Two-factor authentication

Two-factor authentication (often shortened to 2FA) protects your account even if someone learns your password. Once it’s on, signing in takes two things: your password, and a 6-digit code from an authenticator app on your phone. The code changes every 30 seconds, so a copied code is useless soon after.

Any standard authenticator app works, for example Google Authenticator, Authy or 1Password.

Turn it on yourself

1. Open your Account settings. Select your name at the top-right, then Account settings.
2. In the Two-factor authentication card, select Enable.
3. A window opens with a QR code under Scan with your authenticator app.
4. In your authenticator app, add a new account and scan the QR code.
   • Can’t scan it? Select Can’t scan the code? Enter it manually. The setup key appears. Select Copy and paste it into your app.
5. Your app now shows a 6-digit code for Meddesk. Type it under Enter the 6-digit code.
6. Select Enable two-factor authentication.

You see Two-factor authentication enabled. From now on, you need a code every time you sign in.

Signing in with 2FA

1. Sign in with your email and password as usual.
2. On Two-factor verification, open your authenticator app and type the code it shows for Meddesk.
3. Select Verify.

If you see Incorrect code, wait for the next code in your app and try again. Codes only work for a short time, so type the current one.

When your clinic requires it

Your clinic can require 2FA for every staff member (see Security policy). If it does and you haven’t set it up, you see Set up two-factor authentication straight after signing in, with the note You can’t use the app until this is done. The steps are the same as above: scan the code, enter the 6-digit code, then select Enable two-factor authentication.

When your clinic requires 2FA, you can’t turn it off yourself.

Turn it off

1. Open Account settings.
2. In the Two-factor authentication card, select Disable.
3. Confirm with Yes, turn it off.

You see Two-factor authentication disabled. You only need your password to sign in from now on.

Lost your phone?

If you can no longer get codes, for example because you lost or replaced your phone, you can’t sign in yourself. Ask someone in your clinic who manages staff access to reset your two-factor authentication. After the reset you sign in with just your password. If your clinic requires 2FA, you are then asked to set it up again on your new phone.