WriteUpp – Two Factor Authentication (2FA) (Desktop v2.05.2)
This is our ninth and final update of 2017!
In this release the emphasis is on security and the first phase of our preparations for GDPR (General Data Protection Regulation), which comes into effect in May 2018. If you would like to know more about GDPR please take a look at our article below:
Two-Factor Authentication (2FA)
Two-factor authentication (2FA) provides an OPTIONAL added layer of security for your WriteUpp account.
As the name suggests 2FA uses two mechanisms (instead of one) to verify your identity when you login to WriteUpp. In our case these two mechanisms are:
- Username/password – like normal
- Your mobile phone
All this means in reality is that the login process has one extra step after you have entered your username and password. This step involves entering a Time-based, One-time Password (TOTP) which is a six digit code generated by the Google Authenticator app on your mobile phone.
In case you’re wondering, time-based means the code changes every 30 seconds.
The thinking behind this is that if your username/password is compromised, anyone trying to maliciously access your account would also require your mobile phone to generate your unique six digit code to gain access to your account.
Setting up and using 2FA (we use it on all our internal systems) on a daily basis is very straightforward, however it does require some careful thinking, planning and consideration before it is enabled (by default it is disabled). In particular, its important to understand:
- What 2FA is?
- How 2FA works?
- What the implications of enabling 2FA are?
The article below explains everything you need to know, including links to the various 2FA-related articles in the Help Centre and sample documents that you can use to communicate the changes to your team.
As well as implementing 2FA we have made a number of small improvements:
- If you have added your own Custom fields these now appear when you create a new patient, they didn’t previously
- Stripe can now be used to take payment on Norwegian sites
- “Massage Therapist” added as a user speciality
- Various non-disruptive errors that we’re identified by our back-end logging were fixed
- “Find Appointment” button in the Treatment’s menu of Online Booking now displays correctly
- Problem adding a field to a new form in the form builder has been resolved
- Quick invoicing on diary “list view” now works as expected
If you have any questions or comments please send our lovely team a message via email@example.com