Your partner in navigating the ins and outs of prescriptions — at no extra cost.

Alto Pharmacy Technician

Alto Pharmacist

It’s official: Alto Pharmacy is a great place to work! We’re honored to join the community of Great Place to Work-Certified™ companies based on team member feedback and a rigorous assessment of our company’s culture and benefits.

Join us in delivering our industry-leading pharmacy care to millions of people across the country. As a member of the team, you’ll play an integral role in improving our customers’ quality of life and redefining what’s possible in pharmacy. 

Be Part of a Great Place to Work — Join Our Team

Hear first-hand from members of the Alto technology teams.

Read the latest Alto blog posts covering healthcare, family health, managing diseases, and other Alto highlights.

Blog | Alto Pharmacy

About 9% of men and 11% of women in the U.S. have faced fertility issues. These challenges may feel overwhelming, but there are a variety of treatment options for both male and female infertility to support your family building journey.

Here’s an overview of the causes and symptoms of male and female infertility and common fertility treatments.

Infertility, Explained

About 9% of men and 11% of women in the U.S. have faced fertility issues. These challenges may feel overwhelming, but there are a variety of treatment options for both male and female infertility to support your family building journey.

Here’s an overview of the causes and symptoms of male and female infertility and common fertility treatments.

Infertility, defined as the inability to get pregnant after twelve months or more of unprotected sex, is a health condition that affects both men and women. Approximately one-third of infertility cases stem from a female reproductive factor, one-third stem from a male reproductive factor, and one-third stem from a combination of both or unknown causes.

These are some common causes of female infertility.

The majority of female infertility cases are caused by problems with ovulation, the release of a mature egg from the ovaries. There are several causes of ovulation disorders, including the following.

Polycystic ovary syndrome (PCOS), a condition characterized by a hormone imbalance that impacts ovulation. It is the leading cause of female infertility.

Excessive exercise, eating disorders, or stress, each of which can result in hormonal imbalances

Primary ovarian insufficiency, sometimes referred to as premature ovarian failure

Fallopian tube damage or blockage can prevent sperm from reaching an egg, or fertilized eggs from attaching to the uterus. Common causes of fallopian tube damage or blockage include pelvic inflammatory disease — an infection of the uterus and fallopian tubes from chlamydia, gonorrhea, or other sexually transmitted infections — or a prior surgery in the abdomen or pelvis, including surgery for ectopic pregnancy.

Uterine or cervical issues such as the following can disrupt the implantation of an egg into the uterus or increase a woman’s risk for miscarriage.

Benign polyps or fibroids may block fallopian tubes or interfere with the implantation of an embryo. However, many women with these growths are able to conceive.

Structural issues with the uterus that are present at birth

Cervical stenosis, a narrowing of the cervix

Endometriosis is a condition in which tissue that should only grow in the uterus implants and grows elsewhere. The abnormal tissue growth — as well as surgical procedures to remove it — can block the fallopian tubes, preventing the fertilization of an egg. In some cases, endometriosis may interfere with implantation of the fertilized egg, or embryo.

Male infertility is most often an issue of sperm production — including the quantity and quality of sperm produced — or of sperm mobility, which affects the sperm’s ability to find and fertilize an egg. A blockage in the testicle or damage to the reproductive organs can also contribute to male infertility.

Age is a factor in both male and female fertility issues. The quality and quantity of a woman’s eggs begin to decline as she enters her mid-thirties, and age factors into the success rates of in vitro fertilization (IVF).

Many individuals and couples first learn of a fertility issue after trying to conceive without success, and the primary symptom of infertility is the inability to get pregnant. There aren’t always noticeable symptoms, but the following may indicate an underlying fertility problem.

