As electronic health information becomes more widely available, proper security measures must be implemented to ensure the information is only accessible to those with the rights to access it. The Health Insurance Portability and Accountability Act (HIPAA) requires covered entities to verify that a person seeking access to electronic protected health information (ePHI) has authorization. Two-factor authentication provides identification of EHR users by means of the combination of two different components. .