This article assumes you:
- Have a Tidepool Clinician account — Only Clinician users can use two-factor authentication (2FA)
- Are not logging into Tidepool with your organization's Single Sign-On (SSO) — in this case, your organization controls this security feature so Tidepool's 2FA is not available to you
- Have a smartphone with an Authenticator app — You need a smartphone with an Authenticator app.
- Understand how 2FA works — You’ve set up two-factor authentication before and are comfortable using an authenticator app to generate one-time codes
Two-factor authentication is additional layer of security to protect your Tidepool account. Tidepool encourages clinicians to use this to protect their account and help secure private health information of people with diabetes.
- Click on [Your Name] at the top right of the page.
- Click on Account Settings from the dropdown menu.
- In the Security section on the Account Settings page, click Set up 2FA.
-
Review the recommendations in the message that appears, and click I understand to continue.
⚠️ If you do not have a second Clinic Admin in your workspace and have 2FA enabled and cannot use your 2FA or Recovery codes, your account and your patient data will be inaccessible. Please ensure you have at least two Clinic Admins in your Workspace to reduce this risk. - Open your authenticator app on your smartphone, scan the QR code displayed on screen.
Tidepool recommends the following Authenticator apps: - Microsoft Authenticator - iOS | Android
- EPIC Authenticator - iOS | Android
- Duo Authenticator - iOS | Android
- Google Authenticator - iOS | Android
-
Click Next.
💡Need help setting up your authenticator app? Talk to your local IT team for assistance as they can provide recommendations on which app to pick, and guide with scanning the QR code - Enter the 6-digit code displayed in your authenticator app into the Enter 6 digit code (OTP) field, and add a name for your smartphone (Name this personal device).
-
Click Add Device.
Save your backup codes using one of the three options provided: Print, Download, or Copy.
See Managing your 2FA Recovery Codes for Tidepool's guidance on recovery codes.⚠️ Backing up your recovery codes is strongly recommended because if you lose access to the device that has your authenticator app you cannot recover your Tidepool account. Tidepool Support cannot assist you and will only be able to delete your account and let you start from a brand new account that is entirely disconnected from your patient list in your Clinic Account Workspace. - Check the box confirming I have saved these codes someplace safe and click to proceed.
- Click Finish to complete the setup.
- Once this is completed, you will be required to use your 2FA authenticator app to log into Tidepool moving forward. You will see the status of your Two-factor authentication (2FA) on the Account Settings page showing 2FA Enabled when it is turned on.
Have Questions?
Ask your local IT team if you are needing extra help with setting up your authenticator app. They are experts in setting up 2FA, and are likely the ones who recommended you set this up. Otherwise, send Tidepool Support a message to support@tidepool.org and we can walk you through any confusion.
SUP-236