Two-Factor Authentication in Noterro

Two-factor authentication adds a second layer of security when you sign in to Noterro. Instead of relying on your password alone, you'll also enter a short verification code generated by an authenticator app on your phone. This helps protect your clinic's data, including patient records, billing information, and appointment history, even if your password is ever compromised.

What is an Authenticator App?

An authenticator app is a mobile application that generates time-sensitive verification codes. Each code is valid for about 30 seconds before a new one is created. Because these codes are generated on your device rather than sent via text or email, they're significantly more secure than other verification methods.

Once set up, the process is simple: when you sign in to Noterro, you'll open your authenticator app, read the six-digit code, and enter it alongside your password.

Supported Authenticator Apps

Noterro supports any authenticator app that uses the TOTP (time-based one-time password) standard. The three most common options are:

• Google Authenticator is a straightforward, free app available on iOS and Android. It generates codes with no account or sign-up required.
• Microsoft Authenticator is a free app that works the same way as Google Authenticator. If your clinic already uses Microsoft products, this may feel like a natural fit.
• 1Password is a paid password manager that can also generate verification codes. If you already use 1Password to manage your clinic's logins, this keeps everything in one place.

Other TOTP-compatible apps, such as Authy or built-in password manager features in iOS and Android, will also work with Noterro.

Which App Should I Choose?

If you don't already have an authenticator app installed, Google Authenticator is the simplest starting point. It's free, requires no account setup, and does exactly one thing well.

If you already use a password manager like 1Password that supports verification codes, use that. Fewer apps to manage means fewer things to remember.

The choice of app doesn't affect your Noterro account. You can switch to a different authenticator app later by disabling and re-enabling two-factor authentication in your security settings.

Why Two-Factor Authentication Matters

Clinic accounts contain sensitive health information protected by privacy regulations such as PIPEDA and HIPAA. A strong password is a good start, but passwords can be guessed, reused across services, or exposed in data breaches you may not even know about.

Two-factor authentication ensures that even if someone obtains your password, they still can't access your account without your physical device. For clinics handling patient records, this is one of the most effective steps you can take to protect your practice.