What is an authenticator app?
If you have not used one before, this page explains what it is, why we ask for it, and how to set one up. It takes about two minutes.
The short version
An authenticator app lives on your phone and shows a six-digit number that changes every thirty seconds. When you sign in to Jubilee Health you type your password and then that number. The number proves you have your phone, so a stolen password on its own is not enough to reach your account.
It does not need your phone number, it does not send you texts, and it works with no signal - the numbers are generated on the phone itself.
Why we ask for it
Jubilee Health holds financial and operational information about medical practices. Passwords leak - through reused passwords, phishing, or a breach somewhere else entirely. The second factor is what keeps a leaked password from becoming a lost account. That is why the step is required and cannot be skipped.
Which app to use
Already have one? If you use Google Authenticator, Microsoft Authenticator, 1Password, Bitwarden, 2FAS or Authy, keep using it. They all work here and there is nothing to change. Any app that supports standard six-digit codes will pair with us.
Starting from scratch? We suggest Ente Auth. It is free and open source, it runs on iPhone, Android, Mac, Windows and the web, and its backups are encrypted so that only you can read them - the company cannot. It has been independently security-audited, which is unusual for a free app. Most importantly it answers the question every other app treats as an afterthought: what happens when you replace your phone.
If you would rather not create an account anywhere, 2FAS is the simplest alternative - install, scan, done, with optional backup to your own iCloud or Google Drive.
Setting up Ente Auth, step by step
1. Install it on your phone. Search for Ente Auth in the App Store (iPhone) or Google Play (Android). The publisher is Ente. It is free, and there is nothing to buy.
2. Create an account, or skip it. Ente asks for an email and a password. That account is what backs your codes up and syncs them to your other devices - it is Ente's, not ours, and we never see it. You can also choose to use the app without an account, but then nothing is backed up.
3. Save the recovery key it shows you. If you set up an account, Ente shows a recovery key once. Write it down or put it in a password manager. Because the backup is encrypted so only you can read it, nobody - including Ente - can recover your codes without it.
4. Come back to Jubilee Health and scan the square code. In Ente Auth tap the + button and choose to scan a QR code, then point your camera at the black and white square on our screen. Allow camera access if it asks.
5. Type the six digits back to us. The app will show an entry for Jubilee Health (jubilee-health.com) with your email address and a six-digit number counting down. Type that number into the box on our page. That is the pairing done.
From then on, signing in means your password and whatever six digits the app is showing at that moment.
If the app shows an unfamiliar logo beside our name, that is the app guessing from its own picture library, and it sometimes guesses wrong - there is more than one organisation called Jubilee, including an insurance company. What matters is that the entry reads Jubilee Health (jubilee-health.com) and shows your own email address. The code will still be correct.
Questions people ask
- Do I need signal or wi-fi? No. The codes are generated on the phone.
- The code stopped working. Codes last thirty seconds - wait for the next one and type it promptly. If it still fails, your phone's clock may be wrong; switch it to set the time automatically.
- I got a new phone. Install the app on it and sign back in to restore your codes. If you never set up a backup, ask whoever invited you to reset your access.
- Can I use a computer instead of a phone? Yes. Ente Auth runs on Mac, Windows and the web as well, and a password manager such as 1Password or Bitwarden can hold codes instead. All of them pair the same way.
- Does Jubilee Health see my authenticator? No. We store a shared secret used to check the six digits. We cannot read your phone, and we will never ask you for a code by email or on the telephone.
One rule worth keeping
Jubilee Health will never ask you for your password, a code from your authenticator app, or payment details - not by email, not by telephone, not in a chat. Anyone who does is not us. If you want to check whether a message claiming to be from us is real, see how to check a message from Jubilee Health.
Jubilee Health - a workflows platform for medical practices and the partners who support them.