Two-factor authentication

You’re holding sensitive client data, so it’s worth the thirty seconds this takes — Settings → Security adds two-factor authentication (2FA), so signing in needs a code from your phone as well as your password.

Setting up 2FA

1. Choose Set Up Two-Factor Authentication.

2. Scan the code with an authenticator app (Google Authenticator, Authy, 1Password all work).

3. Enter the code it generates to confirm, and save your backup codes somewhere safe — they get you back in if you ever lose access to your authenticator app.

Managing it afterwards

Once set up, the page shows 2FA as enabled and gives you three options: Regenerate Backup Codes (if you’ve used some up, or want a fresh set), Change Authenticator App (resets and takes you through setup again — for example, if you’ve switched phones), and Disable MFA, where allowed.

Caution

Your practice — or Practicos, for staff accounts — may require 2FA. When it does, the disable option isn’t available, and you’ll be guided to complete setup before you can continue elsewhere in Practicos.