Trust this browser, and Forget this browser

What it is

A tick box on the code screen: "Trust this browser, Skip the code next time, if your clinic allows it. Leave unticked on a shared computer."

If it is ticked and your clinic allows it, this browser only asks for your password on later sign-ins until the trust runs out. Your authenticator is still needed on every other browser and computer.

Why it is there

To save time on a computer only you use, while keeping strong security everywhere else.

Who can use it

Everyone, but it only works if your clinic allows it. The clinic sets the number of days in Admin → Settings → Sign-in & sessions → Trust this browser for (0 to 30 days). 0 means "always ask for the code" and is the starting setting. Only someone with the Change settings permission can change it.

How it works

• The box is ticked when the code screen opens. Untick it on a shared or public computer.
• Trust is decided only on a sign-in that asked for the code.
• If you tick it and the clinic allows trust, the browser is trusted for the clinic's number of days.
• If you untick it, any trust for your login on this browser is removed. Other people's trust on the same browser is not touched.
• Trust is per login, per browser. Two people sharing a computer each have their own trust.
• When the trust runs out, the next sign-in asks for the code again.
• If your login belongs to several clinics, the number of trust days comes from the clinic you choose at sign-in.

Forget this browser

When this browser is trusted, the sign-in page shows "This browser is trusted until [date], password only, no code." and the link "Not your computer? Forget this browser".

Clicking it removes the trust for every login on this browser. The next sign-in on this browser asks for the code again. Nothing else changes.

Other things that remove trust

• An admin clicks Start over for you.
• The browser's saved site data is cleared, or you use a private/incognito window (trust is not kept there).
• The portal's web address changes (trust belongs to one address).

Questions people ask

Q: I ticked "Trust this browser" but it still asks for the code.

A: Your clinic's Trust this browser for is probably 0 ("always ask for the code"). Ask an admin. Also, a private window, a different browser, or cleared browser data will all ask again.

Q: How do I stop this computer skipping the code?

A: On the sign-in page click Not your computer? Forget this browser. Or, at your next code screen, untick Trust this browser.

Q: Is it safe to trust a browser?

A: On your own computer, yes, for a short time. On a shared front-desk computer, leave it unticked.

Q: If I change the trust days in Settings, when does it apply?

A: From the next sign-in. Browsers trusted before keep the date they were given.