Whether you’re logging in for the first time, need to change your password, or want to update your personal information, these tips can help.
Follow these steps. (You can also download a how-to (PDF).)
- Go to Principal.com. Click “Log in” in the upper right corner.
- Click “New user? Register here,” then “Individuals.”
- Enter your first name, last name, date of birth, phone number, and your ID number (either your Social Security number or a number provided by your employer) or zip code.
- Click the box “I consent to doing business electronically.” Then click “Create account.”
- If your phone number matches our records, you’ll receive a one-time code via text. If not, you’ll be asked to verify your identity by uploading a copy of a government-issued photo ID (driver’s license, passport), and a selfie.
- Once your identity has been verified through either the one-time code or document upload: Create a username and password, and provide an email address. Click “Continue.”
- Select and answer three security questions. If we ever need to verify your identity, we’ll use these questions.
- Next, set up multi-factor authentication (MFA) for your account. MFA is a security step used to confirm your identity each time you log in. You may use an authenticator app such as Google Authenticator or a phone text or call. Follow the on-screen prompts to make your selection.
- Type in the code that is sent to you and follow any directions on screen to complete log in.
Note: Every time you log in, or if you forget your password, you will be asked for a verification code to confirm it’s really you. The first time you log in, you choose how you receive verification codes. Options include a phone text or call, or authenticator app.
Verifying your identity through a document upload is a more secure way for Principal to protect against fraud and bad actors. Copies of documents and photos are kept for a short period of time in case fraud is detected and needs further investigating. Access to them is protected and limited.
Click “Log in” at the top of any Principal.com page, enter your username, and click the “Next” button. Then enter your password and click “Verify.”
- Go to the log in page.
- Under the “Log in” button, click “Forgot username or password?”
- Choose “Individuals” as your role.
- Confirm your identity by providing the requested information; click “Continue.”
- You’ll receive a verification code by text, voice call, or an authenticator app; enter it.
- You’ll see your username and may reset password; you can also return to the log in page.
For your convenience, your username continues to display on the password screen so you can confirm it’s been entered correctly. If you enter the correct password but receive an error message, please check that your username is entered correctly. If not, click the “cancel” button to return to the username entry screen.
After you have successfully logged in, you may go to the “My profile” section to change your password, customer service questions and answers, mailing address, email address, mobile phone number, multi-factor authentication security settings, and more.
If you’re having trouble logging in or unable to change your information online, please call 800-986-3343, Monday–Friday, 7 a.m.–7 p.m. CST, and a customer service representative can help.
A passkey is a simple, effective way to securely access your account using information that’s unique to you—think of a fingerprint, facial recognition, or PIN. A passkey is an alternative to a password.
Passkeys help improve the speed, security, and convenience of logging in to your account. Passkeys offer strong protection against phishing, and are better than passwords at protecting your phone, apps, and online access from others.
A passkey works like a pair of digital “keys”—one public and one private—that must match to let you into your account. When you log in, your device uses biometrics (like your fingerprint or face) or a PIN to verify it's really you. The private “key” stored on your device connects with the public “key” stored on the website or app. If they match, you're automatically logged in. Unlike passwords, you never have to enter anything, and the private “key” never leaves your device, and is stored in the password manager. This makes passkeys both more convenient and more secure than traditional passwords; they can't be stolen in data breaches or discovered during phishing attempts.
No, a passkey is not a password. While passwords are typed-in characters that you need to remember, a passkey is a secure technology that uses your device's built-in security to log you in quickly. Unlike passwords, passkeys can’t be stolen or copied.
To enable passkey for your Principal account, log in and navigate to “My profile.” Click on “Manage 2-factor authentication preferences.” Follow the on-screen instructions. Once you set up your passkey, it is then saved to your password manager on your device. Subsequently, when you sign in to your Principal account that has a passkey enabled, you’ll be prompted to provide the key you’ve chosen, and verify with the device’s unlock method such as a fingerprint.
Passkeys are unique to you and your account, and fingerprint, facial recognition, or PIN are always stored on your device.
Typically just a few minutes. You’ll register your passkey with Principal by signing in with your current username and password. Then, on-screen instructions walk you through the process of adding a passkey.
No. Your biometric data never leaves your device.
No. If you have a passkey set up and use it to log in, you no longer have to enter your password to access your account. You can choose to use your password, if you like. For example, if you are logging onto an account at a computer that isn’t yours, you may have to use your password.
Yes, you can use passkeys across multiple devices. If you use cloud services like iCloud or Google Password Manager, your passkeys will automatically sync across your phones, tablets, and computers. For devices you don’t own (like a friend’s computer or public device), you can quickly gain temporary access by scanning a QR code with your phone. When you scan the code, your phone verifies, through Bluetooth, that you're physically nearby, and then grants access without saving your passkey on that temporary device. This gives you the flexibility to securely access your accounts anywhere while keeping your passkeys protected.
Passkeys offer you even more security to protect your account information, as well as convenience and ease of access.
No. You need a separate passkey for each username. That’s because each passkey is uniquely tied to a specific username and account. This feature helps to increase security; it ensures each of your accounts remains separate, much as you have different passwords for other things in your life.
Yes, just as your password and one-time passcode options work for both roles. You may set up more than one passkey so that passkey authentication can be used across your devices.
If passkey information on your device is synced to a cloud password manager, when you upgrade a device and transfer data, your passkey data should transfer, too. You can also set up additional passkeys for devices that do not synchronize passkey data.
