Set up two-step verification
- Everyone
On this page
Two-step verification adds a second check when you sign in: after your usual sign-in, Clinicify texts a 6-digit code to your mobile, and you enter it to get in. In the app it’s called Multi-factor authentication, or MFA.
Before you start
- Every team member can set this up for their own account.
- You need a UK mobile number (starting 07 or +44) that can receive texts.
- Your clinic owner may have made it compulsory. If so, Clinicify takes you to the setup page as soon as you sign in, and you can’t reach the rest of the app until it’s done.
Steps
- Select your name at the bottom of the sidebar, then My settings.
- Under Your preferences, select Security.
- In the Multi-factor authentication card, select Manage MFA →.
- Under Set up SMS verification, check Your mobile number. It’s filled in from your profile if you’ve added a phone number there.
- Select Send code.
- Enter the 6-digit code from the text under Verification code, then select Verify. If the number was wrong, select Change number and start again.
You’ll see MFA is now on.
What happens next
- We email you to confirm two-step verification was turned on. You’ll get a similar email if it’s ever turned off, so you’ll know if someone else changes it.
- The next time you sign in on a device Clinicify doesn’t recognise, you’ll see Verify it’s you and a code is texted to you automatically. Enter it and select Verify and continue.
- Your Security page now shows MFA enabled, the last digits of your number and the date you turned it on.
Change your number or turn it off
- Go to Settings > Your preferences > Security and select Manage MFA →.
- Select Turn off MFA.
- To use a new number, set it up again from Manage MFA → with the new number.
Turning off MFA also removes every device you’ve chosen to trust.
Good to know
- Each code lasts 10 minutes. After 5 wrong tries, you’ll need a new code.
- You can ask for a new code after 30 seconds.
- Once you’ve entered a code, you won’t be asked again on that browser for up to 8 hours.
- If your clinic allows it, you can tick Always trust this device to skip the code on that device for 30 days. See Remembering a trusted device.
- Codes are only sent to UK mobile numbers.
Was this article helpful?
Thanks for letting us know.
Thanks. We read every response.
Questions about this article? Contact support
Related articles
- Remembering a trusted device How Always trust this device skips the two-step verification code for 30 days, when not to use it, and how to see and revoke your trusted devices.
- Trouble signing in Fixes for sign-in problems: codes that don't arrive or don't work, being asked for a code every time, a lost phone, expired invitations and lost access.
- Clinic security settings Require two-step verification for every team member, and choose whether staff can trust a device to skip the code. Owner-only clinic-wide rules.
- Edit your profile Update your name, professional registration, phone number and professional title, and learn why your registration matters for patient questions.