Account security
Verify with email MFA
Complete multi-factor verification with a one-time code sent to your work email before opening protected patient data.
5 min readSecurity and compliance
When MFA is required
Organizations can require MFA for all staff. When it is on, you confirm it is you with an emailed code before you can open any page for that clinic: patients, team, invites, settings, and billing. New clinics set up by PeptIQ or a partner have it on from the start. Demo sandbox orgs may skip MFA for rep walkthroughs.
- If you signed in with an emailed sign-in code, that already counts. You will not be asked again on that device.
- If you signed in with a password or Google, you will be asked for a code once per device, about every 12 hours.
- Codes expire after a short window and can only be used once.
- Request a new code if yours expired or never arrived.
- Check spam and confirm you signed in with your invited work email.
Complete verification
- 1Open Security → MFA from the console sidebar or during Finish clinic setup.
- 2Choose Send code to deliver a six-digit code to your email.
- 3Enter the code and confirm within the time limit.
- 4You go back to the page you were opening. Verification lasts about 12 hours on this device only. Other computers or phones ask separately.