TSP Dropped Email Logins: How to Avoid Getting Locked Out

Last Updated: June 7, 2026 Reading Time: 7 min

If you haven't logged into your TSP account in a while, here's something you need to know before you actually need to: TSP no longer sends login codes by email, and as of July 2024 it dropped security questions too. That means the only ways back into your account now run through your phone. For most people that's fine. But if you work in a SCIF, you're deployed overseas, you changed agencies, or your registered phone number is stale, you could be locked out of your retirement account at the worst possible time. This is the 15-minute fix.

Key Takeaways

• Email login codes are gone (since fall 2020). Your options now are text, voice call, or an authenticator app.
• Security questions are gone too (July 2024), which removed the last non-phone backup.
• Five groups face real lockout risk: SCIF workers, deployed military, agency-changers, people without a smartphone, and infrequent retirees.
• The fix is proactive, not reactive. Set up a backup method before your phone situation changes.
• Tighter security is the right call given active TSP fraud, but only works if your contact info is current.

What Changed, and Why Reddit Is Talking About It

This isn't one change, it's a slow tightening that finally closed every back door.

In December 2019, two-step authentication became mandatory for all participants, with text, email, or voice as options. In fall 2020, TSP dropped email as a regular code channel, leaving phone only. The June 2022 My Account redesign required a phone passcode and produced a documented mess: sailors on ships had internet but no cell service and couldn't get their codes. Then in July 2024, TSP eliminated security questions, the last fallback that didn't require a phone.

So today there are exactly three ways to authenticate: text message, voice call, or an authenticator app. No email. No security questions. If your phone is accessible and your number is current, none of this is a problem. If not, there's now no email safety net to catch you.

Who's Actually at Risk of a Lockout

This is the part that matters, because the people most exposed often don't realize it until they're stuck.

• SCIF workers. Phones are banned in Sensitive Compartmented Information Facilities. If you try to log in from a SCIF computer, you can't receive a text or voice code at your desk. An authenticator app is your only real option, and only if you set it up in advance.
• Deployed and overseas military. You may have NIPR internet but no U.S. cell service, exactly the 2022 problem. The .mil email exception only covers initial setup, not ongoing logins.
• Agency-changers. If you used a .gov or .mil email or a work phone as your TSP contact and then switched agencies or retired, that contact is now dead. You need a current personal phone on file.
• Employees without a smartphone. Authenticator apps need a smartphone. The text or voice option works on a basic phone, but only if TSP has a working number for you.
• Retirees and separated employees. If you haven't logged in since 2020 or 2022, your contact info may be stale, and your only recovery path is the ThriftLine.

The 15-Minute Security Checklist

Do these now, while you have access, not when you're locked out.

1. Verify your contact info. Log in at tsp.gov, go to Profile → Contact Information, and confirm your personal cell number (not a work or government number) is registered and validated. Add a personal email too; it won't deliver login codes anymore, but it's how you'll get fraud alerts.

2. Add a backup phone. TSP lets you register more than one. Add a second personal number, a spouse's or trusted family member's, as a backup. Skip VOIP numbers like Google Voice; TSP recommends against them for verification, and they often fail when you need them.

3. Set up an authenticator app. This is the big one for SCIF and overseas workers. Google Authenticator, Microsoft Authenticator, or Authy generate a code on your device with no signal required. Set it up under Profile → Security Settings. One timing note for SCIF workers: the code refreshes about every 30 seconds, so check it on your phone right before you enter the secure area, then enter it promptly.

4. Turn on the account lock. This optional feature blocks any new loan, withdrawal, or distribution while still letting you view your balance and change your allocations. You set a 10-digit unlock key, so store it somewhere safe that isn't just your phone. Required minimum distributions and court-ordered payments still go through. NARFE and the SEC both recommend it for anyone not actively making changes.

5. Know your ThriftLine path. Your ThriftLine PIN (which is not your password) lets you reach a representative at 1-877-968-3778 if you're locked out online. If you don't know your PIN, that's worth fixing now too.

6. If you're already locked out: call 1-877-968-3778 and ask for a representative, with your account number and a government ID ready. If electronic verification fails, TSP can mail a one-time passcode to your address of record, but that takes several business days and may not reach a deployed address.

Which 2FA Method Fits Your Situation

No competitor has matched the login methods to the access constraints feds actually face. Here's the cheat sheet:

Your situation	Best method	Why
Office worker, phone always handy	Text message	Easiest, nothing to set up
Works in a SCIF	Authenticator app	No signal needed; generate the code before entering
Deployed / on a ship	Authenticator app	Works without U.S. carrier after setup
No smartphone	Voice call	Codes by automated call to any phone
Retiree, rarely logs in	Text + account lock	Universal, and the lock guards an inactive account
Changed agencies recently	Update contact info now	Old work email/phone no longer valid

The Stakes Are Real Money

The lockout anxiety isn't abstract. The average mid-career TSP balance is north of $177,000, and the plan holds about $1.073 trillion overall. A federal employee who can't access their account at separation faces delays to their entire retirement income stream. And TSP fraud is active: the SEC issued a formal investor alert in September 2024 about transfer schemes targeting TSP participants. The tighter login is there to protect you, but it only works if you can actually get in.

Use our free TSP Growth & Withdrawal Calculator to see what balance you're protecting, then go make sure your login is airtight.

Model your TSP balance →

Frequently Asked Questions

Does TSP still allow email two-factor authentication?

For most participants, no. TSP removed email as a regular two-step login code channel back in fall 2020. The current options are text message, voice call, and an authenticator app. Uniformed service members can use a .mil email during initial My Account setup for a one-time passcode, but that doesn't apply to ongoing logins.

Why did TSP remove security questions?

TSP announced in July 2024 that it would drop security questions from its login process. The reason: the answers (mother's maiden name, first pet, hometown) are easy to find through public records, social media, or data breaches. The change follows federal cybersecurity guidance and the broader move away from knowledge-based authentication. The downside is it removed the last non-phone fallback.

I work in a SCIF and can't bring my phone in. How do I log into TSP?

Set up an authenticator app on your phone before you need it. The app generates a time-based code with no cell signal or text required. Check the code on your phone before you enter the SCIF, then enter it on the TSP login screen from a SCIF computer. The code refreshes about every 30 seconds, so do it promptly.

What is the TSP account lock, and should I use it?

It's an optional feature that blocks any new loan, withdrawal, or distribution while still letting you view your balance and change your investment mix. You set a 10-digit unlock key to make changes later. Required minimum distributions and court-ordered payments aren't blocked. NARFE and the SEC both recommend it for people who aren't actively making changes, especially retirees and infrequent users.

What happens if I'm already locked out of my TSP account?

Call the ThriftLine at 1-877-968-3778 and ask for a representative. Have your account number and a government-issued ID ready. If electronic verification fails, TSP can mail a one-time passcode to your address of record, but that takes several business days and may not reach a deployed address. Keeping your contact info current is the only reliable way to avoid this.

Related Resources

• TSP Growth & Withdrawal Calculator: See the balance you're protecting
• Best TSP Allocation 2026: How to split your money across the funds
• TSP Fund Returns: May 2026: The latest monthly numbers

---

This article is general information, not financial or security advice. TSP login details were confirmed through official secondary sources (the SEC, NARFE, military service guides, and CBP) plus TSP's own bulletins; verify specifics at tsp.gov or by calling the ThriftLine. Sources: SEC investor alert (Sept. 2024), NARFE on the account lock, Military.com on the 2022 access problems, FedWeek on the security-questions removal.