Your OTP card is a security device tied directly to your account. On its own, it cannot grant access — an attacker would also need your password. This means your card and your password must both be protected at all times.
You are responsible for keeping your card secure. This means:
- Never share your card with anyone — including IT staff, who will never ask for it
- Never photograph or record codes from the card
- Never store or transmit generated codes digitally
- Keep the card physically secure — treat it like a key to your account
Report any concerns to the IT Help Desk immediately — including if your card is lost, stolen, damaged, or you suspect it has been compromised. Do not wait. Submit an MFA Service Request or call the Help Desk directly.