A menstrual cycle that’s irregular, absent, longer than 35 days, or less than 21 days

Unusually light or heavy bleeding during menstrual cycles

Erectile dysfunction or low sex drive in men

The timeline for seeking fertility treatment depends on your age. If you are under the age of 35, most health experts suggest consulting a reproductive specialist after a year of trying to conceive. If you are between 35 and 40, you may want to pursue testing or treatment after six months of trying to become pregnant. And if you are over 40, you may want to pursue testing or treatment before you start trying to conceive.

An evaluation for fertility issues and potential treatment begins with a conversation about your health history. Several tests may be used during the diagnostic process, including the following.

An hysterosalpingogram (HSG), an x-ray taken to examine issues within the uterus and fallopian tubes

Blood tests to measure hormone levels related to fertility and reproduction

Ovarian reserve testing, which evaluates the number of viable eggs in your ovarian reserve. These are typically used for women over 35 or those at risk of a low egg count for other reasons.

A semen test is used to diagnose most cases of male infertility. This identifies how many sperm you produce and whether the sperm are normal in shape and movement — healthy sperm have an oval head and long tail. In some cases, additional blood tests and/or genital ultrasounds may be used to rule out other health conditions.

Fertility problems do not mean that you won’t be able to have children biologically. There are many treatment options that can help increase your chances of conception. The most effective course of treatment depends on the underlying cause of your or your partner’s fertility issues. These are among the most common fertility treatments.

Forms of assisted reproductive technology (ART) including in vitro fertilization (IVF), a process in which eggs and sperm are fertilized in a laboratory and then placed into the uterus with the potential outcome of a pregnancy. In addition to treating female infertility, IVF can also be used when male infertility is a factor.

Intrauterine insemination (IUI), a type of artificial insemination in which sperm that have been washed and concentrated are placed directly into a woman’s uterus during ovulation.

Injectable fertility medications including gonadotropins and oral fertility medications such as Clomid® and Femara® can treat fertility-related hormonal imbalances.

Your doctor may also recommend lifestyle changes or treating a related health condition.

A fertility pharmacy partner you can rely on

Since 2016, Alto has supported more than 50,000 fertility journeys. We understand that fertility treatment is a significant investment — physically, emotionally, and financially — and we see ourselves as a partner in your health.

We offer free, same-day delivery seven days a week and temperature controlled packaging to ensure that your fertility medications always arrive in the right condition. And our fertility-trained pharmacists are available until 9 pm PST (12 midnight EST) on weeknights to offer any support you need.

Reach out any time via phone at 1-800-874-5881, or in-app messaging.

This content is not intended to be a substitute for professional medical advice, diagnosis, or treatment. Always seek the advice of your physician or another qualified health provider with any questions you may have regarding a medical condition.

All third party trademarks (including logos and icons) referenced by Alto Pharmacy remain the property of their respective owners. Unless specifically identified as such, Alto’s use of third party trademarks does not indicate any relationship, sponsorship or endorsement between Alto and the owners of these trademarks.

Last summer, Moringa Fellows Irma Figueroa and Adrian Mendez joined Alto as the company’s second batch of engineering interns. Here, they share their learnings, accomplishments, and advice for future Alto interns.

Two Engineering Interns Weigh In: What to Expect From Your Alto Internship

The Moringa tree flourishes almost anywhere it’s planted. It’s hardy, fast-growing, and resistant to drought — an apt metaphor for the two interns who joined us from the Moringa Fellowship program last summer.

“Before Alto, I had never actually contributed to a large codebase,” admits Irma Figueroa, an intern on the Supply Chain Team. By the end of their three-month internships, however, Irma and fellow intern Adrian Mendez had shipped impactful features for Alto’s internal pharmacy management system and customer-facing app that are still in production today.

Below, we chat with Irma and Adrian to learn what it was like interning at Alto, which projects they worked on, and what advice they’d give to future interns. 

Adrian, who interned on the Patients Team before returning to join as a full-time software engineer last fall, was surprised by the freedom he had to choose what he worked on during his internship: “Early on, my manager gave me a rundown of the projects the team was juggling and the option to choose which one interested me the most,” he says. “I was able to decide the kind of experience I was going to have.” 

