LiteBlue Security Center: Avoid Phishing, Fake Sites & MFA Scams

Account security: Enter Employee ID, password, MFA codes, banking changes and other sensitive account information only inside the official LiteBlue USPS.gov portal.

Computer user reviewing a website carefully — USPS security story image. Source: USPS Employee News ↗

Verify the domain before every sensitive action

The legitimate employee portal is liteblue.usps.gov. A look-alike domain containing words such as “LiteBlue” or “USPS” is not automatically official.

USPS will not ask for your MFA code

The current LiteBlue page warns that USPS will never call, text or email to ask for a password or MFA code or direct an employee to a website to log in.

Prefer stronger MFA methods

USPS recommends registering at least two methods and, when possible, methods stronger than SMS/text.

Report suspicious activity

USPS public guidance lists CyberSafe@usps.gov and 866-877-7247 for suspicious activity reports.

Frequently asked questions

How can I quickly spot the official portal?

Check that the address bar shows https://liteblue.usps.gov/.

Can a site with USPS in the domain name still be fake?

Yes. The key is whether the hostname is an actual usps.gov government domain.

Should I approve an unexpected MFA prompt?

No. Treat an unexpected prompt as suspicious and verify account activity through official channels.

Official sources

Verify time-sensitive information with the current USPS source.