Security: 2FA, PIN, and password

This page shows you how to turn on two-factor authentication. It also covers setting a Secure PIN and changing your password.

🎬 Video

a full walkthrough of turning on Two-factor authenticator and Secure PIN from the Security tab

profile-security.mp4

Who can do this: Any portal user.

Before you start

You must be signed in. Some steps ask for your current password.

Two-factor authenticator

A Two-factor authenticator asks for a 6-digit code from an app on your phone. You enter this code to confirm sensitive actions, like prescribing, rejecting, or cancelling an order. It does not add an extra step to signing in. Read more in the glossary.

the Security tab showing the Two-factor authenticator and Secure PIN rows with their switches

Turn on Two-factor authenticator

1. On the Security tab, turn on the Two-factor authenticator switch.
2. In the Confirm Password window, enter your Current Password.
3. Enter your Repeat Password.
4. Click Continue.
5. In the Scan QR Code window, open your authenticator app.
6. Scan the code with your app. Can’t scan it? Copy the Secret Key below the code into your app instead.

📷 Screenshot

the Scan QR Code window with the QR code and Secret Key visible

profile/security-02.png

7. Click Continue.
8. In the Activation window, enter the 6-digit code your app shows.
9. Click Confirm.

The Two-factor authenticator switch turns on. The red dot on the Security tab disappears.

Turn off Two-factor authenticator

1. On the Security tab, turn off the Two-factor authenticator switch.
2. In the Disable 2FA window, enter the 6-digit code from your authenticator app.
3. Click Confirm.

Reset Two-factor authenticator

1. Click the gear icon next to Two-factor authenticator.
2. Select Reset 2FA.
3. In the Confirm Password window, enter your Current Password.
4. Enter your Repeat Password.
5. Click Continue.
6. Click Done.

A message tells you: “Your new PIN has been sent to your email.”

Secure PIN

A Secure PIN is a 6-digit code you set to confirm sensitive actions. Read more in the glossary.

Set up your Secure PIN

1. On the Security tab, turn on the Secure PIN switch.
2. In the Set PIN window, enter your Current Password.
3. Enter your Repeat Password.
4. Enter a 6-digit PIN in the Enter PIN boxes.
5. Click Confirm.

View your PIN

1. Click the gear icon next to Secure PIN.
2. Select View PIN.
3. In the Confirm Password window, enter your Current Password.
4. Enter your Repeat Password.
5. Click Continue.
6. Click Copy PIN to copy it, or Done to close the window.

Your PIN shows in the View Pin window.

Change your PIN

1. Click the gear icon next to Secure PIN.
2. Select Change PIN.
3. In the Change PIN window, enter your current PIN.
4. Enter your new PIN.
5. Click Confirm.

Reset your PIN

1. Click the gear icon next to Secure PIN.
2. Select Reset PIN.
3. In the Confirm Password window, enter your Current Password.
4. Enter your Repeat Password.
5. Click Continue.
6. Click Done.

A message tells you: “Your new PIN has been sent to your email.”

Turn off Secure PIN

1. On the Security tab, turn off the Secure PIN switch.
2. In the Disable PIN window, enter your 6-digit PIN.
3. Click Confirm.

Change your password

1. On the Security tab, scroll to the Password section.
2. Click Send password reset email.
3. Check your inbox for the reset link.
4. Open the link.
5. Set a new password.

What happens next

Turning on either Two-factor authenticator or Secure PIN clears the red dot on the Security tab. Only one method is active at a time.

After you click Send password reset email, you’ll see: “Password reset email sent. Check your inbox to set a new password.”

If something goes wrong

• “Passwords do not match” — your Current Password and Repeat Password boxes don’t match. Retype them carefully.
• “Password is required” or “Repeat Password is required” — you left a password box empty. Fill in both boxes.
• “The PIN must be exactly six characters in length.” — enter exactly 6 digits.
• “No email on file. Sign out and back in to retry.” — you have no email on record. Sign out, sign back in, then try again.
• “Failed to send reset email.” — the reset email didn’t go out. Wait a moment and click Send password reset email again.
• Gear icon won’t click — turn that method’s switch on first. The gear only works once its switch is on.