Two-step verification, also called multi-factor authentication (MFA), adds a second layer of security to your account, making it significantly harder for someone to log in, even if they have your password. This article walks you through setting up two-step verification and explains what to do if you ever lose access to your verification method.
⚠️ Account lockout: If you no longer have access to the phone number you enrolled with and did not save the recovery code, please complete the lockout form. For security purposes, you will need to verify your identity.
Key Points
Two-step verification dramatically reduces the risk of unauthorized access to your account, which is particularly important when dealing with sensitive, protected health information (PHI).
Two-step verification is currently optional for Grow Therapy clients.
You can verify your identity using an authenticator app or a code sent to your phone via text or voice call.
Once you've verified on a device and browser, Grow Therapy will recognize it on future logins, so you won't be prompted again on the same device and browser.
The benefits of two-step verification
While a strong password is essential, it alone can't guarantee your account's security. Two-step verification adds a second layer of protection; even if someone has your password, they won't be able to log in without also having access to your verification method.
How to set up two-step verification
Follow these steps to enroll in two-step verification and secure your account.
1) Log in to your client portal
From your client portal dashboard, select Account.
Select the Settings tab.
Select Enroll next to "2-step verification" in the "Security settings" section.
Select Enroll from the prompt that appears. You'll be logged out and asked to re-enter your email and password before continuing.
2) Choose your preferred verification method
Authenticator app: Select Google Authenticator or similar to verify your identity with an authenticator app.
Phone-based verification: Select Phone to verify your identity using one-time codes sent via text message or voice call.
3) Enable two-step verification
Authenticator app verification
Authenticator app verification
Open your preferred authenticator app (e.g., Google Authenticator or Duo).
Scan the QR code on your screen, and the app will generate a 6-digit code.
Enter the code into the provided field and select Continue.
Phone-based verification
Phone-based verification
Enter your mobile phone number into the provided field.
Select either the Text Message or Voice Call option.
Select Continue.
🌟 Note: Enter your mobile phone number starting with the area code, without the country code.
A 6-digit verification code will be sent to your phone via text or voice call.
Enter the code into the provided field and select Continue.
If you don't receive a code, confirm the number you entered is correct, then try the Voice Call option. If the issue persists, complete the lockout form to regain access.
4) Save your recovery code
Copy the single-use recovery code and save it in a secure location. A password manager or a written note works well.
Check the box confirming you've saved the code, then select Continue.
🌟 Note: Keep your recovery code in a secure place. You may need it if you lose access to your verification method (e.g., if your phone is lost or broken).
Test the process
Once you've enabled two-step verification, log back in to confirm the setup. Enter your password and the verification code sent to your phone or generated by your authenticator app. After entering the correct code, you'll be redirected to your client portal dashboard. If Grow Therapy recognizes your device and browser on future logins, you won't be prompted to verify again.
Additional resources
Find an authenticator app
If you want to secure your account by using an authenticator but aren't sure where to start, here's a brief list of applications available for download on your mobile device:
Troubleshoot
Resolve two-step verification issues and regain access to your account. See Troubleshoot two-step verification.
Frequently asked questions
Is two-step verification required? No, two-step verification is currently optional for Grow Therapy clients. However, it is strongly recommended to help protect your account and the sensitive health information it contains.
What if I don't receive the verification code? First, confirm that the phone number you entered is correct. If the number is right, try selecting the Voice Call option instead of text. If you still can't receive a code, complete the lockout form for account recovery assistance.
What if I get a new phone or change my phone number? Before switching phones or numbers, add your new phone as a verification method from Account → Settings. Then remove the old method. If you've already lost access to your old number, complete the lockout form.
Can I turn off two-step verification after enabling it? Yes. To disable it, go to Account → Settings and remove all enrolled verification methods. See Remove a two-step verification method for step-by-step instructions.
Can I use more than one verification method? Yes. You can add multiple methods, such as an authenticator app and phone verification, and set one as your default. See Add a two-step verification method for instructions.
Do I have to enter a verification code every time I log in? Not always. After your first successful verification on a device and browser, Grow Therapy will recognize that device and browser for future logins and won't prompt you to verify again.