Securing Access to HeartLab
Securing Access to HeartLab
HeartLab enforces password policies aligned with modern security recommendations to help protect user accounts and sensitive patient information.
Users should follow standard security best practices to reduce the risk of unauthorized access.
Recommended security practices include:
- Using a memorable but strong password or passphrase
- Enabling two-step verification (2FA)
- Using a trusted password manager
- Avoiding password reuse across systems
What is Two-Step Verification (2FA)?
Two-Step Verification, also known as Two-Factor Authentication (2FA), is an additional security layer used to confirm a user’s identity during sign in.
A secure system must confirm:
- Who you are, and
- That you are authorised to access the system
Authentication factors generally fall into three categories:
Something you know
Examples:
- Password
- PIN
- Passphrase
Something you have
Examples:
- Authenticator app
- Mobile device
- Security key
Something you are
Examples:
- Fingerprint
- Face recognition
- Other biometric authentication
Why 2FA Matters
Using only a username and password leaves accounts vulnerable to common attack methods.
Phishing
Attackers may send fraudulent:
- Emails
- SMS messages
- Fake login pages
designed to trick users into revealing credentials.
Password Reuse and Credential Stuffing
Reusing passwords across multiple systems increases exposure if another service experiences a data breach.
Attackers commonly test compromised credentials across many platforms automatically.
Password Spraying
Weak or commonly used passwords can often be guessed using automated attack techniques.
Recommended Security Actions
To improve account security:
- Enable 2FA from Settings → My Account → Security.
- Use a long, strong, unique password or passphrase.
- Avoid reusing passwords across systems.
- Use a password manager where possible.
- Avoid sharing usernames or passwords.
- Contact your local IT or security team if compromise is suspected.
Password Managers
Password managers can help:
- Generate strong passwords
- Store credentials securely
- Reduce password reuse
- Improve overall account security
Shared and Public Devices
When using shared or public computers:
- Avoid selecting “Remember this device”
- Sign out completely after use
- Avoid storing passwords in the browser
Suspected Account Compromise
If you suspect your account has been compromised:
- Change your password immediately.
- Review and re-enable 2FA if required.
- Notify your organisation’s IT or security team.
- Contact HeartLab Support if additional assistance is required.