Clinic team

Two-factor sign-in

Turn on email codes for your account, require them for your team, and reset a member who is locked out.

Two-factor sign-in adds a second step after your password. ClinicGem emails you a 6-digit code, so someone who learns your password still can't open your account or your clients' records.

Turn it on for your account

  1. Select your avatar in the top-right corner, then choose Credentials.
  2. Under Two-factor authentication, turn on Email code.
  3. Enter the code we email you, then select Confirm.

From then on, each sign-in asks for a new code after your password. Enter the 6 digits and select Verify and continue. You then go to Schedule, or the page you were opening. Codes expire after 10 minutes. Select Send a new code if one doesn't arrive (you can request one every 60 seconds).

To turn it off, switch Email code off and confirm with a code.

If you leave ClinicGem open

After 14 minutes with no clicks, typing, or pointer movement, ClinicGem shows You will be signed out in 60 seconds. Select Discard to keep working, or Confirm Logout to sign out now. If you do nothing, you are signed out at 15 minutes and returned to Log in. When you log back in, ClinicGem takes you to the page you were on. This also happens if your session expires for any other reason. Signing out from your account menu always starts you on the schedule. The same warning appears in the client portal.

Too many failed sign-ins

After 5 failed attempts for the same email, or 10 failed attempts from the same place, within 15 minutes, Log in shows Too many failed attempts. Please wait 15 minutes and try again. A successful sign-in does not reset that wait.

Require it for your whole team

Owners and Super Admins can make two-factor sign-in mandatory:

  1. Turn on two-factor for your own account first.
  2. Open My Clinic → Staff.
  3. Turn on Require two-factor sign-in.

Everyone on the team, including practitioners, is asked for an email code at their next sign-in, and email codes are turned on for their account. While the requirement is on, members can't turn two-factor off.

Reset a team member

If a team member can't receive codes, an Owner or Super Admin can open My Clinic → Staff, select Manage next to their name, and choose Reset under Two-factor sign-in. This turns off their email codes. The reset appears in My Clinic → Data Security → Audit Logs when Include technical events is on.

Reset isn't available while Require two-factor sign-in is on. Turn the requirement off first, or update the member's email address.