Signing in securely, passkeys, text codes and trusted devices

Clinic admin holds patient information, so RafaNest asks for a second step at sign-in on top of your password. This guide covers how that works day to day.

Setting up a passkey

The first time you open clinic admin on a device, you set up a passkey, which is simply the fingerprint or face unlock you already use on that device. There is nothing extra to install.

Thirty days of trust, per device

Once you have verified on a device, it stays trusted for 30 days, and you are not asked again on it during that window. A new device, or the same device after 30 days, asks you to verify again.

If the passkey does not work

Choose "Having trouble" at the verification screen, and RafaNest sends a one-time code to the email on your account, or to your phone by text if you have a number on file. Either code lets you in without the passkey.

Automatic sign-out

After 20 minutes without activity, RafaNest signs you out automatically, so a screen left open at the front desk does not stay open to patient information indefinitely.

Sharing a computer

If more than one person signs in from the same machine, give each person their own browser profile, so nobody is verifying under someone else's passkey. This matters even more when a room or a front desk is shared between two practices.

Locked out

If you lose your only device and cannot get a code, contact RafaNest support and we reset your sign-in method after confirming it is really you.

For the rest of how patient data is protected once you are signed in, read how RafaNest protects patient records on AWS.