Make your clinic account more secure
Use your security score and rules to tighten clinic-wide sign-in.
Administrators can set rules for how everyone signs in. Go to Setup, open Business Details and choose Security.
Check your score
The top of the page rates your account against the baseline standard and lists what to improve, each with a Manage button. Audit log in the corner shows failed sign-ins.
Set the rules
Allowed login methods: password, passkeys, and Google or Microsoft login. At least one stays on.
Account 2FA preferences: which two-step methods staff may use.
Allowed login locations: only the countries you pick. IP exemptions lets a VPN or home office through.
Allowed login IPs: only the addresses you list. Add my IP adds yours.
Google Workspace SSO: staff sign in with a Google Workspace account.
Add your own IP or country before you turn on a location rule, so you do not lock yourself out.
Save when you finish. Keep the list of admins small: the Manage dialog lets you Demote to Member.
Up next
Next, read What a Super Admin can do.