Turn on two-step verification

Updated

Two-step verification (2FA) protects your account with a code from an app on your phone. It's strongly recommended for anyone who sees clinical records.

Who can use it: everyone, on every plan.

Before you start: install an authenticator app on your phone, such as Google Authenticator or Microsoft Authenticator.

Step by step

  1. Open the user menu → Account → 2FA.
  2. Turn on Enable two-factor authentication. A QR code appears.
  3. In your authenticator app, add an account and scan the QR code.
  4. Enter the 6-digit code from the app under Verification code and select Verify.
  5. Copy your Backup code with Copy backup code and keep it somewhere safe.
Two-step verification page with the switch to turn it on

Good to know

  • The backup code is shown only once. You'll need it if you lose your phone (see Sign in with two-step verification).
  • To turn it off, go back to Account → 2FA and switch it off.
  • To move to a new phone, switch it off, switch it back on and scan the new QR code.

Troubleshooting

Problem What to do
"Invalid code" when verifying Make sure your phone's time is set automatically, and enter the current code (it changes every 30 seconds).
The QR code won't scan Move the phone closer, turn up the screen brightness, or try another authenticator app.
You lost the backup code If you can still sign in, switch verification off and on again to get a new one.