Healthcare organizations are high-value targets for credential-based attacks. Phreesia now supports authenticator apps (Google Authenticator, Microsoft Authenticator) and passkeys using device biometrics or PIN as two-factor authentication options. Both work without cell service or email access and are significantly more resistant to phishing than SMS or email codes.

Your login screen can also default to your organization's preferred 2FA method, so frequent sign-ins take less friction for staff. More control over how your team verifies their identity, with no added burden at the front desk.