This release covers all changes since 2.0.66.
New Features
Two-step sign-in with an authenticator app
Staff can now add a second step to signing in. As well as their password, they type a 6-digit code from an authenticator app on their phone, so nobody can get in with a password alone. Set it up from Settings → My account → Two-step sign-in. Recovery codes let you sign in if your phone isn’t with you.
Practice managers choose how the practice signs in under Preferences → Practice Details: Off, SMS or Authenticator app required. When an app is required, anyone without one sets it up the next time they sign in. If someone loses their phone, a manager can reset their app from Find Users by right-clicking their name.
Training videos (Two-step sign-in):
- Setting up your authenticator app
- Signing in with your authenticator app
- Two-step sign-in for your practice
- Setting up when your practice requires it
GDPR consent
Every patient now has a built-in GDPR check list with GDPR consent given ticked to start with. Untick it on the patient’s Check Lists tab for anyone who doesn’t want to hear from you. The list is built in, so it can’t be deleted or renamed.
Email, text and patient form mail shots now automatically leave out anyone whose consent is unticked. Recalls, appointment reminders and confirmations still go, because they’re about the patient’s care.
The Form Designer has a new GDPR consent tick box for online forms. The patient’s answer updates their consent. For a form sent in through your general link, right-click the response and choose Link to patient… to match it to the right patient and update their consent.
Training videos (GDPR consent):
Form Designer
On form responses, right-click a response that arrived without a patient and choose Link to patient… to match it to the right person. “Patient Details” is no longer offered for an unknown patient. In a row’s columns, add an element by right-clicking, as with other menus.
Changing users’ roles and status
Changing someone’s role, or making them active, inactive or locked, now needs the Change User Capabilities permission, and you can’t change your own. The screens grey these options out when you can’t use them, and explain if a change is refused.
Resolved Issues
- Form Designer: only the first 10 forms in the forms list could be reached. The list now pages, showing 10, 25 or 50 forms per page.
- Preferences: the practice’s two-step sign-in setting always showed as off when the page opened, whatever had been saved.
- Security improvements to user records and to how patient forms are linked to patients.