Account Security: Two-Factor Authentication and Passwords

Password Requirements

To ensure account security, Dermi Atlas Professional enforces the following password complexity requirements:

• At least 12 characters long
• A mix of uppercase and lowercase letters
• At least one number
• At least one special character

The system validates these requirements during account creation and password resets.

Two-Factor Authentication (2FA)

2FA can be enabled to add an extra layer of security to the local account.

Enabling 2FA

1. Sign in to Dermi Atlas Professional.
2. Navigate to Options => Account.
3. Locate the Two-Factor Authentication section and click Request Enable.
4. A setup link will be generated. Access it via:
   • Email: If the email is verified.
   • Dermi Atlas Manager: Via the shield icon verification panel.
5. Open the link and scan the QR code using an authenticator app (e.g., Google Authenticator, Authy, 1Password).
6. Enter the verification code to confirm setup.
7. Save the recovery codes in a secure location. The codes allow signing in if access to the authenticator device is lost. Two-factor authentication can also be disabled later from Options => Account using the Request Disable verification link.

Session Management

The Security & Authentication section includes a Log Out of All Devices card. Selecting Log Out immediately ends every active session across all devices and locations, including the current device, and clears all trusted devices. Signing in again is required afterward. Use this if unauthorized access is suspected or a shared workstation was left signed in.