Skip to main content

Signing In

Staff accounts on the Practice Web Portal are created by invitation. A practice administrator invites you from Admin > Portal Access (see Managing Staff Access); you receive an email with a link to choose your own password. No one — not the administrator, not IntelliPract support — ever knows or types your password for you.

Choosing a password​

Passwords must be at least 12 characters and include an uppercase letter, a lowercase letter, and a digit. Common patterns are refused even when they meet those rules — avoid keyboard runs and number sequences like 123 or qwerty, and repeated characters. A passphrase of a few unrelated words with a digit and a capital letter works well.

Second sign-in factors​

Practice staff accounts use a second factor in addition to the password:

  • Passkey — your fingerprint, face, device PIN, or a hardware security key. A passkey can also sign you in with no password at all ("Sign in with a passkey" on the login page). Recommended.
  • Authenticator app — a 6-digit code from an app on your phone; works from any device.

You add either one on the portal's Security page. After signing in with a code or passkey you can tick "Don't ask for a code for 14 days" to mark that browser as trusted. The Security page also shows recovery codes — one-time codes that sign you in if you lose your passkey or phone; store them somewhere safe.

In the office vs. remote​

Your practice can register its office networks with IntelliPract. When it does:

  • From the office, signing in with your password alone is sufficient — the practice network itself counts as your second factor.
  • From anywhere else, two things are required: your administrator must have enabled remote access for your account, and you must present a second factor (passkey or authenticator code). An account without remote access, or without any second factor set up, cannot sign in from outside the office at all.
  • Adding or removing second factors is only possible from the office network. This means a stolen password alone is never enough to take over an account from outside.

If your practice has not registered office networks, a second factor is simply required everywhere.

Lockout and timeouts​

Repeated failed sign-in attempts lock the account temporarily, and your practice administrators are notified. Repeated lockouts require an administrator to unlock the account (on the Portal Access page). Signed-in sessions end automatically after a period of inactivity; the idle timeout is a practice setting.

The Security page​

Once signed in, the Security page lets you:

  • change your password (this also forgets all trusted browsers),
  • add or remove passkeys and your authenticator app,
  • view your recovery codes,
  • forget all trusted browsers,
  • set your personal email signature for the Unified Inbox.