> ## Documentation Index
> Fetch the complete documentation index at: https://docs.mymeddical.com/llms.txt
> Use this file to discover all available pages before exploring further.

# October 2026 — Revoke access and safer sign-in

> Remove someone's access in one step, plus better protection when signing in and when using more than one organisation in the same browser.

<Info>
  **Web**  ·  Released October 2026
</Info>

***

## Revoke and restore access 🚫

A **Super Admin** can now stop a staff member or a parent from signing in, straight away, and let them back in later.

<CardGroup cols={2}>
  <Card title="Immediate" icon="bolt">
    The person is signed out everywhere and blocked from every way of signing in: password, emailed code or sign-in link.
  </Card>

  <Card title="Quiet and recorded" icon="clipboard-list">
    They are not told. Your records keep who revoked access, when, and the reason you typed.
  </Card>
</CardGroup>

* Find the person under **Staff & Users**, in the **Staff** or **Guardians** tab, and choose **Revoke access**. Choose **Restore access** to let them back.
* It works for schools and sports clubs.
* A child can never be left without a guardian, and you cannot revoke yourself or the last Super Admin.
* A revoked parent stays on the child's record but gets no emails or notifications and cannot see the child's information. They stay flagged if the child's record is edited or re-created.
* **Revoke access replaces the old Deactivate button** on the staff list.

See [Revoking and restoring access](/admin/revoking-access) for the full steps.

***

## Safer sign-in 🔐

* **Too many wrong passwords.** After 5 wrong passwords for the same account within 15 minutes, sign-in pauses for that account and the page tells the person to try again in 15 minutes. Other accounts are not affected, and correct sign-ins never count.
* **More than one organisation in the same browser.** You can be signed in to two organisations at once, each in its own tab, and they no longer overwrite each other. Each tab stays on the organisation it signed in to, and signs itself out rather than show another organisation's information.
* **Safer redirects.** Sign-in links only ever return you to mymeddiCAL.

<Note>
  Everyone was signed out once when this update went live. Sign in again as normal.
</Note>


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.