Security Settings & 2FA

Under EU health data protection regulations, healthcare platforms must implement strong authentication measures to protect sensitive medical information. 2FA ensures that only you can access your account, even if someone obtains your password. This protects your prescriptions, medical records, and personal health data from unauthorized access.

When you log in with 2FA enabled, we send a unique 6-digit code to your registered phone number. Enter this code within 5 minutes to complete your login. Each code can only be used once and expires quickly for maximum security. You'll receive a new code for each login attempt.

When you enable 2FA, you'll receive backup codes that you can use to access your account if you lose your phone. Each backup code works once. Store these codes safely in a password manager or printed in a secure location. You can always generate new backup codes from your settings if you've used them all.

Backup codes are one-time use codes that let you log in without your phone. During login, click "Use backup code" instead of entering an SMS code. Enter one of your unused backup codes to access your account. Each code becomes invalid after use. You can generate a new set of codes anytime, which invalidates all previous codes.

Yes! The Active Sessions section shows all devices currently logged into your account. You can see the browser, operating system, approximate location, and last activity time for each session. If you see an unfamiliar device, you can end that session immediately and change your password for added security.

Go to Settings > Security and scroll to the Change Password section. Enter your current password, then your new password twice. We recommend using a strong password with at least 12 characters, including uppercase, lowercase, numbers, and symbols. The password strength meter will help you create a secure password.

Deactivating your account pauses it temporarily. You won't receive notifications, and subscriptions will be put on hold. Your data, credits, and TTY Points remain intact. To reactivate, simply log in again - everything will be exactly as you left it. This is different from deletion, which is permanent.

We use bank-level encryption (AES-256) for all sensitive data. Identity verification is handled by Sumsub, a trusted third-party provider - we never see your ID documents directly. All data handling is GDPR compliant, and you can request a full export of your data or deletion at any time from Privacy & Data settings.