Enhancing Your Security with DocStation's Multi-Factor Authentication
DocStation is committed to maintaining the highest standards of security and privacy. Our new Multi-Factor Authentication (MFA) feature provides an additional layer of protection for your account, helping to safeguard both your information and your patients' data.
Healthcare data requires special protection. With increasing cybersecurity threats targeting healthcare organizations, we've implemented MFA to strengthen our security measures beyond just passwords. This feature helps prevent unauthorized access, even if your password is compromised.
Benefits of Using MFA
Enhanced Security: Adds an extra verification step that significantly reduces the risk of unauthorized access
Peace of Mind: Ensures that sensitive patient information remains secure, even if credentials are compromised
Simple User Experience: Quick verification process that adds minimal time to your login workflow
What to Expect
When MFA is enabled, you'll log in with your username and password as usual, but you'll also need to provide a second form of verification. This involves entering a time-sensitive code obtained from an authentication app. The entire process takes just a few extra seconds but provides substantially improved security.
The following guide will walk you through the simple process of setting up and using Multi-Factor Authentication on DocStation.
How to Enable MFA
Navigate to your personal settings by hovering over the Settings cog in the left navigation menu. Click on your name.
At the bottom of the Profile tab, click Enable Multi-Factor Authentication.
Follow the prompts and re-enter your password.
Use an authenticator app to scan the QR code, or type in the code to activate.
Save the recovery code in a safe place.
Example Activation Using 1Password
Example Activation Using 1Password
Navigate to your personal settings by hovering over the Settings cog in the left navigation menu. Click on your name.
At the bottom of the Profile tab, click Enable Multi-Factor Authentication.
Follow the prompts.
Navigate to 1Password, and from the More Actions menu, select Scan QR Code.
Once the one-time password is added to the account, return to the Enable Multi-Factor modal and click inside the Verification Code box. You should be prompted to select the password option you just activated in 1Password.
Click Verify Code.
Save the recovery code in a safe place.
Logging In With MFA
Navigate to DocStation's login screen and enter your password.
Enter the temporary code from the authentication app. This is time-sensitive and must be entered before the code expires.
Click Continue to gain access to DocStation.
Frequently Asked Questions
General Questions
Q: Is MFA mandatory for all DocStation users?
A: While MFA is available to all users, DocStation does not require users to enable the feature. However, many healthcare organizations may require MFA for compliance with internal security policies.
Q: How often will I need to use MFA when logging in?
A: DocStation will prompt you for MFA verification once every 30 days. After successful authentication, you'll be able to log in with just your password for the next 30 days.
Q: Which authentication apps can I use with DocStation's MFA?
A: DocStation's MFA works with standard authentication apps like Google Authenticator, Microsoft Authenticator, Authy, and 1Password. You'll need to download one of these apps to set up MFA.
Q: Why can't I get a code to my email or SMS to my phone?
A: Using an authentication app provides the highest security measures for your DocStation account, while phone numbers and email accounts can more easily be hijacked without notice.
Q: Will MFA slow down my workflow?
A: Since MFA verification is only required once every 30 days, it adds minimal time to your overall workflow while significantly increasing security.
Troubleshooting
Q: What if my authentication app isn't generating codes?
A: Ensure your device's time and date settings are correct, as authentication apps rely on accurate time synchronization. If issues persist, you may need to remove and re-add your DocStation account in your authentication app.
Q: I'm locked out of my account. What should I do?
A: The recovery code provided at the end of the activation workflow will enable you to regain access to your DocStation account. During the login workflow, select "Try another method" and choose "Recovery code". Then enter the recovery code and proceed to login.
