How to Create and Manage a QRXS Password

If your entity queries or reports to the NPDB via credentialing or third-party software, the data is transmitted through the NPDB's QRXS service. The transmission must come from a valid NPDB user account and it must include a valid password. If you have not yet linked your user account to use multi-factor authentication, or MFA, you must sign in with an NPDB password and use it to authorize your QRXS data transmissions. The password expires every 55 days.

You must create a separate QRXS password for transmitting data. That password is valid for 180 days. That password will not sign you in to the NPDB website. Using a QRXS password in your credentialing or third party software does not require a configuration change.

How to Create a QRXS Password

A user account must have a QRXS role in order to create a QRXS password. The Data Bank administrator can add this role to any of their user accounts.

If you are using an NPDB password to sign in to the website, complete the following steps to create a QRXS password for your account:

1. Sign in to the NPDB.
2. Select Update User Account.
3. Under the Create a QRXS Password section, select Create a QRXS Password.
4. Select Submit.

Once your QRXS password is created, you must immediately change it to comply with HRSA's service account password requirements. You cannot transmit data until it is changed. We can generate a new secure password for you to copy and save. If you do not use the website to update the password for your software, see the Note below. Otherwise, complete the following steps to change your QRXS password:

1. In the QRXS Password section, select Generate a new QRXS password.
2. When the QRXS password is displayed, select Copy password. The password is then copied on your computer's clipboard.
3. Save the QRXS password from your clipboard.
4. Enter the generated password in your credentialing or third-party software.

Note: If your system requires you to change your password through your software without signing in to the NPDB website, do not select the option to generate a password. You must send a change password transaction using your software.

Review the Using QRXS Passwords section on this page for the password requirements.

Managing QRXS Passwords

QRXS passwords must be created and changed by each individual user account holder. The account holder can obtain a generated password at any time by going to Update User Account. Data Bank administrators cannot reset a QRXS password through the website. They can only reset a password for the NPDB website. If the account is linked to MFA, no password is required.

Data Bank administrators cannot reset QRXS passwords for other accounts through the NPDB's website. They can only reset the website password. QRXS password resets must be done through a "reset password" transaction sent directly through their credentialing or third-party software.

Using QRXS Passwords

• Once a QRXS password is set, it is required for all data transmissions. You may not use the NPDB password for data transmissions.
• The QRXS password is valid for 180 days.
• When a user creates a QRXS password, the user's password for the NPDB website remains unchanged. It still expires every 55 days (until the account has been linked to MFA). The administrator can reset the NPDB password through the website.
• If a user account is linked with MFA to sign in to the website, the NPDB website password is deactivated from the user account. This does not affect the QRXS password. MFA is not used or required for QRXS transmissions.
• If your QRXS transmission is rejected due to the credentials you submitted (DBID, user ID, QRXS password) you can retry your transmission. After 10 unsuccessful tries, the account will be locked for 15 minutes.
• If you are changing a QRXS password through your software, the password must be at least 15 characters and not more than 64 characters. It must contain at least one of each of the following:
  • A capital letter
  • A lower case letter
  • A number
  • One of the following special characters: ! @ # $ ^ & * ( ) - _ = + [ ] { } | ; : , . < > ?