Aloha Security Enhancement (Multi-Factor Authentication)

Aloha Security Enhancement (Multi-Factor Authentication)


Alert

To remain compliant with updated HIPAA security requirements, Multi-Factor Authentication (MFA) will be required for all users in 2026.

HIPAA is rolling out this requirement as part of enhanced security standards to better protect sensitive patient data. In preparation, AlohaABA will begin enforcing MFA for all customers starting June 1, 2026.


Aloha is implementing an important security enhancement for Multi-Factor Authentication.

To strengthen the security of your accounts, your site will be required to enable Multi-Factor Authentication (MFA). MFA adds an extra layer of protection by requiring you to verify your identity before logging in. This security enhancement will apply to all staff within your organization.

AlohaABA users will need to use Google Authenticator for this process. The app allows you to scan a QR code during login to link your AlohaABA account with Google Authenticator. Please see the steps below:


Setup Google Authenticator on your Phone

  1. Go to the App Store (iPhone) or Google Play Store (Android) and download the Google Authenticator App  . Once logged in, you will be asked to login to your email account.  
  2. Login to AlohaABA with your normal username and password. 
    1. A prompt to setup your authenticator will display. It will display the screen below to link your Google Authenticator app to Aloha if you haven’t downloaded it yet.  
    2. You will click Set up account and then Scan Barcode in Google Authenticator and scan the QR code provided on the screen.  
    3. There is also a link to manually link the accounts if you cannot scan the QR code. 


d. Go back to Aloha and scan the QR code on the screen.

e. Click Next on the screen

3.  A new screen will display where you enter the 6-digit code from your Google Authenticator App.

a.    There is also a button to remember this device for 30 days.
b.  Click Done once the code is entered to login.
c.    If you are having issues with getting the six digit code, click Try another way to sign in


4.  If Try another way to sign in was selected, an email will be sent to you with a 6 digit code to enter instead. The code will only be available for 5 minutes after being sent.

a.        There will be a checkbox to remember the device for 30 days here as well.

b.       There is also a button at the bottom to resend the email to you as well.

'