Turn on two-factor login

Two-factor login adds a second check when someone logs in: after their password, they type a code that BloomText texts to their phone. An organization admin turns it on once, and it applies to every member.

Before you start

• You need to be an organization admin.
• Make sure each member has a current mobile number on their profile, so the code reaches them. See Edit your profile, phone numbers and email.

Require it for your whole organization

1. Click Settings, the gear at the bottom of the left bar.
2. Click Organizations.
3. Click your practice.
4. Open the Details tab.
5. Find Require SMS verification at login.
6. Click the switch to turn it on. It saves right away.
7. A bar at the top confirms Organization security settings updated.
8. At their next login, everyone enters their password, then a code BloomText texts to their phone.

What staff see at login

1. They type their email and password as usual.
2. BloomText texts a code to their phone.
3. They type the code to finish logging in.

If the code doesn't arrive, they can click Resend code after 30 seconds.

Good to know

• After someone enters a code on a device, BloomText trusts that device for 30 days and doesn't ask again there until then.
• On a shared computer that isn't trusted yet, a quick-login PIN sends the person to log in with their email and password, then the texted code.
• New organizations start with this setting on. Check the Details tab to see where yours stands.
• If someone changes or loses the phone that gets their codes, help them update their number before their next login. See Keep your sign-in secure.

Related

• Keep your sign-in secure
• Edit your profile, phone numbers and email
• Security and HIPAA compliance