Skip to main content

Beacon Password and Login Policies and Procedures

Overview

ConnectSx Beacon stores sensitive medical device inventory, pricing, and surgical case data governed by strict regulatory frameworks, including HIPAA infrastructure standards and FDA 21 CFR Part 11 guidelines. Maintaining strict password complexity, session controls, and authentication protocols protects patient data integrity and prevents unauthorized access to your organization's environment.

Password Complexity Standards

To ensure system security, all Beacon user accounts must adhere to mandatory strong password rules upon account creation and password updates:

  • Minimum Length: Must be at least 8 characters long.

  • Character Requirements: Must contain a combination of uppercase letters, lowercase letters, numbers, and special characters.

  • Uniqueness: Password sharing is strictly prohibited; every user account is uniquely bound to an individual verified email address.

Password Reset Procedures

Users can reset their password via self-service at any time from the Web Console or Beacon Mobile login screens.

  • Web Console Reset:

    1. Navigate to beacon.connectsx.com and click Forgot Password?

    2. Enter your account email address and select your organization (if applicable).

    3. Click Reset to receive a password reset email.

    4. Follow the emailed link to create your new password.

Mobile Reset Note: On iOS mobile devices, clicking a password reset link directly in an email may open the Beacon Mobile app rather than the reset form. To resolve this, force-click or copy the reset link from your email and paste it directly into Mobile Safari or your mobile web browser.

Login Security & Session Management

Session Timeout and Session Recovery

Beacon employs active session safeguards to prevent unauthorized access on unattended devices:

  • Web Session Timeout: The Web Console automatically logs out idle users after 75 minutes of inactivity. Token-based authentication requires re-entry of credentials.

  • Close Active Sessions: If you leave an active session open on another machine or mobile device, navigate to Profile > Settings in the Console and click Close Active Sessions. This instantly terminates all other active instances across all devices.

Multi-Factor & Biometric Mobile Controls

  • Mobile Re-Authentication: Beacon Mobile enforces 2-Factor Authentication (2FA), utilizing device biometrics (Face ID / Touch ID) or a PIN code after an idle timeout.

  • Failed Login Lockout: After multiple consecutive failed login attempts, the platform automatically locks the account to prevent unauthorized access.

  • Admin Access Suspension: Organization Admins can immediately deactivate or suspend any user account via Users > Admin Settings, revoking system access across both web and mobile apps instantaneously.

  • Training Completion Lock: New user accounts remain locked until an Operations or Admin user toggles Training Complete to ON in the user’s profile settings.

Best Practices for Shared & Public Terminals

  1. Always Log Out: Never leave a active Beacon session unattended on a public or shared healthcare terminal.

  2. Quit Browser: When accessing the Console from a shared machine, manually click Log Out and completely quit the browser application.

  3. Avoid Credential Saving: Disable browser auto-fill or password-saving prompts on shared computers.

Related Articles
Did this answer your question?