Skip to main content

Account security

Open Profile → security section (Sign-in & security).

Email verification

Your Verified badge on Profile confirms we reached your inbox. If it shows Unverified, use Resend link on Profile after you sign in — sign-in itself is blocked until your email is verified (security requirement for hospital data).

Password

Change your password periodically. Use a unique password for ClinZero.

Passkeys

Register a passkey (device or security key) for faster, phishing-resistant sign-in. You can remove passkeys you no longer use.

Authenticator app (TOTP)

  1. Choose Enable two-factor authentication.
  2. Scan the QR code with an authenticator app.
  3. Confirm with a one-time code.
  4. Save backup codes somewhere safe (not in the patient chart).
Backup codes are single-use. Regenerate them from Profile if you lose the list — old codes stop working.

Workspace policy

If your workspace requires 2FA, you will be prompted until it is enabled. Policy details appear on Profile when set by an admin under Workspace settings.

Sessions and devices

Review signed-in sessions and sign out other devices if a laptop or phone is lost.