Security

Open Account menu → Account settings → Security to protect your personal Asnan+ account. These settings apply to you across all your clinics, including when you work as an assistant. They do not change another team member’s sign-in methods.

Enlarge image

Confirm a security change

Every security change needs a new identity check. Signing in or approving another change does not approve the next one. A confirmation works once for the selected change and expires after five minutes.

• Before adding your first method: Enter your account password, or choose Verify with Google if your account is linked to Google.
• With protection enabled: Choose Use passkey, or enter your password and a current authenticator code. If you use Google instead of your password, you still need the authenticator code.

Enlarge image

Google verification opens in a popup. Use the same Google account linked to Asnan+. Keep the original window open; it continues your change when verification finishes. If the popup is blocked, allow popups for Asnan+ and try again. Use Cancel in the waiting message to stop. An expired or cancelled confirmation needs a new check.

Add an authenticator app

An authenticator adds a six-digit code to password or Google sign-in. Use a compatible app, such as Apple Passwords, Google Authenticator, Microsoft Authenticator, or another app that supports time-based verification codes. The app can generate codes without internet or mobile service.

Protection is optional. Adding your first authenticator or passkey turns it on after you finish setup and save your recovery codes.

1. Under Two-step verification, choose Set up authenticator app.
2. Complete Verify your identity.
3. Scan the QR code with your authenticator app. If you cannot scan it, use the copy icon in the Setup key box and enter the key in your app.
4. Enter the current six-digit Confirmation code, then choose Confirm authenticator.
5. Save all ten recovery codes using the copy or download icons in the code box.
6. Select I have saved my recovery codes, then choose Continue.

Your other sessions are signed out when you activate protection for the first time. Keep the QR code, setup key, and recovery codes private.

To move to another app or device, choose Replace authenticator. Confirm your identity using your current method, then complete the new setup. Your current authenticator keeps working until you confirm its replacement.

Choose Turn off to remove the authenticator. Read the confirmation and verify your identity. If it is your last sign-in method, protection turns off and your recovery codes stop working.

Add or manage passkeys

A passkey uses your device’s screen lock or a physical security key. It can sign you in directly without your Asnan+ password. Add a passkey on a device or password manager you control.

1. In Passkeys, choose Add passkey.
2. Enter a recognizable Passkey name, such as your laptop or security-key name.
3. Choose Add passkey and verify your identity.
4. Follow the browser’s instructions to create the passkey.
5. If this is your first method, save the recovery codes and acknowledge them to finish setup.

Enlarge image

The table shows each passkey’s Name, Added date, and Last used date. Use the pencil icon to rename one or the trash icon to remove it. Hover over an icon or focus it with the keyboard to read its label. Renaming and removing each need a new identity check.

If your browser reports that passkeys are unavailable, use a supported browser or your authenticator. If you cancel a device prompt, try again or choose another available method.

Removing your last authenticator or passkey asks you to confirm that protection will turn off. Recovery codes then stop working.

Keep recovery codes available

Recovery codes help you regain access if your authenticator or passkeys are unavailable. Check the number remaining in Recovery codes. Choose Generate new codes, read the warning, and verify your identity to replace the whole previous set.

Copy or download the ten new codes. Each works once, and they will not be shown again. Select I have saved my recovery codes and choose Continue before leaving the dialog. Store them somewhere safe that you can reach if you lose your device.

Using a recovery code signs out previous sessions and removes the old sign-in methods. You must set up a replacement and save new recovery codes before returning to the clinic. See sign-in recovery for the steps.

Change your password

Choose a new password if you think someone else knows yours. Use one that you do not use for another account.

1. In Keep your password secure, choose Update password.
2. Enter Current password, New password, and Confirm new password in the dialog.
3. Follow the checklist: use at least 10 characters, include a number or special character, and make both new-password entries match. The password must differ from your current password.
4. Choose Update password and complete the new identity check.
5. Wait for the Password updated notification. Your other sessions are signed out.

Enlarge image

If you cannot provide your current password, use Forgot password. A password reset signs out every session but keeps your enrolled authenticator and passkeys.

Change or verify your email

Keep an email address that only you can open. It receives verification links and important account messages.

1. In Email, enter the address you want to use and choose Verify.
2. If you are changing the address, complete Verify your identity to approve that address.
3. Open the verification message sent to the new inbox and follow its link.
4. Return to Security and check the verified address.

A Pending email change is waiting for verification; your saved address has not changed yet. Choose Cancel pending change if the address is wrong or you did not request it.

Change or verify your phone

Phone verification is separate from authenticator and passkey protection. Asnan+ still uses your verified phone for contact verification and phone password resets.

1. Check the country code and enter a number you control.
2. Choose Verify.
3. Enter the six-digit code received through Telegram, WhatsApp, or SMS, then choose Confirm.
4. Complete Verify your identity when adding or changing the number.
5. Check that the phone is verified before leaving.

For a pending change, use Enter code to continue or Cancel pending change to abandon it. If the request or code has expired, start again to request a new code.

Respond to an unexpected change

Do not follow a verification link or share a code for a change you did not request. While you still have access, cancel the pending change, change your password, and remove any sign-in method you do not recognize. Sign out on shared computers.

Asnan+ does not currently show a list of signed-in devices in the clinic app. If someone else may control your account, also secure its email address and phone number. Contact Asnan+ support  if you cannot sign in or cancel an unrecognized change.