Two-factor authentication (2FA) adds a second step to signing in to your Provider Dashboard — a code alongside your password — so an exposed password alone isn't enough to access patient data. We recommend every team member enables it.
The Two Methods
Authenticator app — scan a QR code with an app like Google Authenticator or 1Password, then enter the 6-digit code it generates when you sign in
Text message — receive a verification code by SMS to your phone
You can set up either, or both — having both means a backup if you lose access to one.
Important: the Oto patient app doesn't support 2FA. If you sign in to the patient app with the same email address as your dashboard account (for example, to demo the app or use it in telehealth appointments), enabling 2FA will stop you logging in to the patient app with that email. Use a different email address for patient-app access if you need both.
Enabling 2FA
Go to Settings → My Account
Find the Two-Factor Authentication section and click enable
Confirm your password when prompted (a security check before any 2FA change)
Choose your method and follow the steps — scan the QR code with your authenticator app, or verify your phone number for text messages
From then on, signing in asks for your password plus a code.
Disabling or Changing 2FA
You can disable 2FA or switch methods from the same place in Settings → My Account — you'll be asked to confirm your password (and a code, if prompted) first.
Locked Out?
If you've lost access to your authenticator app and your phone, message us through the chat bubble or email your account manager and we'll verify your identity and help you back in.