Device and account security

Your account

• Use a password you have never used anywhere else. A password manager is the easiest way to do this and is strongly encouraged.
• Turn on two-factor authentication wherever Exetazo offers it.
• Never share your password, and never sign in on someone else's behalf.
• Tell the practice owner immediately if you think someone else has used your account.

Your device

• Set the screen to lock automatically after a few minutes, and lock it by hand whenever you walk away.
• Keep the operating system and browser up to date. Most breaches use a hole that was already fixed.
• Use full-disk encryption — FileVault on a Mac, BitLocker on Windows, on by default on a Chromebook and on phones with a passcode.
• Do not let anyone else use the device for this work, including family.

Where you work

• Take visits somewhere you cannot be overheard, and use headphones.
• Position your screen away from doorways, windows and other people.
• Avoid public wi-fi for patient information. A phone hotspot is safer than a café network.

What not to do

• No patient information in personal email, text messages, or chat apps.
• No screenshots or photographs of records, including "just for my notes".
• No copying records onto personal drives, cloud accounts, or USB sticks.
• No pasting patient information into an AI tool, translator, or other website that is not part of Exetazo's approved systems.

Email that arrives asking for something

The most likely way this practice gets attacked is an email that looks like it is from the owner, a pharmacy, or a lab, asking you to sign in or to send something urgently. Urgency is the tell. If a message asks for credentials, a payment, or patient information, verify it by contacting the person a different way before you act. Nobody at Exetazo will ever ask you for your password.

If something goes wrong

Report it to the practice owner the same day — a lost phone, a wrong recipient, a link you clicked and then doubted. Speed matters more than certainty, and reporting early is treated as doing the right thing.