Adrian adds that meetings with his mentor evolved over the course of his internship, as he became more familiar with the codebase: “From the start, we had weekly meetings to talk about whatever was on my mind. Those meetings started off as general advice and questions and turned into more time to pair or run things by each other.”

Because both Adrian and his mentor were working on the same, long-term project, some of those meetings were also dedicated to project work. This included “sitting with [my mentor] while creating the project outline, pairing on larger tasks, and syncing up on progress.” 

Which projects did you work on during your internship? 

On the Supply Chain Team, Irma was tasked with a unique inventory challenge: Technicians at our production pharmacy locations use handheld scanners to scan the barcodes on newly-received inventory. Our technicians often need to scan hundreds of inventory items at a time — making it all too easy to lose track of which items have been successfully scanned onto which shelves. 

“I created a reusable counter component, displayed in the header of the scanner app, that would represent the number of items scanned into a shelf.” Irma says. The best part? Getting to test the handheld scanner herself. “I really enjoyed using the scanner for testing purposes. It was rewarding to see my code in action and definitely super fun!” 

On the Patients Team, Adrian worked on a project to add a homescreen to the customer-facing native app. Previously, the app dropped users into a list of all their active medications, which made it difficult to know where to look or what to do next. The new homescreen allows users to schedule the prescriptions most relevant to them and to view or edit any upcoming deliveries. 

“The first step was to create new additions to the design system — essentially taking the designs and extracting system-wide components. After that, the fun part was taking all those components and putting them together like building blocks!” Adrian says.

It was especially rewarding, he adds, to have been part of the project from start to finish. “I joined right as the design phase started, and I was there mostly every step of the way. For how short my time here was, having helped create this landmark project is really cool to think about.” 

What advice would you give to future Alto interns?

Irma and Adrian agree: Don’t be afraid to ask for help. “You'll often feel challenged and possibly intimidated, but be patient with yourself and remember you have an entire team of experienced engineers ready to help,” Irma says. 

“Everyone at Alto is more than willing to help you out, so don't be afraid to ask questions! You're on the same ship as everyone else, so your success equals everyone’s success,” Adrian adds. “Just remember that your work got you here, and they wouldn't have invited you if they thought you couldn't handle it. They made an investment in your ability to grow, so stay curious.” 

Interested in interning at Alto? Check out our careers page here.

While fertility preservation treatments like egg freezing and IVF are significant investments of time and resources, there are many ways to lower or manage the costs of treatment. As you prepare for the financial aspects of treatment, be sure to explore all of your options for financial assistance and savings, including patient assistance programs from fertility medication manufacturers.

A Guide to Ferring Pharmaceuticals’ Fertility Medication Savings Programs

If Alto is your fertility pharmacy, your fertility medication protocol may include medications manufactured by Ferring Pharmaceuticals, which has several financial assistance programs that offset the cost of fertility medications. Here’s more on eligibility for these programs and how to apply.

The OneHeart program provides a $200 rebate for out-of-pocket costs for select Ferring fertility medications. Eligibility is for those with no insurance coverage or commercial health insurance plans. In addition, you must have started your ovarian stimulation cycle between June 1, 2020 and June 30, 2022, with all medications purchased by June 30, 2022.

Learn more about program terms and conditions and the application process.

The HeartFelt program helps individuals whose cycles were canceled due to COVID-19 or a natural disaster resume fertility treatment. It offers medication replacement for up to 15 vials of Menopur® and up to five syringes of Fyremadel™ (ganirelix acetate) depending on the amount of medication used in the canceled cycle. Eligibility is for those with no insurance coverage or commercial insurance coverage.

To learn more about program terms and conditions and the application process, download the HeartFelt brochure on Ferring’s patient resources page.

The HeartTomorrow program provides Menopur® at $68 per vial for those undergoing an elective egg freezing cycle. To be eligible, you must be paying cash for your fertility medications and purchase a minimum of 20 vials in your first fill.

