Securing your patient account with multi-factor authentication (MFA)

Overview

Keep sensitive information between you and your practitioner by adding multi-factor authentication (MFA) in a few quick steps! Get peace of mind knowing that your health and financial data is protected by an added layer of security on Fullscript.

When enabled, anyone attempting to access your account will need to enter your password and an authentication code to log in successfully. This added security measure is optional.

You can choose between one of two security methods:

• Authentication app (recommended): Download an authentication app, such as Google Authenticator, Microsoft Authenticator, LastPass Authenticator, Twilio Authy Authenticator, etc. to receive one-time login codes.
• SMS: We’ll send a text with an authentication code to the phone number associated with the account.

Setting up multi-factor authentication from your Account settings

To set up multi-factor authentication:

1. Click your avatar or initials from the navigation bar.
2. Click My account.
3. Under Password, find multi-factor authentication and click Set up.

   

4. Then, choose the security method you want to use and follow the on-screen instructions.

Enabling multi-factor authentication: Authenticator app option

You can choose to enable multi-factor authentication and log in with one-time codes generated by an authenticator app, such as Google Authenticator, Microsoft Authenticator, LastPass Authenticator, or Twilio Authy Authenticator.

To enable multi-factor authentication using an authenticator app:

1. After clicking Set up in your Account settings, select Use an authenticator app.
2. Click Next.
3. Download or open the authenticator app on your mobile device.
4. Back in Fullscript, click Next.

   

5. Using your mobile device, scan the QR code or manually enter the code in your authenticator app.
6. Enter the one time code from the app in the One time code field.
7. Click Next.

   

8. Copy your backup code or take a screenshot of it and store it in a private folder on your device.

9. Then, click Done.

Enabling multi-factor authentication: SMS option

You can choose to enable multi-factor authentication and log in with one-time codes sent to your phone via SMS.

To enable multi-factor authentication using SMS:

1. After clicking Set up in your Account settings, select Use text message.
2. Click Next.
3. Enter your mobile number.
4. Click Send code.

   

5. Enter the code sent to your mobile device and select Next.

   

6. Copy your backup code or take a screenshot of it and store it in a private folder on your device.

7. Click Done.

Logging in with a code

Using a one-time code

When multi-factor authentication is enabled, we’ll ask you for a one-time code in addition to your password each time you sign in to confirm your identity.

To log in with your one-time code:

1. Log into your Fullscript account with your email address and password.
2. Enter the one-time code that was sent to your phone or generated from your authenticator app.
3. Click Next.

   

Using a backup code

If you’ve lost access to your multi-factor authentication method, use a backup code to access your account. Backup codes are provided during set up, with prompts to copy and store them securely.

To sign in to your account with a backup code:

1. Sign in with your email and password.
2. When asked for your one-time code, click Use backup code to sign in.

   

3. Type in the backup code you were given when you set up multi-factor authentication.
4. Click Next.
5. You’ll be given a new backup code, as the previous one is now expired. Copy and securely store that backup code.

   

6. Click Next to complete the login process.

Logging in without a code

With multi-factor authentication enabled, you’ll need a one-time code or backup code to log in. If you can’t access either, contact our customer support team to recover your account.

Adding a trusted device

Once multi-factor authentication is set up, you can mark a device as trusted the next time you sign in. This lets you skip the extra authentication steps on future sign-ins.

To mark a device as trusted, click the Trust this device checkbox when you provide your one-time code. Then click Next to sign in and complete the set up process.

Multi-factor authentication on iOS and Android

You can’t enable or disable multi-factor authentication in the mobile app. To manage your MFA settings, log in through a web browser on your desktop or mobile device. If your device supports FaceID, you can use it to bypass MFA during sign-in.