Compliance
Two-Step Verification (2FA)
Enable or remove two-step verification for HeartLab accounts that use username and password sign-in.
Two-Step Verification (2FA)
Enabling two-step verification (2FA) is strongly recommended to help safeguard access to HeartLab.
After entering a username and password, users must also enter a temporary verification code generated by an authenticator application.
This helps:
- Protect user accounts from unauthorized access
- Improve account security
- Reduce the risk of compromised passwords
Applies to
- All registered HeartLab users using username/password authentication
If your organisation uses Single Sign-On (SSO), two-step verification is typically managed through your organisation’s identity provider (for example Microsoft 365) rather than directly within HeartLab.
Enable Two-Step Verification
Before enabling 2FA:
- Install an authenticator application on a mobile device.
Supported authenticator apps include:
- Microsoft Authenticator
- Google Authenticator
- Authy
To enable 2FA:
- Sign in to HeartLab.
- Select your profile icon in the top-right corner.
- Navigate to Settings → My Account → Security.
- Select Setup Two-Step Verification.
- Follow the on-screen prompts.
- Sign out of HeartLab.
- Sign in again using your username and password.
- Open your authenticator app and enter the verification code when prompted.
- Select Verify to complete sign in.
Remember Trusted Devices
When signing in, users can optionally select:
- Remember this device for 30 days
This reduces how often verification codes must be entered on trusted personal devices.
Only enable trusted device settings on secure personal or organisation-managed devices.
Disable Two-Step Verification
If you wish to disable 2FA, remove it from HeartLab before deleting the account from your authenticator application.
To disable 2FA:
- Navigate to Settings → My Account → Security.
- Select Remove Two-Step Verification.
- Enter your password to authorise removal.
Additional Notes
If you lose access to your authenticator device, contact your HeartLab administrator or HeartLab Support for assistance regaining account access.
Authentication behaviour may vary depending on organisational security policies and identity provider configuration.