That’s fine. You can use your password and an authenticator app instead.
Passkeys are intended for account owners only, and should not be shared.
No. The only way to disable a passkey is by removing it from your password manager and security settings.
Technically, no, because information like facial and fingerprint recognition doesn’t change. You can change your device unlock method without impacting your passkeys. Instead, you can disable passkeys if you no longer wish to use them.
Yes, you can manage your passkeys as needed. Start by logging in to your account; navigate to “My profile,” then “Manage two-factor authentication preferences.” There, you can remove an old passkey and add a new one for a different device. In addition, if you update your device’s unlock method—such as switching from a fingerprint to facial recognition—your Principal account passkey will continue to work. You’ll just use the new unlock method to access it.
There are a few reasons you may receive a message telling you your account verification was unsuccessful:
- Is your username entered correctly?
- Did you use a device that isn’t yours? If so, you may have to use your password and one-time passcode.
- Did you, at some point, disable your passkey? If you removed the passkey on your Principal account, you’ll have to set up passkey again.
- Did you complete the passkey challenge in a timely manner? The attempt may have timed out, please try again.
- Is your device unlocked and are your biometrics (fingerprint, facial recognition) or PIN working properly?
- Is your browser up to date and supported? Some older or less common browsers may not work with passkeys.
If, for some reason, a passkey isn’t working, you may enter your password and an authenticator code for access.
Start by logging in and disabling the passkey in your Principal account settings. Navigate to “Manage two-factor preferences” and follow the prompts to remove passkey from the device. Remember: multi-factor authentication (MFA) is required to log in to your Principal account, so ensure you have an alternate method set up. Then, to disable passkey access for your Principal account on an Apple device, go to your Settings, then Passkeys. Click on “Principal,” then “Edit.” Follow the prompts to delete the passkey. On an Android device, settings may vary based on manufacturer. Navigate to Settings, then your password or passkey manager. Select “Principal,” then “Remove.”
Unless your desktop's passkey manager is synced with your mobile device, you will not be able to use the passkey configured for your desktop on the Principal app. However, there’s a simple solution: Set up an additional passkey specifically for the Principal app. Log in to the app using your password and one-time passcode, then set up a new passkey for your mobile device. This will let you use passkey authentication on both your desktop and mobile app.
Note: For Android devices, you may need to ensure the Google Credential Manager is being used. Third-party or other device specific credential managers may not work with the Principal Mobile App.
To view your account statements, log in to your account.
Multi-factor authentication, a security measure, helps prevent cybercriminals from accessing your account, even if they have your password. Here’s how it works: If you log in from an unrecognized computer or mobile phone, forget your password, or make changes to your account, or if we suspect something out of ordinary, we’ll send you a unique verification code to confirm it’s really you. You then enter that unique code, along with your username and password, to access your account.
You have the option to use voice call to receive a verification code. You provide either a mobile or landline phone number. When you receive a call providing a verification code, you must answer it; we cannot guarantee a code will be left in your voicemail. (You may select the “Call again” option after 30 seconds.)
When you answer, a voice will say the code. Then it will say “once again your code is” and repeat the code.
If you choose to provide your phone number during the authentication process, we will only use it for the purpose for which you have given us consent. In this case, we only use it for security purposes. Please review our security policies for additional information about how we protect your information.
An authenticator app is a third-party app you install on your mobile device. All authenticator apps work like this: Once you open the app and choose the account you’re trying to log into, the app will generate a unique, one-time-use code to enable log in.
Authenticator apps are secure, with regularly refreshed codes unique to your device. Plus, if someone tries to gain access to your account, it’s more difficult for them to intercept your code since it’s generated by software installed on your device.
Our site has been optimized to work with the Google Authenticator app, but many other apps will work. If you wish to use Google Authenticator, here’s how to install it:
- Open the App Store or Play Store and search for Google Authenticator (look for a multi-colored asterisk).
- Install the Google Authenticator app.
If you wish to install another authenticator app, you may search for “install authenticator app” in your browser or in the app store you prefer.
Authenticator apps can be tied to your device, adding one more fraud deterrent. If you connect your Principal log in to an authenticator app, the codes are generated securely and only on your device. To connect your Principal log in to your authenticator, follow these steps:
- Log in to your Principal.com account; go to “My Profile” and then click on “Manage 2-Factor Authentication Preferences.” Click on the blue “Connect Authenticator” button next to Authenticator app.
- A QR code will appear on the screen; scan the code with your mobile phone or enter the 16 digit code.
- Click the “Next” or “Continue” button on the Principal website.
- Enter the authenticator 6-digit code (which changes every 30 seconds) on Principal.com.
- Once you have successfully entered the code, your app is ready to use for Principal.com log in.
If you have the Principal app installed on your phone, click “Settings” and scroll down to the “Delete account” button. You’ll be asked if you have an active product or account with Principal. If the answer is no, hit “Delete account.” If the answer is yes, you’ll be asked to call customer service at 800-986-3343, Monday–Friday, 7 a.m.–7 p.m. CT.
If you are using a desktop computer, please call customer service at 800-986-3343, Monday–Friday, 7 a.m.–7 p.m. CT.
Please note: Accounts with no online access may be at greater risk of fraud.
Retirement plan participants call 800-547-7754
Mutual fund clients call 800-222-5852
Everyone else call 800-986-3343
Or send us an email.