When will MFA be required?

Beginning March 31, multifactor authentication will be required for all Mayo Clinic Patient Portal users. If you previously opted out of multifactor authentication, you will be required to set up MFA before signing in after this date.

What if I forget to set up MFA before March 31?

If you have not set up MFA by March 31, or you have declined it in the past, you will not be able to log in to your portal account until you have set up the verification process. After March 31, the system will prompt you to set up MFA.

How do I set up MFA?

Simply log in to the Mayo Clinic Patient Portal.
Go to “Account,” then click “Account settings.”
Select “Multifactor authentication.”
Choose a preferred method — verification by text message or a phone call.
Enter the code (sent via text message) or prompt (via the phone call) that you receive to confirm your device.

How often will I need to use MFA when I log in? Will there be a “Remember This Device” option?

After you log in using MFA, you will automatically have access to your patient portal account for 7 consecutive days. During that time, you will not need to use MFA, as long as you use the same device (mobile or web browser) and same login method (password).

The automatic “Remember This Device” option maintains security but allows for quicker access to your portal account for several days in a row. (You must still use your password to log in to your account.)

Will MFA make logging in to my portal more difficult?

Multifactor authentication adds one step, but it is easy and helps keep your health information safe. MFA may take a few extra seconds at login, but it can make a lasting difference in protecting you from identity theft and unauthorized access to your personal health data.

Timeline and Setup