Two-Factor Authentication

What is two-factor authentication (2FA)?

You and your team members log in to your private system using a username and password. Two-factor authentication is a second stage of the login process that runs after a correct username and password has been supplied. A code is generated from a trusted personal device and is only valid once. You cannot log in without the code.

This protects you in the event that a team member accidentally shares their password, or if their password is stolen from another website where it has been reused. Two-factor authentication prevents those stolen credentials from being used to access your clients' medical data.

Two-factor authentication is a vital part of how we secure access to your clients' medical records. For this reason, it is mandatory for all users and cannot be disabled.

Setting up two-factor authentication on a new device

Log in to your account with your username and password. If you are setting up your account for the first time, you will be prompted to set up 2FA immediately after logging in. If you are setting up a new device, click Two Factor Authentication on the Settings page.

You will need to download an authentication app to your personal device. Ensure this is from a well-known developer. We recommend:

• Google Authenticator — for Android phones or iPhones.
• Microsoft Authenticator — for Android phones or iPhones.
• Authy — for Android phones or iPhones.

Once you have downloaded an app, add your Secure Clinic account to it. Click the button in the app to do this — the app will then ask you to scan the QR code shown on the 2FA setup page. To finish setup, enter the 6 digit code the app generates back into the 2FA setup page on our website.

Save your recovery codes

When you first set up 2FA, we provide a set of emergency codes that can be used to recover your account if you lose your trusted device. Store these somewhere private but accessible in case you need them.

WARNING

If you do not have your trusted device and do not have your recovery codes, you will be unable to log in to your account. Contact us for help recovering your account in this situation.