The Heart for Heroes program provides IVF medications at no cost to eligible military veterans who have experienced infertility due to a service-related injury or who do not have insurance coverage for fertility medications. To learn more about terms and conditions and the application process, call 1-800-515-3784.

The HeartBeat program provides select fertility medications at no cost for cancer patients. To be eligible, you must be a female U.S. citizen or permanent resident with a cancer diagnosis who has not received chemotherapy within the previous six months. To learn more about terms and conditions and the application process, call 1-888-347-3415. (Residents of Arkansas, Massachusetts, or New Jersey can call 1-877-252-0553.)

If your fertility medications are manufactured by EMD Serono, read our previous post for an overview of EMD Serono’s patient assistance programs. You can also read our previous posts on managing the costs of fertility treatment to learn about additional financial resources, including Alto’s financial support for fertility medications:

Managing the Costs of Fertility Treatment

A Financial Planning Guide for Egg Freezing

We’re here for you during fertility treatment

At Alto, we understand that fertility treatment is a physical, emotional, and financial investment, and we offer support with all aspects of your fertility journey.

We prioritize your financial wellness, working with your doctor, your insurance (if applicable), and any third party savings programs that you may qualify for to make your medications as affordable as possible. In addition to automatically applying any coupon savings, we’ll connect you with any outside programs that require you to apply directly.

We’re here to help with the rest of the process, too, with free same-day delivery of your medications, temperature controlled packaging, and fertility resources like personalized injection guide videos and one-on-one consultations with fertility-trained pharmacists.

To get a price quote specific to your fertility medication protocol, complete our online form.

Vaccines — which were first developed in 1796 for smallpox and continue to evolve with new research and technology — build on your immune system’s natural function to protect you from serious diseases. Just like white blood cells and the other components of your immune system, vaccines help you develop immunity, but without the initial illness and risk of health complications. Here’s a look at how vaccines work.

The Science Behind Vaccines

Your immune system has a natural way of defending you from the viruses and bacteria that cause illness. As these germs multiply rapidly and infect your body, an army of white blood cells fights back, producing antibodies that attack the invaders.

The first time you are infected by a specific virus or bacteria, your immune system often cannot destroy the germ quickly enough to prevent you from becoming sick. After you’ve recovered, certain immune cells hold onto the memory of the infection. This allows them to mobilize quickly if they encounter the same germ again, preventing illness in the future. Immunity, your body’s resistance to certain types of infection, is the outcome of this process.

To understand how vaccines work, it’s helpful to know how your immune system naturally fights an infection. B-lymphocyte white blood cells produce blood proteins called antibodies, which attack antigens — the part of the invading germ that triggers an immune response. T-lymphocyte white blood cells attack already infected cells in the body. After the infection has ended, a few T-lymphocytes, or memory cells, remain to ensure a fast immune response should the same germ reappear.

Vaccines imitate infections, triggering the process of building immunity to a specific disease without causing illness. Your immune system responds to these imitation infections the same way it would to an actual infection. Detecting antigens from the vaccine, your immune system produces antibodies and T-lymphocyte cells. The imitation infection leaves your body with T-lymphocyte memory cells and B-lymphocytes, which will know how to quickly fight that antigen in the future. This prevents you from becoming sick if you are exposed to the virus or bacteria that cause the disease.

It typically takes several weeks for your body to produce T-lymphocyte and B-lymphocyte cells in response to a vaccine, which is why in most cases you will not immediately develop immunity. This means that you could become infected with a disease and develop symptoms shortly after vaccination, so it’s important to take necessary precautions until you become fully immune to the virus or bacteria. The healthcare professional administering your vaccine will inform you of the anticipated timeline for immunity.

Sometimes the imitation infection created by a vaccine causes mild symptoms such as a fever. These side effects are normal and indicate that your body is building immunity.

