Skip to main content
Learn the complete workflow for electronically prescribing controlled substances (EPCS) and how to resolve common token and authentication issues.

​
Overview

​
What is EPCS prescribing?

Electronic Prescribing of Controlled Substances (EPCS) allows you to send prescriptions for Schedule II-V controlled substances electronically to pharmacies. This guide provides the complete end-to-end workflow for prescribing controlled substances and helps you troubleshoot common issues with token authentication.

​
Prerequisites for EPCS prescribing

Before you can electronically prescribe controlled substances, confirm the following are complete:
  1. EPCS sign-up is complete - You have finished identity proofing with Experian and set up two-factor authentication through MDToolbox.
  2. Your token is registered - Your software token (VIP Access App) or hardware token (key fob) is registered to your EPCS account.
  3. Access Controls are configured - An Access Control Manager has granted you the Can Approve EPCS? and Can Sign & Send permissions on the EPCS Permissions- Logical Access Control Setup page.
  4. You have access to your token - Keep your smartphone (with the VIP Access App) or key fob available when prescribing.

​
Verifying your EPCS sign-up status

To verify your sign-up is complete:
  1. Navigate to Settings - Go to Settings.
  2. Open EPCS settings - Scroll down and click ePrescribing Controlled Substances (EPCS) from the left-hand navigation bar.
  3. Check your status - Click the Sign Up or Update Token/Password button.
If the sign-up is not yet complete, further steps will be available for you to do. If the sign-up is complete, you will be given options to update your token passwords instead.

​
Workflow Instructions

​
Prescribing a controlled substance

When everything is set up correctly, follow these steps to electronically prescribe a controlled substance:
  1. Open the patient chart - Open the patient’s chart and click Rx in the gray navigation bar at the top.
  2. Start a new prescription - Click Prescription Form (Rx/OTC/CS).
  3. Select the medication - Search for and select the controlled substance medication.
    Ensure the medication is not user-created. User-created medications cannot be ePrescribed as controlled substances.
  4. Complete required fields - Complete all required fields (marked with an asterisk).
  5. Select the pharmacy - Select an EPCS-certified pharmacy. Pharmacies that support EPCS display an EPCS label next to their name in the search results.
  6. Review the prescription - Click Prescribe.
  7. Confirm the prescription - Review the Prescription Summary and click Prescribe again.
  8. Enter your token credentials - When the token authentication prompt appears:
    • Enter your Token Password (the password you created during EPCS sign-up).
    • Open the VIP Access App on your smartphone or retrieve your key fob.
    • Enter the 6-digit Security Code displayed on your token. This code changes every 30 seconds.
  9. Send the prescription - Click Sign + Send.
  10. Close the confirmation - Click OK to close the confirmation screen.
The prescription is now sent to the pharmacy.

​
Common issues and troubleshooting

​
No token prompt appears when prescribing

If you do not see the Token Password and Security Code prompt after clicking Prescribe, check the following:
  • EPCS enrollment status - Confirm you completed the full EPCS sign-up process, including identity proofing and two-factor authentication setup. Go to Settings → ePrescribing Controlled Substances (EPCS) to verify your enrollment status.
  • Token registration - Confirm your token is registered. If you recently changed phones, you need to deactivate your old token and register the new one.
  • Access Control permissions - Contact your practice’s Access Control Manager to confirm you have Can Approve EPCS? and Can Sign & Send permissions enabled.
  • Pharmacy selection - Confirm you selected an EPCS-certified pharmacy. Only pharmacies with the EPCS label support electronic controlled substance prescriptions.

​
Token PIN incorrect or token out of sync

If your Token Password or Security Code is not accepted:
  • Forgot Token Password - Reset your password by going to Settings → ePrescribing Controlled Substances (EPCS) → Update Token/Password. Click Reset my token password and follow the prompts.
  • Credential ID mismatch - Confirm the Credential ID you enter matches the ID shown in your VIP Access App (including the four letters before the numbers) or on the back of your key fob. If the IDs are different, proceed to the next suggestions.
  • New phone or device - Deactivate the token on your old device and register the token on your new device. Go to Settings → ePrescribing Controlled Substances (EPCS) → Update Token/Password and follow the steps under Setup a New Phone.
  • Lost token and forgot password - You will need to complete identity proofing again. Go to Settings → ePrescribing Controlled Substances (EPCS) → Update Token/Password and select I don’t have my old token- use IDP to setup Token and New Password.

​
Prescription fails to send

If your controlled substance prescription fails after entering your token credentials:
  • Check patient demographics - Confirm patient demographics are complete with no special characters or abbreviations in the Name and Address fields.
  • Verify patient address - Confirm the patient has an address on file. If the patient is experiencing homelessness, enter HOMELESS in the Address field with the City, State, and Zip for your local area.
  • Check Schedule II restrictions - Schedule I and II drugs do not allow post-dated prescriptions or refills. Ensure the Refill field shows 0 for these medications.

​
Frequently Asked Questions

Can my staff send controlled substance prescriptions for me?
No. DEA regulations require the prescriber to sign each controlled substance prescription with their own two-factor EPCS credential. Staff delegates cannot send controlled substance prescriptions on your behalf, even if they are Authorized Prescription Delegates. Staff can draft controlled substance prescriptions and save them using Save as Draft & Close. You can then find drafted prescriptions in the Draft Orders inbox on your Practice Home page and complete them with your own Token Password and Security Code.
Why do I need to register a new token when I change my phone?
Each phone is a unique token with a unique Credential ID. To ensure only you can prescribe controlled substances, the correct token must be registered to your account.
Can I use two different EPCS tokens at the same time?
Yes. After completing EPCS registration with your first token, you can register a second token by:
  1. Navigate to Settings - Go to Settings.
  2. Open EPCS settings - Scroll down and click ePrescribing Controlled Substances (EPCS) from the left-hand navigation bar.
  3. Update token - Click the Update Token/Password button.
  4. Register second token - Enter your current Token Password in the Register a 2nd Token section.
Where can I find more information about EPCS setup?
For complete information about electronic prescribing of controlled substances, see the Related Articles section below.