NHS Authenticator Guide for Healthcare Staff

The NHS has mandated Multi-Factor Authentication (MFA) to protect patient data. This guide helps staff in the UK set up and manage their authentication codes efficiently.

Standard Setup with Microsoft Authenticator

Most NHS Trusts recommend using the Microsoft Authenticator app for NHS Mail access. To set it up:

  1. Login to your NHS Mail on a computer.
  2. Go to Settings > Security Info.
  3. Click Add Method and choose Authenticator App.
  4. Scan the QR code with your phone.

Google Authenticator Compatibility

Did you know? NHS Mail MFA is based on the industry-standard TOTP protocol. This means you can often use Google Authenticator instead of Microsoft's app if you prefer a simpler interface.

The Best Solution for On-the-Go Staff

Doctors and nurses are often moving between wards and don't always have their phones out.

With GAuth Exporter, you can sync your NHS authentication codes to your Apple Watch. Just raise your wrist to get your code and log in to a terminal in seconds.

Sync NHS codes to Apple Watch →

Security Best Practices for NHS Staff

  • Lock your phone: Ensure your phone uses FaceID, TouchID, or a PIN.
  • Don't share codes: No IT support staff will ever ask for your 6-digit code.
  • Backup: Ensure you have your recovery information saved in a safe, non-digital place.