While all vaccines arrive at the end result of immunity, there are several paths for getting there. When deciding which type of vaccine to create for a disease, researchers consider a variety of factors, including the immune system’s response to the germ that causes the disease, the population likely to receive the vaccine, and the regions of the world where it will be used. These are the seven types of vaccines commonly used in the U.S.

Live vaccines use a weakened version of the living virus or bacteria that causes a disease. They are most similar to the natural infection and produce long-lasting immunity. The weakened form of the germ does not lead to serious disease, like that caused by the wild form of the germ, for most individuals with strong immune systems. However, live vaccines aren’t safe for those who are immunocompromised, including children undergoing cancer treatment. Examples of live vaccines include the measles, mumps, and rubella (MMR) vaccine and the chickenpox vaccine.

Inactivated vaccines are produced by inactivating, or killing, the germ that causes a disease. Examples include the polio, hepatitis A, and flu vaccines. They don’t provide as strong of immunity as live vaccines, so additional doses, also referred to as booster shots, are often needed for ongoing protection.

Toxoid vaccines target a toxin, a harmful substance produced by a germ, rather than the entire germ itself. They contain a weakened version of the toxin to be targeted called a toxoid, which teaches your immune system how to fight off the natural toxin. Similar to the germs used in live vaccines, toxoids are weakened to a point where they do not cause illness. These vaccines are used to prevent diseases caused by toxin-producing bacteria such as diphtheria and tetanus.

Subunit vaccines use portions of a virus or bacteria called subunits rather than the entire germ. Vaccines for diphtheria, tetanus, and pertussis, or whooping cough, are combined into the DTaP vaccine. The pertussis component is a subunit vaccine.

Conjugate vaccines fight a specific type of bacteria whose antigens are more difficult for a child’s immune system to detect due to their outer coating. The vaccines link the coating to stronger antigens that the immune system can more easily respond to. Like subunit vaccines, these vaccines are more targeted and only use part of the germ. Examples of conjugate vaccines include the haemophilus influenzae type B (Hib) vaccine.

Viral vector vaccines produce immunity to a virus by using a modified version of a different virus to deliver instructions to your immune cells. The modified version of the other virus is referred to as a vector virus. Recent Ebola vaccines have used this technology, and the Johnson & Johnson COVID-19 vaccine is also a viral vector vaccine.

mRNA vaccines help your body produce a protein that triggers an immune response and the development of antibodies. This technology was used to create the Pfizer-BioNTech and Moderna COVID-19 vaccines.

Read ‘What the COVID-19 Vaccine Means for Those With HIV’

All vaccines in the United States require approval by the Food and Drug Administration (FDA) and are held to rigorous safety and effectiveness standards. The vaccine approval process starts with lab tests, which may take years in some cases. The FDA analyzes the results to determine if the vaccine should be tested with people. If the vaccine moves forward, the next step is clinical trials where the vaccine is tested on volunteers.

Clinical trials typically begin with a smaller group of 20 to 100 volunteers before including thousands more. The trials gather information about vaccine safety, the typical immune response, and dosing. If any safety concerns emerge during this stage, the FDA must address them before it can authorize the vaccine.

Vaccine manufacturers are required to continuously monitor vaccine safety after approval and test every batch produced to ensure effectiveness, quality, and purity. These test results are reviewed by the FDA, which also conducts an inspection of the factory where the vaccine was produced. If you experience severe side effects after vaccination, contact your healthcare provider so that they can report potential concerns to the Centers for Disease Control and Prevention (CDC)’s vaccine monitoring database.

COVID-19 mRNA vaccines were developed and approved more quickly than a typical vaccine given the urgent nature of the pandemic. This expedited timeline was made possible by significant investment from governments and companies in the vaccine development process and decades of research on mRNA vaccine technology. These vaccines were as thoroughly vetted for quality and safety as any other vaccine.

