You open your browser between two consultations, you type in the address of Weda, and the login page takes a few seconds to load. This moment, repeated several times a day, conditions your access to patient files. Accessing your Weda space requires combining speed with compliance with digital health security requirements, even in less comfortable situations than a fixed workstation in the office.
Connecting to Weda from a shared workstation or an uncontrolled network
In the office, the workstation is often personal. The difficulty arises when you use a shared computer, for example in a multi-professional health center (MSP) or during a temporary replacement.
On a shared workstation, the browser keeps traces: cookies, pre-filled forms, active sessions. Always log out of Weda before leaving the workstation. Don’t just close the tab, as the session may remain open in the background.
You may have noticed that a browser offers to save your password? On a workstation that is not yours, always refuse. A colleague could access your space and thus your patients’ data without intending to.
Using a private browsing window limits this risk: it automatically deletes cookies and history upon closing. It’s a simple reflex that reduces the exposure of your credentials. To delve deeper into the methods of weda secure connection on Optisanté, the detailed process covers the different methods available depending on your situation.
Accessing Weda on the go: mobile application and field constraints
Weda offers a dedicated mobile application, Weda Mobile, which allows you to consult patient files from a smartphone. This alternative is not limited to a lighter version of the software: it meets real field usage, whether during home visits or while on the move.
Prefer mobile network (4G/5G) over public Wi-Fi. An open Wi-Fi network (hotel, train station, café) exposes your exchanges to potential interception. If you have no choice but to use public Wi-Fi, activate a VPN before opening Weda.
On mobile, lock your phone with a code or biometric fingerprint. Physical access to the phone is the weak link: an unlocked device left on a consultation table gives access to the application and the patient data it contains.
What to check before a home visit
- The network coverage at the patient’s address, to avoid finding yourself without access to the file when you need it
- The battery charge of the phone, as a Weda Mobile session continuously uses the processor and connection
- The application update, which determines compatibility with the current security protocols of the Weda server
Connecting to Weda from abroad: geographical restriction and VPN
Access to the portal secure.weda.fr is limited to metropolitan France and the DOM-TOM. If you try to connect from another country, the page will not load.
Weda documents this restriction and offers a workaround: using a VPN configured on a French server. The VPN creates an encrypted tunnel between your device and a server located in France, which makes your connection appear as French to the portal.
Why this restriction? Health data hosted in France complies with HDS certification (Health Data Host). Limiting geographical access reduces the attack surface and complies with regulatory requirements related to data location.
Choosing a VPN suitable for medical use
Not all VPNs are equal for accessing sensitive data. A free VPN often monetizes its users’ traffic, which is incompatible with patient data confidentiality.
- Opt for a VPN that does not keep connection logs (verifiable “no-log” policy)
- Check that the provider offers servers in metropolitan France with stable bandwidth
- Ensure that the protocol used is recent (WireGuard or OpenVPN), as older protocols have known vulnerabilities
- Test the connection before your trip, not on the day you urgently need it
Weda strong authentication: Pro Santé Connect and MFA in daily use
Weda enforces strong connection methods. There are two main options: Pro Santé Connect (PSC) and authentication by identifier with MFA (multi-factor authentication).
Pro Santé Connect is an identification service provided by the state. It works with your CPS card or via the e-CPS app on your smartphone. Weda recommends this method as it aligns with digital health standards and simplifies identification without multiplying passwords.
The MFA alternative combines your usual username and password with a temporary code sent to your phone. This code changes with each login, making a stolen password unusable on its own.
When MFA blocks access
The most common case: you change your phone and the authentication app is no longer configured. Anticipate transferring your MFA app before resetting your old phone. In case of blockage, Weda support is accessible directly from the software via the assistance icon at the top right, or via the online form on the Weda website.
On a shared workstation in an MSP, Pro Santé Connect has a practical advantage: your session is linked to your personal CPS card or e-CPS. Removing the card or closing the application cuts off access. No identifier remains exposed on the machine.
The security of your Weda space relies less on technical complexity than on concrete habits: private browsing on shared workstations, tested VPN before a trip, anticipated MFA transfer when changing phones. These actions take a few minutes and protect your patients’ health data in every access situation.