‍User MFA (Multi-Factor Authentication) Setup Guide

To ensure the highest level of security for sensitive Electronic Protected Health Information (ePHI) and to comply with HIPAA technical safeguards, our service mandates Multi-Factor Authentication (MFA). This robust access control ensures that only authorized users can access medical data.

‍

1. How to Set Up MFA‍

‍

Step 1: Prepare an Authenticator App

‍Install an authentication app on your mobile device. (Recommended: Google Authenticator, Microsoft Authenticator, Authy, or any app supporting TOTP like 1Password and Bitwarden.)

‍

Step 2: Scan the QR Code

Scan the QR code displayed on the screen using your app’s 'Add Code' feature.
If you cannot use your camera, click "Can't scan the QR code?" to manually enter the provided Secret Key.
‍

‍

Step 3: Enter the 6-Digit Verification Code

Enter the 6-digit code generated by your app into the web screen to complete the registration.

‍
Step 4: Save Your Recovery Codes

After registration, a 16-digit one-time recovery key will be displayed. Store this in a secure location. This is your only way to access your account if you lose your mobile device.

‍

Step 5: MFA protection is active.

For security, please log in again.

‍

‍

2. How to Log In Using MFA

‍

‍

Step 1: Sign In with Your Credentials

Enter your registered Email and Password, then click the [Sign in] button.

‍

Step 2: Enter the 6-Digit Verification Code

Open your designated Authenticator App on your mobile device.

Check the current 6-digit code generated for your account.

Type the code into the input fields on the "Verify your identity" screen.

‍

Step 3: Remember This Device (Optional)

If you are using a trusted personal computer, check the "Remember this device" box. This will allow you to skip the MFA step on this specific browser for a set period.

‍

Step 4: MFA protection is active.

For security, please log in again.

‍

‍

Considerations for Unrecognized Device Access

Please note the following when logging in from a new device or environment:

- MFA Requirement: Access from a new device, browser, or unrecognized IP will always require a 6-digit MFA code.

- Trust This Device: On your personal, secure device, check "Remember this device" during login. Once set, you can log in with just your email and password for the next 90 days on that specific device.

‍

3. Managing MFA in 'My Account'

You can manage your registered MFA settings at any time in the account settings page.
Path: Go to the [MFA Settings] tab within the My Account page.

‍

Available Features:

- MFA Status: Check if multi-factor authentication is currently active.

- Reset MFA Settings: Resetting MFA invalidates current settings. You'll be redirected to re-setup.

- Trusted Device Management: View and manage the list of devices where MFA has been skipped.

‍

‍

If You Lose Access: If you cannot access your authenticator app, click "Can't access your authenticator app?" on the login screen and enter your saved Recovery Code.
Note: If you have lost your recovery code, you must contact the GEBRA team to undergo a manual MFA reset procedure.

‍

‍

↑ Please refer to the demo guide above.

Administrator accounts(Admin) can manage roles and permissions of other users.

Features on GEBRA may differ by the permission that each user is authorized.

Multiple Admins can co-exist in a single institution.

‍

↑ Please refer to the demo guide above.

In Settings-Gene Panel, users may make gene panels they want.

These gene panels are used to filter the variants in genes of interest.

Users can apply panels on a project level or on a sample level. Applied panels can be removed on a sample page.

‍

↑ Please refer to the demo guide above.

In Settings-QC, users may set different QC criteria.

Each QC criteria may be applied to different project.

If a sample in a project doesn't meet the QC criteria, QC tab on the sample page is highlighted with a red dot.

The Dashboard provides a comprehensive overview of your samples and their current progress.

‍

• A (Status): You can check the specific list of samples by clicking on each Status card (e.g., Draft, Uploaded, Processing).
  The dashboard filters the list below according to the status you select.
  ‍
• B (TAT past Sample - Red Dot): Samples that have exceeded their TAT (Turnaround Time) are marked with a Red dot on the status cards. This helps you quickly identify and prioritize urgent tasks that require immediate attention.
  ‍
• C (View Setting - Pin): In the All / My page toggle, you can use the Pin icon to fix your preferred view as the default. Once pinned, the selected view will be consistently displayed every time you access the dashboard.

‍

'Projects' helps you creating and managing samples depends on the projects they belong.

You can set TAT, QC threshold and list of genes you are interested differently based on projects that you are working on.

While sample upload, you can choose a project that you want to include the sample to.

GEBRA™ leverages multiple callers for variant calling and filtering.

Variant types and callers for each type are listed below (Variant Type:Variant Callers).

· SNV/indel: Rovca & GATK, Mutec2

· CNV: 3bCNV, MANTA, SMAfinder

· Inversion and breakend: MANTA

· Insertion: MELT, MANTA

· Repeat expansion: ExpansionHunter

· Region(Run) of Homozygosity: AutoMap

For more details, please refer to our white paper's '3billion’s Genomic Test Services' section (whitepaper 2026 ink)

EVIDENCE, developed by 3billion, is a software for fast and accurate variant annotation.

Once variant calling is over, each variant files are by annotated by EVIDENCE, referring multiple databases and guidelines.

Classification of variant pathogenicity is based on the logics of ACMG/AMP guidelines.

For more details, please refer to our white paper's 'EVIDENCE' section  (whitepaper 2026 ink)

In 'See details' of each variant, users may change rules applied to the variant.

Logs of changed rules are recorded on the Knowledge Base of the institution and will be applied accordingly from the next analysis.

Users can check logs in the Knowledge Base on the Dashboard.

In Prioritized variant section, variants that went through multiple layers of filters are displayed.

Filters leverage bayesian score, applied rules/criteria, ClinVar, articles, etc.

‍

Move the variants of All Variants to priority.

‍

In All variants section, every variant except for variants with high population frequency(e.g. for SNV, BA1 applied variants are not shown in All variants section).

Priortized variants are also visible in this section.

Users can 'prioritize' (or move) variants from All variants to Proiritized section to generate a report, and if needed can leave a mark in 'See details'-'ACMG Classification'-'Edit'-'Prioritize this variant regardless of classification' to prioritize the variant automatically from next analysis.