Use a unique password, keep verification messages private, and sign out of shared devices. Do not share one account among several staff members; the owner should invite each person separately.
Review team access regularly and remove access promptly when someone no longer works with the clinic. If you notice an unfamiliar sign-in or unexpected account change, reset the password and contact support.