Many vaccines are received during childhood, like the polio, chickenpox, and MMR vaccines, but there are others you may need as an adult. The CDC recommends the zoster vaccine, which prevents shingles, for adults ages 50 and older and the pneumonia vaccine for those over 65. Other vaccines may be recommended based on additional factors including job or school requirements, travel, and health conditions. Check in with your doctor about which vaccines you need.

The CDC also recommends an annual flu vaccine for everyone 6 months and older. New versions of flu vaccines are developed annually in anticipation of circulating flu virus strains, so health experts recommend getting one every year to prepare for cold and flu season. It’s especially important to be proactive about flu vaccination if you are over the age of 65 or have a chronic condition such as COPD or diabetes.

For detailed vaccine recommendations by age group, reference the CDC’s recommended immunization schedules for children and adolescents and adults.

At Alto, a pharmacist is your partner in health. If you take medication, we will work with your doctor, your insurance (if applicable), and any third party savings programs that you may qualify for to make your medications as affordable as possible. And our team of pharmacists is available to chat whenever questions come up. 

Reach out any time through in-app secure messaging or by phone at 1-800-874-5881.

Since certain types of cancer treatments and procedures can temporarily or permanently impact both male and female fertility, it’s important to have a discussion about fertility with your oncologist as soon as possible. Read on to learn more about fertility preservation options and financial resources for those recently diagnosed with cancer.

Fertility Preservation Options After a Cancer Diagnosis

A cancer diagnosis can bring much uncertainty. If you are considering having children in the future, you may be wondering how your options for cancer treatment will affect your reproductive health. Fertility preservation treatments like egg or sperm freezing can bring peace of mind during this potentially overwhelming time, allowing you to leave open the possibility of starting a family after cancer treatment.

There are several ways that cancer treatments can affect your fertility, including the following:

Surgery to treat cancer of a reproductive organ — such as in the prostate, testes, ovaries, or cervix — may lead to infertility.

Chemotherapy-induced changes in hormone levels can lead to early menopause for women and decrease sperm production in men.

Radiation therapy near the reproductive organs, abdomen, pelvis, or spine may damage eggs or sperm cells depending on the dose and level of radiation.

Hormone therapy used in the treatment of breast cancer and other types of cancer may affect fertility, though these effects are often temporary.

The extent to which these cancer treatments may impact your fertility depends on your personal health history — including your age and baseline fertility — and the duration and dosage of treatment. Your care team can provide a clearer sense of what to expect based on your health and treatment plan.

Many individuals of reproductive age choose to freeze their sperm or eggs for future use before beginning cancer treatment.

Sperm freezing is a fairly simple process in which a person’s sperm is collected, analyzed by a doctor, and, if viable, frozen in vials with cryoprotectant agents and stored for future use.

In the egg freezing process, fertility medications stimulate egg production and maturity. The eggs are retrieved in a minimally invasive procedure and then frozen and stored for future use. There is also the option of freezing embryos, which are eggs that have been fertilized with sperm.

There are several ways that you can use your frozen sperm, eggs, or embryos to have children biologically in the future after cancer treatment. Intrauterine insemination (IUI) is a process that allows you to use your frozen sperm and have it placed into your partner’s or a surrogate’s uterus.

In vitro fertilization (IVF) is a process in which eggs and sperm are fertilized and then placed into the uterus with the potential outcome of a pregnancy. Women who have previously undergone cancer treatment might use this process to have their frozen eggs or embryos implanted into their own uterus. If using eggs rather than embryos, there will be the additional step of fertilizing the eggs with a partner or donor’s sperm. If you had a hysterectomy to remove all or part of your uterus during cancer treatment, you can have your embryos implanted into a gestational carrier’s uterus.

Given the urgency of cancer treatment and the important timing of fertility medications during an egg freezing cycle, you will likely have to make quick decisions about fertility preservation, often within a few days of receiving a diagnosis. Your oncologist may refer you to a fertility specialist called a reproductive endocrinologist who can answer questions about cancer treatment and fertility and help you understand your fertility preservation options. It isn’t uncommon to begin taking fertility medications the same day as your consultation with a reproductive endocrinologist. 

