Security
Two-step verification with an authenticator app, the devices signed in to your account, and your recent sign-ins
Go to Settings → Security. Doctors find it in their own settings too. Everything here belongs to your account, not the clinic: each member of the team sets up their own.
Two-step verification
With two-step verification on, signing in needs two things: your usual method (Google, phone code, password or email link) and a 6-digit code from an authenticator app on your phone. Someone who learns your password still can't get in without your phone.
To turn it on:
- Install an authenticator app, such as Google Authenticator or Microsoft Authenticator.
- Click Turn on. A QR code and a key appear.
- Scan the QR code in the app (or type the key by hand).
- Type the 6-digit code the app shows, then click Turn on.
From then on, every new sign-in opens a Two-step verification page that asks for the app's current code. A device that was already signed in also asks for it once.
The code changes every 30 seconds. If it's rejected, wait for the next code and type that one.
To stop using it, click Turn off and confirm.
If you lose the phone with the authenticator app, you can't finish signing in. Contact Docistra support to remove two-step verification from your account.
Active devices
This list shows every browser and phone that is signed in to your account right now: the browser and system (for example Chrome on Windows), its IP address, and when it was last active. The device you're using is marked This device.
- Sign out next to a device signs that device out. It has to sign in again within an hour at most.
- Sign out all other devices signs out everything except the device you're using.
If you see a device you don't recognize, sign it out, change your password, and turn on two-step verification.
Recent sign-ins
The last 10 times someone signed in to your account, with the date, the device and the IP address. It stays even after a device signs out, so you can check where your account was used.