Understanding Access Codes for EDGAR Accounts: A Comprehensive Overview
There are five (5) different significant pieces of information associated with each EDGAR filer account:
1. A central index key (CIK) number, a unique number the SEC assigns to each EDGAR filer. It is used with a password for login identification and identifies the submitter—which could be a registrant, a non-registrant, a filing agent, or a training agent. You can log in to EDGAR using any valid CIK-password combination.
The CIK:
Is made available to the public.
Allows the SEC to differentiate between filing entities with similar names.
Is a permanent identifier; it may not be changed and never expires.
Is assigned regardless of whether filings are made on EDGAR or submitted to the SEC in paper.
The CIK is also used with the CIK confirmation code (CCC) in submissions to identify the registrant.
If you already have a CIK but have forgotten, misplaced, or otherwise want to change it, you may look it up by searching for your company name using the EDGAR company search.
2. A passphrase, consisting of eight (8) characters, that filers create during the process of applying for EDGAR access (Form ID). The passphrase:
Consists of eight characters having at least one number (0-9) and at least one special character (@, #, $, *).
Is case-sensitive and you must use it exactly as created, either upper case or lower case.
Never expires.
Is a very sensitive code that should be strictly controlled; access to it within your organization should be extremely limited.
Use the EDGAR Filer Management Website to submit a request for a new passphrase; the request must be accepted by the SEC.
3. A CIK confirmation code (CCC) used in conjunction with the CIK to ensure authorization for filings and to retrieve and edit data. A CCC:
Consists of eight characters having at least one number (0-9) and at least one special character (@, #, $, *).
Is case-sensitive and you must use it exactly as created, either upper case or lower case.
Never expires, but can be changed by the filer at any time by using your PMAC.
Can be re-generated at any time by using your passphrase.
4. A password that allows you to log into the EDGAR system and change the CCC. Since a CIK is public information, this second, confidential code is necessary to ensure that whoever is logging into EDGAR is authorized to do so. EDGAR uses your password in combination with a CIK to identify the entity making a submission.
The password:
Consists of 12 characters having at least one number (0-9) and at least one special character (@, #, $, *).
Is case-sensitive and you must use it exactly as created, either upper case or lower case.
Can be changed at any time by using your PMAC.
Can be re-generated at any time by using your passphrase.
Expires annually from the date you created it or was last changed so please ensure you change your password annually via the EDGAR Filing Website. When you access the EDGAR Filing Website or EDGAR Online Forms Website, you will see your password's expiration date in red at the top of the screen.
Although your CIK is public and you may give it and the CCC to your agent to make submissions on your behalf, you should hold your password in strictest confidence.
5. A password modification authorization code (PMAC) that allows you to change your password.
The PMAC:
Consists of eight characters having at least one number (0-9) and at least one special character (@, #, $, *).
Is case-sensitive and you must use it exactly as created, either upper case or lower case.
Never expires.
Can be re-generated at any time by using your passphrase.
Is a very private code, and only one or two persons in an organization should know it.
If you misplace or have forgotten your PMAC, you may generate a new set of EDGAR access codes (CCC, password, PMAC) via the EDGAR Filer Management Website using your passphrase.
The CCC, password, and PMAC are referred to as access codes. To protect the integrity and security of the data you send, you must limit the number of people who know your access codes.
The SEC does not keep these codes on file. It is the responsibility of the individual designated as the contact for EDGAR on the Form ID to provide these codes to the EDGAR filing parties, and to keep the codes secure. Section 16 filers must provide their EDGAR codes to their EDGAR contact at each of the companies for which they are insiders if the companies are going to file on their behalf. Only ONE set of EDGAR codes will be valid for each individual, so it is essential that all relevant companies be given the codes. Only one Form ID should be submitted for a registrant or an individual applicant.