2-step verification, also known as two-factor authentication (2FA), adds an extra layer of security to your SimplePractice account by requiring both your password and a unique verification code when you sign in. This helps prevent unauthorized access and protects your and your clients’ information.
In this guide, we’ll cover:
Note: For more information on troubleshooting common setup, sign-in, and recovery issues, see Troubleshooting 2-step verification.
Setting up 2-step verification
When enabled, 2-step verification adds an extra layer of security to your account by requiring a second form of verification when you sign in. You can choose to receive a verification code by text message or use an authentication app.
Authentication apps can generate verification codes without cell service. Depending on the app, you may be able to use it on a phone, tablet, or computer.
To enable 2-step verification for your account:
- Navigate to Settings > Profile > Profile and security
- Next to SimplePractice security, click Manage
- Next to 2-step verification, click Set up
- Enter your password
- Choose how you want to receive your verification code:
Tip: You can exit the setup process at any time by clicking Cancel in the top right corner.
Need help? If you’re having trouble setting up or using 2-step verification, see Troubleshooting 2-step verification.
Using text message
Note: The phone number you use for 2-step verification is only used to send verification codes. It isn't visible to clients or used for client communications.
Follow the steps below to complete 2-step verification setup using text message:
- If needed, click Edit to update your phone number
- Click Next to receive a text message with your verification code
- You’ll receive a confirmation text when you opt in to text message verification (message and data rates may apply)
- Enter your verification code
- If you didn’t receive a code, click Resend code
- Click Confirm
- Click Done
Important: Verification codes expire after 3 minutes or if a new code is requested.
Using an authentication app
Follow the steps below to complete 2-step verification setup using an authentication app:
- Download an authentication app on your mobile device
- Google Authenticator, Duo, and Authy are commonly used options
- Open the app and scan the QR code displayed in SimplePractice
- Follow the prompts in the app to add your SimplePractice account
- For detailed instructions, see:
- Click Next
- Enter the code from your authentication app
- Click Confirm
- Click Done
FAQs
- Is 2-step verification required?
- Will I need to enter a verification code every time I sign in?
- I don't have access to a mobile phone. Can I still use 2-step verification?
- I have a biller or virtual assistant. Can they use my SimplePractice login?
- How can someone access my account if I'm unavailable?
- How do I turn off 2-step verification?
Is 2-step verification required?
We encourage all customers to enable 2-step verification to help protect their account and client information. Enabling 2-step verification strengthens your account security and helps your practice stay ahead of evolving healthcare security best practices. We’ll communicate any changes to 2-step verification requirements in advance.
To learn more about the importance of 2-step verification, see Why therapists should care about two-step verification.
Will I need to enter a verification code every time I sign in?
No. After signing in with 2-step verification, you can select Remember this device for 30 days.
You won't need to enter another verification code when signing in from the same device and browser during th3 30-day period.
You may be asked to verify again if you clear your browser data, use a different browser, or change certain browser settings.
Note: For security, only select Remember this device for 30 days on a personal device that you don't share with others.
I don't have access to a mobile phone. Can I still use 2-step verification?
Yes. You can still use 2-step verification without a mobile phone.
If you only have a landline or work in an environment where mobile phones aren't permitted, you can set up an authentication app on another supported device, such as your computer.
Some authentication apps, like Zoho OneAuth and 1Password, support desktop-based authentication, which lets you generate verification codes without using a mobile phone.
I have a biller or virtual assistant. Can they use my SimplePractice login?
Each person who needs access to your practice should be added as a team member and use their own login credentials. They can enable 2-step verification for that login.
Sharing account login credentials results in an inaccurate HIPAA Audit Log, violates Section 6 of our Terms of Service, and puts the security of client data at risk.
An Account Owner or practice manager can add a biller or virtual assistant as a team member and assign the appropriate role and permissions. On the Plus plan, the practice biller and practice scheduler team member roles can be added at no additional cost.
This lets each person securely access the information they need while helping keep your account secure. To learn more, see Adding and managing team members.
How can someone access my account if I'm unavailable?
If someone needs to access your account because you’re unavailable, they should contact our Support team. We'll work with the individual to verify their identity, review any required documentation, and follow our account transfer and access procedures.
If you're planning for an extended leave, retirement, or unexpected incapacity, we recommend creating a continuity plan for your practice, such as a professional will. To learn more about managing and sharing important practice documents in your account, see Managing business files.
If you need additional assistance, please reach out to our Support team.
How do I turn off 2-step verification?
2-step verification helps protect your account from unauthorized access. While we strongly recommend keeping it enabled, you can turn it off from your Account page. To do this:
- Navigate to Settings > Profile > Profile and security
- Next to SimplePractice security, click Manage
- Choose Turn off next to 2-step verification
- Enter your password
- Click Continue
You can reenable 2-step verification at any time by returning to Settings > Profile > Profile and security and click Set up next to 2-step verification.
Important: Opting out of text messages doesn't disable 2-step verification. If you’ve opted out and want to opt back in, see Can I opt back in to receive text messages if I accidentally opted out?