Security and team

Security → turn on two-factor with an authenticator app (Google Authenticator, Microsoft Authenticator, 1Password): scan the QR, type the code. Up to 2 authenticators per person. Clinic owners must use it (Billing, Team, Import, Settings and SMS sending lock from day 8 without it); the owner can require it for everyone.

When you turn two-factor on you get 10 one-time recovery codes: download or print them, they are shown once. On the code screen, "Lost your phone?" accepts one code, removes your authenticators and sends you to Security to set up the new phone. "Make new recovery codes" replaces them.

"Remember this browser for 30 days" skips the code on that browser. Anyone with that browser's cookies has the same access; use it only on your own device. "Forget this browser" in Security undoes it.

Team (owner only): invite by e-mail as Vet or Reception, change roles, remove members. Owners see everything; vets see the vet screen, audit and reception; reception sees reception, QR sign-ups, bookings, inbox and send cards. "Is a veterinarian" marks who can be a pet's treating vet. The owner can reset a colleague's two-factor.

A clinic can have several owners. Making someone an owner needs two-factor on both sides. The last owner cannot be removed. We recommend at most two owners. If the only owner lost every authenticator and every recovery code, write to info@tailplan.vet from the billing e-mail: TailPlan checks identity before any reset.