Account Security: Passwords & Login Authentication

Your data security is paramount to us.

To keep your data secure we have two layers of security before you can get in to see your dashboard/portal at my.acticheck.com

Using a secure password
Firstly, we strictly enforce a strong password policy for user accounts in the Acticheck User Portal.

A password must consist of a minimum of twelve characters and must contain a combination of both uppercase and lowercase letters along with at least one number.
We strongly suggest you choose a password which follows best practice:

Passwords should be created in the following format:

• A minimum of 12 characters long.
• Not contain a dictionary word of more than 4 characters.
• Contain at least 2 uppercase letters.
• Contain at least 2 lowercase letters.
• Contain at least 2 numbers.
• Contain at least two special characters or non-alphanumeric characters, such as ! ” £ $ % & * @.
• Passwords should be unique and not used for multiple log-ins

Login Authentication
As a second layer of defence, we strongly suggest you should make use of the Two-factor authentication offered when setting up your account as this will give you additional peace of mind knowing that it is far more difficult for someone to access your personal details online should your username and password be stolen.

Users are offered up to five options of multi-factor authentication to choose from, the options offered depending on the type of user and the information we hold for that user.

The options are:

• None – You will access the portal using just your username and password.
• Email – If we hold your email address on record you have the option to be send an authentication code to your registered address which you then enter in a text box on the screen as prompted. If your username, password and the entered code are all correct you will be taken to the main dashboard.
• SMS – If we hold a mobile telephone number for you on record, you have the option to be sent a code by SMS (text messaging). This can then be used in the same way as email authentication above.
• Button press – If you wear the Acticheck life-saving wristband you have the option of using the buttons on your band to authenticate yourself. During the login process you will be prompted to press one of the buttons on your band and then within 10 seconds click the button on the screen. If we detect your button press within this time period you will be authenticated and taken to the dashboard.
  If this option is set but we have not recently heard from the wristband, we will send the authentication by email instead.
• Google Authenticator – If we hold a mobile telephone number for you on record and your mobile device supports it, you have the option to use the Google Authenticator app to authenticate your login. The app is available for both Android and Apple devices and can be installed from their respective app stores. Details on how it works can be found on the website here https://googleauthenticator.net/.

The first time you attempt to log into the Acticheck portal having chosen the Google Authenticator option, you will be presented with a QR code on the screen and a text setup key below it for manual setup.

If your mobile device has a camera, you can choose the “Scan a QR code” option from within the app and Google Authenticator will set the account up for you.

If you are not able to do this then you can set the account up manually by choosing “Enter a setup key” within the app instead.

Once you have successfully created the account in Google Authenticator you will be asked to enter the one-time-code from the app in a text box on the screen to authenticate the setup process.

Subsequent logins to the portal will just require the entry of the one-time-code from the app when prompted.

This secure authentication is also known as Multi-Factor Authentication (MFA), Two Factor Authentication (2FA) or One Time Password (OTP).