Turn on two-step verification
Updated
Two-step verification (2FA) protects your account with a code from an app on your phone. It's strongly recommended for anyone who sees clinical records.
Who can use it: everyone, on every plan.
Before you start: install an authenticator app on your phone, such as Google Authenticator or Microsoft Authenticator.
Step by step
- Open the user menu → Account → 2FA.
- Turn on Enable two-factor authentication. A QR code appears.
- In your authenticator app, add an account and scan the QR code.
- Enter the 6-digit code from the app under Verification code and select Verify.
- Copy your Backup code with Copy backup code and keep it somewhere safe.

Good to know
- The backup code is shown only once. You'll need it if you lose your phone (see Sign in with two-step verification).
- To turn it off, go back to Account → 2FA and switch it off.
- To move to a new phone, switch it off, switch it back on and scan the new QR code.
Troubleshooting
| Problem | What to do |
|---|---|
| "Invalid code" when verifying | Make sure your phone's time is set automatically, and enter the current code (it changes every 30 seconds). |
| The QR code won't scan | Move the phone closer, turn up the screen brightness, or try another authenticator app. |
| You lost the backup code | If you can still sign in, switch verification off and on again to get a new one. |