If your oncology team does not know that fertility preservation is a priority for you, do not be afraid to take the initiative in starting the conversation. Be sure to get clarity on how moving forward with the fertility preservation process might impact the timing of your cancer treatment and what your oncologist recommends. Depending on your treatment plan, you may also want to ask about radiation shielding, which can be used during cancer treatment to protect the ovaries or testicles and limit how much radiation they are exposed to.

It’s important to take the financial aspects of fertility preservation treatments into account when planning for the future. While these treatments are significant financial investments, there are resources that can alleviate some of the costs of treatment, including programs designed specifically for those in cancer treatment and survivors.

If Alto is your fertility pharmacy, your fertility medication protocol likely includes medications manufactured by EMD Serono or Ferring Pharmaceuticals. Both companies offer financial assistance for individuals whose fertility has been affected by cancer treatment.

EMD Serono donates fertility medications to eligible cancer survivors diagnosed during their reproductive years through the Livestrong Fertility Discount program. Start the application process on Livestrong’s website to learn if you are eligible.

Ferring Pharmaceuticals provides some fertility medications at no cost for individuals pursuing fertility preservation before cancer treatment. To be eligible, you must be a female U.S. citizen or permanent resident with a cancer diagnosis who has not received chemotherapy within the previous six months. To apply, learn more about Ferring’s Heartbeat program online, or call 1-888-347-3415. (Residents of Arkansas, Massachusetts, or New Jersey can call 1-877-252-0553.)

Read our previous post on financial planning for egg freezing.

Reach out any time through in-app secure messaging or by phone at 1-800-874-5881. You can also request a price quote online.

Face and fingerprint ID login is a convenient, seamless way to gain app access on a mobile device. Instead of typing in a lengthy, hard-to-remember username and password, many apps allow you login with just a quick scan of your face or fingerprint (also known as biometrics).

Considerations and Approaches for Implementing Biometric Login: Part 1

It's a desirable feature for both our end user and the Patients Team here at Alto — we want to make it as easy as possible for users to log in while also performing more frequent authentication checks. Improve the user experience and the security of our app? Sounds like a win-win.

As an engineer, implementing biometric login might seem easy, as mobile devices already capture, manage, and encrypt biometric data and expose APIs for app developers like myself to initiate a biometric scan. All I need to do is call that API and wait to hear if the scan is successful or not. What isn't as simple, though, is figuring out what to actually do with a successful biometric scan response. What does a successful scan mean, and how does that relate to the username and password credentials that users currently use to access our app?

This post walks through the decision points we encountered while implementing biometric login and how our healthcare privacy concerns influenced the final implementation approach.

Prior to implementing biometric login, the only way for users to access the Alto app was with email (username) and password. A valid email and password generates a session, which expires at some frequency. Once the session expires, the user must re-enter their email and password to regain access to the app.

From the beginning, we knew that biometrics would need to be built with our existing email and password session management in mind. This is made clear in the Apple developer docs: "Use biometrics as a supplement to something you’re already doing. Don’t depend on biometrics as your only authentication option."

Make it easier for users to login. Nobody likes typing in an email and password — especially on a mobile app. Our goal was to reduce the number of times a user must enter their email and password.

Enhance the security of our app using more frequent authentication checks. As a healthcare app that displays Personal Health Information (PHI), conducting more frequent authorization checks decreases the likelihood of PHI becoming exposed to an unauthorized third party.

Have the ability to revoke biometric access from a particular user. Similarly, we want to be extra careful to ensure that if a device is lost or stolen, we have a fallback plan to invalidate a user's session and protect the user’s PHI. For email and password initiated sessions, this happens when a user changes their password, as any change in login credentials will invalidate all active sessions for that user. We needed a similar contingency plan for biometric login.

