Account Security: Two-Factor Authentication and Passwords

Password Requirements

To ensure account security, Dermi Atlas Professional enforces the following password complexity requirements:

• Between 12 and 256 characters long
• A mix of uppercase and lowercase letters
• At least one number
• At least one special character from the accepted set ! @ # $ % ^ & * ( ) - _ = + { } ; : , < . > ?. Other symbols are not accepted.

The system validates these requirements during account creation and password resets.

Two-Factor Authentication (2FA)

2FA can be enabled to add an extra layer of security to the local account.

Enabling 2FA

1. Sign in to Dermi Atlas Professional.
2. Navigate to Options => Account.
3. Locate the Two-Factor Authentication section and click Request Enable.
4. A setup link will be generated. Access it via:
   • Email: If the email is verified.
   • Dermi Atlas Manager: Via the shield icon verification panel.
5. Open the link and scan the QR code using an authenticator app (e.g., Google Authenticator, Authy, 1Password).
6. Enter the verification code and click Verify and Enable 2FA.
7. Save the recovery codes in a secure location, using Save to File or the copy control. The codes allow signing in if access to the authenticator device is lost.
8. Click Sign In, which is the only way forward from the recovery codes screen. Enabling two-factor authentication ends the current session and clears all trusted devices, so signing in again with an authenticator code is required.

Illustrative demo with synthetic data. Learn more

Signing In with 2FA

Once 2FA is enabled, the sign-in page hands off to an Enter Authentication Code step after the username and password are accepted. The current code from the authenticator app is entered there and confirmed with Verify.

Illustrative demo with synthetic data. Learn more

Signing In with a Recovery Code

If the authenticator device is unavailable, Need help? on that step reveals a Use recovery code action, which switches the page to Enter Recovery Code. Ten recovery codes are issued when 2FA is enabled, and each one works a single time; a code is consumed once it has been used to sign in.

Illustrative demo with synthetic data. Learn more

Disabling 2FA

Two-factor authentication can also be disabled later from Options => Account using the Request Disable verification link. The link opens the Confirm 2FA Removal page, which takes a current authenticator code and the Disable 2FA action.

Illustrative demo with synthetic data. Learn more

Password Reset and Account Recovery

If the password or the username is forgotten, Forgot your login? on the sign-in page opens the Recover Account page. Entering the account email address and selecting Recover Account generates a recovery link. The link is emailed to the address on file together with the username; when no email is sent, the confirmation reports that the link has been created and it can be opened from Dermi Atlas Manager through the Verifications icon (shield). Recovery requires a verified email address, and the link expires after one hour.

Illustrative demo with synthetic data. Learn more

The link opens the Change Your Password page, whose New Password field enforces the complexity requirements listed above. Selecting Update Password applies the new password, ends every active session, and clears all trusted devices, so signing in again with the new password is required.

Illustrative demo with synthetic data. Learn more

Session Management

The Security & Authentication section includes a Log Out of All Devices card. Selecting Log Out immediately ends every active session across all devices and locations, including the current device, and clears all trusted devices. Signing in again is required afterward. Use this if unauthorized access is suspected or a shared workstation was left signed in.