Two-step verification on MyCare UCLH : University College London Hospitals NHS Foundation Trust

Two-step verification adds an extra layer of security to your account. To make sure the person logging in is you, we’ll email you a unique passcode each time you log in.

Activating two-step verification

After logging in to MyCare UCLH using your username and password, you will see a one-off screen with the options:

Continue: clicking this button will automatically activate the two-step
verification process for this and all future log-ins.

Cancel and log out: will prevent user from logging in.

Turn off two-step verification: though we don’t recommend it, you may click
this button to opt out from the two-step verification process. It can be reactivated anytime from the Security Settings menu option in MyCare UCLH.

How to set up the two-step verification process

You can set up two-step verification using an authenticator app such as Microsoft Authenticator and Google Authenticator. Other authenticators such as Apple passwords may work but will require advanced configuration.

Open the Security settings under Account Settings in your MyCare menu.
Click on the button “Verify with an authenticator app” if using a web browser or toggle the “Authenticator App” option on mobile to launch the configuration steps.

3. Scan the QR code or tap the button “Set up on this device” to configure and enable the authenticator.

4. You can now choose how to receive your authentication code each time you log into MyCare. Either through the authentication app or via email.

How to activate or de-activate the two-step verification process once you’re logged into your MyCare UCLH account

1. Once you’re logged into your MyCare UCLH account, open the left column Menu. Scroll down to Account Settings and select Security Settings.

To change your security settings, please chose which verification method you’d like to disable.

You will be asked to re-enter your password. After you do so:

If you are disabling email verification: please check your email inbox for a verification email with a 6-digit code from noreply@uclh.nhs.uk. If you don’t see an email in your inbox, please check your spam folder. If you didn’t receive a code, you can request it again via the Resend code button. Each code will remain valid for 10 minutes before it expires.
If you are disabling authenticator app verification: please open the authenticator and use the code one last time to confirm your identity and turn-off the functionality.

2. To change your security settings, you will be asked to re-enter your password. After you do so, please check your email inbox (and spam folder, if you don’t see an email there), you’ll see we have sent you a verification email with a 6-digit code from “noreply@uclh.nhs.uk”.

Please enter the code in the screen, as shown below. If you didn’t receive a code, you can request it again via the Resend code button. Each code will remain valid for 10 minutes, after which it will expire, and you will need to click the Resend code button to receive a new valid one.

3. After you insert the code, you will see a confirmation message on the screen (as shown below). You can re-activate it at any time by following the same steps. The button to click will be “Verify with..”.