How the LOA2 user journey works

This is a typical user journey for a level of assurance 2 (LOA2) service. It’s different to the user journey for an LOA1 service.

Before they sign up to GOV.UK Verify, users will be asked some questions to help them choose the right certified company.

They’ll usually need at least 2 documents to create an account with a certified company. These should be from:

  • a government department, for example a passport
  • a bank or building society, for example a credit or debit card

It typically takes about 10 to 15 minutes to create a GOV.UK Verify account, and less than a minute to sign in after that point.

    Your service

  1. User is asked to prove their identity to use the service

    2. GOV.UK Verify hub

  2. User says if they’ve used GOV.UK Verify before

      Sign in (returning user journey)

      It takes less than a minute to sign in.

    1. User picks a certified company to sign in with

    2. User signs in with username or email and password

    3. User receives 2 factor authentication code

    4. User enters 2 factor authentication code

      5. Your service

    5. User continues to use the service

    3. Sign up (new user journey)

    It takes about 15 minutes to create an account.

  3. User finds out what GOV.UK Verify is

  4. User finds out about certified companies

  5. User finds out how long it will take to verify themselves and how to create an account

  6. User chooses a certified company

  7. User is asked if they’re over 20 and how long they’ve lived in the UK

  8. User is asked if they have a passport or driving licence

  9. User is asked if they have a mobile phone that can download apps

  10. User chooses a certified company

  11. User is told they need to go to the certified company’s website to create an account

    12. Certified company: create an account

  12. User creates a username or email and password

  13. User receives a confirmation code by email

  14. User enters confirmation code

    15. Certified company: set up 2 factor authentication

  15. User adds phone number or chooses an alternative 2 factor authentication method

  16. User receives authentication code

  17. User enters authentication code

    18. Certified company: add personal details

  18. User adds their name, age and gender

  19. User adds and confirms address

  20. User’s details are checked by the certified company

    21. Certified company: documents are checked

  21. User enters document details

    1. User downloads the certified company’s app

    2. User takes a photo of the document

    3. User takes a photo of themselves

  22. User adds second document details

  23. User adds their card or bank details

    24. Certified company: knowledge-based authentication

  24. User answers knowledge-based authentication question 1

  25. User answers knowledge-based authentication question 2

      If knowledge-based authentication is unsuccessful

    1. User is told they can’t be verified

    2. User sees the other ways to use this service

    26. Confirmation: user is sent back to the GOV.UK Verify hub

  26. The certified company tells the user they’ve been successfully verified

  27. GOV.UK Verify confirms that they’ve been successfully verified

    28. Your service

  28. User continues to use the service

Return to Design how your service sends users to GOV.UK Verify