: Enter Your Credentials¶

Email Address: Enter your CM/ECF-registered email
Password: Enter the password you created during registration

The system will verify your credentials

Step 4: Multi-Factor Authentication (MFA)¶

Why MFA? FISMA High requires multi-factor authentication for password-based logins.

After entering your password, you'll be prompted for MFA verification:

Check Your Email¶

Within 1-2 minutes, you'll receive a verification code email:

Email Subject: Your Verification Code for FISMA Document Upload

Your one-time verification code is:

    123456

This code will expire in 5 minutes.

Enter Verification Code¶

Return to the MFA verification screen
Enter the 6-digit code from your email
Click "Verify"

⏱️ Important: Code expires in 5 minutes

Troubleshooting MFA¶

Code not received? - Check spam/junk folder - Wait up to 5 minutes for delivery - Click "Resend Code" if needed

Code expired? - Click "Resend Code" to get a new one - Each code is valid for 5 minutes only

Code doesn't work? - Ensure you're entering all 6 digits correctly - Check for typos (0 vs O, 1 vs l) - Request a new code

Step 5: Logged In¶

✅ Success! You're now logged in and can access the upload portal.

What is a passkey? - Phishing-resistant authentication - No password typing required - Uses biometrics or security key - Faster and more secure

Prerequisites: - You must have registered a passkey first

Go to: https://www.waed.uscourts.gov/fisma-upload/

Located below the password login form

Step 3: Authenticate with Your Device¶

Your browser will prompt you to authenticate:

Option A: Biometric (Touch ID, Face ID)¶

Steps: 1. Touch fingerprint sensor OR look at camera 2. Authentication happens automatically 3. You're logged in immediately

Option B: Windows Hello¶

Steps: 1. Use fingerprint, face, or PIN 2. Click "OK" when prompted 3. Logged in immediately

Option C: Hardware Security Key¶

Steps: 1. Insert your security key (USB or NFC) 2. Touch the button/sensor 3. Logged in immediately

Step 4: Logged In¶

✅ Success! You're logged in without entering a password or verification code.

Benefits: - ⚡ Faster login (no typing) - 🔐 More secure (no passwords to steal) - 🛡️ Phishing-resistant - ✅ No MFA code needed

Feature	Password + MFA	Passkey
Speed	Slower (type password + wait for code)	Fast (1-2 seconds)
Security	Secure	More Secure (phishing-resistant)
MFA Required	Yes (email code)	No (built-in)
Phishing Risk	Possible	None
Device Requirement	Email access	Biometric/security key
FISMA Compliant	✅ Yes	✅ Yes (IA-2(2))

Which Method Should I Use?¶

❌ You don't have biometric hardware
❌ You're on a shared/public computer
❌ You haven't set up a passkey yet

✅ You have a registered passkey
✅ You're on your own device
✅ You want faster, more secure login
✅ You want to avoid MFA codes

Recommendation: Set up a passkey for your primary devices, keep password as backup.

Switching Between Methods¶

From Password to Passkey¶

Log in with password + MFA
Go to Settings → Passkey Management
Add a passkey
Next time, use passkey login

From Passkey to Password¶

If you can't use your passkey:

On login page, click "Sign in with password instead"
Enter email and password
Complete MFA verification

Session Timeout¶

Your session expires after 10 minutes of inactivity:

You'll receive a 2-minute warning
Can extend session or log out
Protects against unauthorized access

→ Learn about session timeout

Account Lockout¶

After 5 failed login attempts:

Account temporarily locked (30 minutes)
Security alert email sent
Prevents brute-force attacks

Audit Logging¶

Every login is logged: - Timestamp - IP address - Login method used (password or passkey) - Success or failure - Retention: 7 years (FISMA requirement)

"Invalid email or password"¶

Solutions: 1. Check for typos in email address 2. Ensure password is entered correctly (case-sensitive) 3. Use password reset if you forgot your password 4. Verify you're registered (check confirmation email)

→ Reset your password

"MFA code expired"¶

Solutions: 1. Click "Resend Code" to get a new verification code 2. Enter the new code within 5 minutes 3. Check email immediately after requesting

"Passkey not found"¶

Solutions: 1. Ensure you're on the SAME device where passkey was registered 2. Passkeys are device-specific - you need one per device 3. Try password login instead 4. Register a new passkey for this device

→ Set up a passkey

"Account locked"¶

Problem: Too many failed login attempts

Solutions: 1. Wait 30 minutes for automatic unlock 2. Use password reset to regain access 3. Contact Clerk's Office if urgent: (509) 458-3410

"Session expired"¶

Problem: Your previous session timed out

Solution: - Simply log in again - Sessions expire after 10 minutes of inactivity for security - This is normal behavior

Best Practices¶

Security¶

✅ Log out when finished - Especially on shared computers
✅ Use passkeys when possible - More secure than passwords
✅ Don't share credentials - Passwords and passkeys are personal
✅ Report suspicious activity - Contact Clerk's Office immediately
❌ Don't save passwords in browser - On shared computers
❌ Don't write down passwords - Or store insecurely

Efficiency¶

✅ Set up passkeys on all your devices - Faster access
✅ Keep email accessible - For MFA codes
✅ Bookmark the login page - Quick access
✅ Plan uploads - Log in before gathering documents

Multi-Device Strategy¶

Recommended Setup¶

Work Computer: Passkey (Windows Hello or Touch ID) Mobile Phone: Passkey (Face ID or fingerprint) Home Computer: Passkey Backup: Remember password for emergencies

Example Workflow: 1. Primary: Use passkey on work computer (fast, secure) 2. Mobile: Use passkey on phone when traveling 3. Backup: Use password if passkey unavailable

Next Steps¶

Now that you understand login methods:

Set Up Passkey → Add passkey authentication for faster, more secure access
Upload Documents → Start using the system to upload sealed documents
Manage Passkeys → Add, remove, and organize your passkeys

Need Help?¶

Clerk's Office - Eastern District of Washington Phone: (509) 458-3410 Email: ecfinfo@waed.uscourts.gov Hours: Monday-Friday, 8:00 AM - 5:00 PM Pacific Time

← Back to User Guide | Next: MFA Verification →