Portals
Setting up a patient portal account and getting past the verification
Portal registration fails for the same three reasons every time, and all three are fixable in one phone call to the right desk.
Published August 21, 2026 · Updated September 10, 2026
What a portal is
A patient portal is a website run by a provider that shows your own records: appointments, test results, medication lists, letters and a secure message function.
It is not a general health service and does not connect to other providers unless they share a system. Two hospitals often mean two portals, which is confusing but normal.
Access is free. Nobody should ever be asked to pay for access to their own records.
Registration
Most systems either send an activation code or ask you to verify your identity against details they already hold: name, date of birth, and often a member or record number.
The commonest failure is a mismatch. If they hold your name as it appears on an old document, entering your current form will fail, and the system will not tell you why.
Activation codes typically expire within a few days to a fortnight. An old code in an old letter will not work and needs replacing rather than retyping.
Identity verification
Some providers require identity verification in person once, particularly where full records are involved. This is a legal requirement in many places rather than an obstruction.
Where verification is done online, it usually means photographing an identity document and sometimes your own face. Uncomfortable but standard.
If online verification fails repeatedly, the in-person route still exists and is usually faster than trying again. Ask reception which desk handles it.
Passwords and two-step verification
A health portal deserves a password used nowhere else. If one site's password is reused and that site is breached, this is the account you least want opened.
Turn on two-step verification if it is offered. It sends a code to your phone in addition to the password and makes a stolen password almost useless.
Write the password down somewhere safe at home if that is what makes a unique password possible. A notebook in a drawer is not the threat here.
Getting in when you are locked out
Password resets go to the email address on file, which is often an old one. Updating the email address usually requires a phone call.
Repeated failed attempts lock the account, generally for a fixed period rather than permanently.
The medical records or health information department is the right place to call. General reception frequently cannot help and will say so after a long wait.
Access for a family member
Most systems allow proxy or caregiver access, so a relative can see records and book appointments on someone's behalf. It requires a signed form from the patient.
This is worth setting up before it is needed. Arranging it during a crisis is slow and sometimes impossible.
Proxy access for an adult usually has limits set by the patient, and can be withdrawn at any time by them.
Two providers, two portals
Records do not automatically move between providers. Where two organisations use different systems, you will have two logins and two sets of results.
Some regions have a shared record that pulls information together; where one exists, it is usually opt-in and worth asking about.
Keeping a short written list of which portal holds what saves a good deal of confusion, particularly when several specialists are involved.
Leaving and deleting
Closing a portal account does not delete your medical record, which is retained by law for a set period regardless.
If you stop using a portal, it is still worth keeping the login rather than closing it; results continue to be posted there.
Downloading a copy of your records is usually possible from within the portal and is a right in most jurisdictions.
What this guide does not cover
Any clinical question at all.
Specific portal systems and their menus.
Legal advice on records access.
General information about software and process only. It is not medical advice and does not replace your own clinician. Systems differ between providers.