Setting Up Two-Factor Authentication (2FA)

Enhance your account security with two-factor authentication using TOTP (Time-based One-Time Password).

Why Enable 2FA?

Two-factor authentication provides an additional layer of security:

• Protects against password breaches
• Prevents unauthorized access
• Required for institutional accounts
• Recommended for all healthcare professionals

Setting Up 2FA

1. Go to Settings → Security
2. Click "Enable Two-Factor Authentication"
3. Install an authenticator app (Google Authenticator, Authy, Microsoft Authenticator)
4. Scan the QR code with your authenticator app
5. Enter the 6-digit code from your app
6. Save your backup codes in a secure location

Recommended Authenticator Apps

Google Authenticator

• Free and widely supported
• Available on iOS and Android
• Simple and reliable

Authy

• Cloud backup and sync
• Multi-device support
• Additional security features

Microsoft Authenticator

• Push notifications
• Biometric verification
• Enterprise integration

Using 2FA for Login

Once enabled, login requires two steps:

1. Enter your email and password
2. Open your authenticator app
3. Enter the current 6-digit code
4. Complete login process

Backup Codes

Backup codes allow access if you lose your device:

• 10 single-use codes provided during setup
• Store in a secure location (password manager, safe)
• Each code can only be used once
• Generate new codes when running low

Managing Active Sessions

Monitor and control your account access:

• View all active sessions
• See device and location information
• Revoke suspicious sessions
• Set session timeout preferences

Disabling 2FA

If you need to disable 2FA:

1. Go to Settings → Security
2. Click "Disable Two-Factor Authentication"
3. Enter your current password
4. Provide a 2FA code or backup code
5. Confirm disabling

Troubleshooting 2FA Issues

Codes Not Working

• Check device time synchronization
• Ensure you're using the latest code
• Try refreshing the authenticator app
• Use a backup code if available

Lost Device

• Use backup codes to access account
• Disable 2FA and set up on new device
• Contact support if no backup codes available