There are several ways to use a mobile device's biometrics to authenticate a user, with varying degrees of security.

No server-side authentication. Simply integrate with the device's biometrics as an extra layer of authentication. If the biometric scan is successful, let the user proceed into the app.

Provides an extra check and gives your app a sense of modern polish

No server-side validation means that nothing is being validated against your system, so this is not a good substitute for account authentication. Therefore, even if you add this check, the user should still be prompted to re-enter their email and password at the same frequency as before.

Given this, this approach wouldn't help us reach our goal of reducing the number of times a user must enter their email and password.

This approach is a good fit if your application already has an existing login and session management system, and you want extra authentication checks throughout the user's session without modifying any other part of the system.

Tie biometrics to our existing email and password authentication. Use the user's biometrics to unlock an encrypted version of their email and password credentials. When a user sets up biometric login, store the user's login credentials within the device's keystore — the keystore will automatically encrypt the credentials. After a successful biometric scan, retrieve those credentials from the keystore and send them to your existing login API.

Still easy to implement, no backend changes needed

Biometric scan can be used in place of entering an email and password

Changing email and password credentials will revoke biometric access: if a user changes their credentials, their biometrics will access stale credentials and fail to login. (This is somewhat of a con as well — it provides a poor user experience, but it's an edge case that should happen infrequently.)

There is still only one way for a user to authenticate server-side, but now two ways to pass server-side authentication — essentially weakening your app's existing account security.

This approach effectively hands out internal login credentials to third party storage. While not a huge risk considering a device's secure storage is encrypted and trusted by most users, it’s not necessarily a best practice either.

This approach is a good fit if your application doesn't contain sensitive data, and your goal is to make it more convenient for a user to login by replacing email and password with a biometric scan.

Create a separate authentication mechanism for biometrics. Introduce a new authentication mechanism specifically for biometrics, resulting in two independent forms of server-side session authentication: email with password and biometrics. The implementation could look like generating a keypair or a shared secret to save and validate against the server whenever a user attempts to login with biometrics.

Biometrics is now tied to its own secure server-side authentication mechanism, which means it can be used independently of email/password (or even replace it, if you choose to).

Two layers of authentication adds security to the app. Not only does a user need a valid email/password session, they also need a valid biometric session.

It provides fine-grain control over a user's biometric session. You can invalidate a user's biometric session by invalidating the public key and can even invalidate a biometric session without impacting an email-and-password session if needed.

Requires building and maintaining a separate authentication mechanism

This approach is a good fit if your application contains sensitive data (e.g. PHI or financial information), and your goals are to make it both more convenient for a user to login by replacing email and password with a biometric scan while also strengthening the security of your account management system.

Because we are a healthcare company dealing with sensitive data, we chose this last path. It required greater engineering investment, but we agreed it was imperative that we maintain a secure system while introducing biometric login for users.

In part 2, we talk implementation details, including the library we used, code snippets, and questions to consider before you get started. Interested in learning more about engineering at Alto? Follow us on LinkedIn.

There’s a lot to cover during a consultation, so you may find it helpful to prepare a list of questions in advance. Our fertility pharmacy experts offer some suggestions to get you started below.

Blog

Infertility, Explained

Two Engineering Interns Weigh In: What to Expect From Your Alto Internship

A Guide to Ferring Pharmaceuticals’ Fertility Medication Savings Programs

The Science Behind Vaccines

Fertility Preservation Options After a Cancer Diagnosis

Considerations and Approaches for Implementing Biometric Login: Part 1

Top Questions to Ask Your Fertility Clinic

A Financial Planning Guide for Egg Freezing

Meet Ramiah Martin, VP, Operations & Supply Chain

Introducing Christopher Tidball, Director of Product Management - Supply Chain & Fulfillment

What to know about RESOLVE: The National Infertility Association

Get to Know Alto Auténtico, our Latinx ERG

Switch to a better pharmacy.