In this article
Two-step verification (2FA) is required for the Owner, Doctor, and Finance roles, and strongly recommended for all users.
Turning on 2FA
- Install an authenticator app (for example Google Authenticator, Microsoft Authenticator, or another TOTP app) on your phone.
- In Medivana, open Account security → turn on two-step verification.
- Scan the QR code with the authenticator app (or type the secret key).
- Enter the 6-digit code that appears to confirm.
Once it is on, every sign-in with a password asks for the latest 6-digit code (it changes every 30 seconds).
Password
- At least 12 characters, at most 128. Use a long passphrase that is easy to remember and unique to Medivana.
- Change your password in Account security. Changing your password ends your sessions on other devices.
Lost authenticator phone
Contact the clinic owner or manager to verify your identity; the Medivana team then helps reset your 2FA. Change your password immediately if you suspect your account has been misused.
Safe habits
- Do not share accounts. Every action is recorded under the user's name.
- Sign out on shared computers; lock your screen when you leave your desk.
- Be wary of messages asking for your OTP or password; the Medivana team never asks for them.
- Enterprise can use SSO (OIDC/SAML) and IP address restrictions.