← All guides

Staff guide

Multi-factor authentication in two minutes

2 min read

Multi-factor authentication (MFA) means logging in with your password plus a second proof, usually a code or a tap on your phone.

Why it matters

Passwords leak. With MFA turned on, a stolen password alone is not enough to get in. It blocks most account takeovers.

Where to turn it on first

1. Email (Microsoft 365 or Google)
2. Your EHR and practice software
3. Remote access and admin accounts
4. Banking and payroll

Which kind

An authenticator app or a security key is best. Text message codes are better than nothing.

Our audit checks MFA on every account →