Skip to main content

Set your security rules

  • Admin and clinic owner
Included in Clinic and above5 min

Short answer

In Clinizy Care, open Settings and press Security policies. Turn on two-factor sign-in for your own account, then set the password, session, device and lockout rules. Press Save policy to apply them to all staff. You can also sign out any device from the same page.

Before you start

  • Install an authenticator app on your phone, such as Google Authenticator.
  • Decide how long passwords should be and how many wrong tries lock an account.

Steps

  1. Open Settings, then press Security policies.

  2. Turn on two-factor sign-in for your own account. Scan the code with your authenticator app, then enter the 6-digit code.

    Security policies: the two-factor card with an Enable two-factor button, then the password and session rules, and the Save policy button at the top right.
    Step 2 of 8

    Tip:Save your backup codes. Each works once and is not shown again.

  3. Set the Password policy: the minimum length and which characters are required.

    Tip:Password rules apply to future password resets.

  4. Set how long sign-ins last and how many devices each person can keep active under Sessions.

    Tip:On shared front-desk or ward computers, set an idle timeout of 20 to 30 minutes. A value of 0 turns it off.

  5. Set how many failed attempts lock an account, and for how many minutes, under Account lockout.

  6. Choose whether staff can use more than one device under Device access.

    Careful:Use Block unknown devices only after device review is set up for your clinic.

  7. Press Save policy after you change any rule. The policy applies to all staff.

    Careful:If a box shows a red range message, fix it first. Save stays blocked until then.

  8. Press Revoke on a session under Signed-in devices to sign that device out straight away.

    The Signed-in devices list, where each session has a Revoke button.
    Step 8 of 8

    Careful:Revoking works at once. It does not wait for you to save the policy.

If something goes wrong

Does two-factor apply to all staff?

No. The two-factor card turns it on for your own account only.

When do new password rules start?

They apply to future password resets, as the Password policy card says.

How do I sign out a lost phone?

Find it under Signed-in devices and press Revoke. That device is signed out straight away.

Was this guide helpful?

Last updated 23 Oct 2026By the Clinizy Care product team