Compliance
Two-Step Verification (2FA)
Enable or remove two-step verification for HeartLab accounts that use username and password sign-in.
Two-Step Verification (2FA)
Two-step verification (2FA) adds an additional layer of security to your HeartLab account.
After entering your username and password, you will be prompted to enter a temporary verification code generated by an authenticator application.
This helps:
- Protect user accounts from unauthorised access
- Improve account security
- Reduce the risk of compromised passwords
If your organisation uses Single Sign-On (SSO), two-step verification is managed by your organisation's identity provider (for example, Microsoft 365) rather than within HeartLab.
Enable Two-Step Verification
Before enabling 2FA:
- Install an authenticator application on a mobile device.
Supported authenticator apps include:
- Microsoft Authenticator
- Google Authenticator
- Authy
To enable 2FA:
- Sign in to HeartLab.
- Select your profile icon in the top-right corner.
- Navigate to Settings → My Account → Security.
- Select Setup Two-Step Verification.
- Follow the on-screen prompts.
- Sign out of HeartLab.
- Sign in again using your username and password.
- Open your authenticator app and enter the verification code when prompted.
- Select Verify to complete sign-in.
Remember Trusted Devices
When signing in, users can optionally select:
- Remember this device for 30 days
This reduces how often verification codes must be entered on trusted devices.
Only enable trusted device settings on secure personal or organisation-managed devices.
Disable Two-Step Verification
If you wish to disable 2FA, remove it from HeartLab before deleting the account from your authenticator app.
To disable 2FA:
- Navigate to Settings → My Account → Security.
- Select Remove Two-Step Verification.
- Enter your password to confirm removal.
Administrators can also disable two-step verification for users from the user management settings. See Administrator 2FA Reset
Additional Notes
If you lose access to your authenticator device, contact your HeartLab administrator or HeartLab Support for assistance regaining account access.
Authentication behaviour may vary depending on organisational security policies and identity provider configuration.
MFR