Weda is an online medical software used by a large number of healthcare professionals in France. Its platform, accessible from secure.weda.fr, centralizes patient files, teletransmission, and monitoring tools. Access to this portal relies on strong authentication mechanisms that have evolved in recent years, particularly with the integration of Pro Santé Connect and the e-CPS.
What the e-CPS changes for connecting to Weda secure
The help content of Weda details the connection via username, password, and multi-factor authentication (MFA). This method works, but it requires juggling between a computer and a smartphone to validate each session. Another channel exists, less documented in current guides: the e-CPS, a dematerialized version of the health professional card.
Specifically, the e-CPS allows strong authentication from a smartphone via Pro Santé Connect, without a physical card reader. The healthcare professional who has activated their e-CPS identifies themselves with a unique PIN code and a verified RPPS identity. This flow eliminates the need to enter a traditional Weda password and reduces the connection steps.
For practitioners who consult Weda during home visits or while traveling, this approach is a game changer. No need to carry a CPS card reader or memorize separate credentials for each digital health service. It is possible to access Weda secure via Optisanté to find the detailed steps for this setup.
Pro Santé Connect and Weda: unified authentication and real constraints
Weda officially recommends connecting via Pro Santé Connect (PSC) as the preferred method. This identification service, provided by the State, allows for strong authentication in accordance with digital health standards. In practice, PSC federates access to several connected services, including Weda, under a single professional identifier.
The main benefit is simplification: a single authentication flow for all compatible tools. Weda 10, the current version of the software, integrates this PSC component. The practitioner who connects via PSC no longer has to manage a specific Weda password.
Limitations to know before switching
Not all healthcare professionals have an activated e-CPS yet. Activation requires a compatible smartphone and an initial enrollment procedure that takes a few minutes, but it can pose a problem for practitioners who are not familiar with mobile applications.
Moreover, the PSC connection depends on the availability of the national service. In case of a technical incident on the Pro Santé Connect side, access to Weda may be temporarily blocked if no backup method is configured. Weda maintains the connection via username and MFA as an alternative, which requires keeping traditional credentials in parallel.
- The e-CPS works on iOS and Android, but the phone must be enrolled in advance via the dedicated ANS application
- The e-CPS PIN code is distinct from the Weda password: they should not be confused during the first connection
- A change of smartphone requires reactivating the e-CPS, which may block access for a few hours if the procedure is not anticipated
Health data security: what Weda imposes on the user side
Weda hosts data in France with a HDS certification (health data hosting). The software is labeled ASIP Santé advanced level. These guarantees cover the infrastructure, but user-side security remains a shared responsibility, as the official documentation of the software reminds.
MFA (multi-factor authentication) is mandatory for connection via username and password. This system sends a temporary code to the practitioner’s smartphone at each session opening. Without this second factor, the connection is denied.
Best practices that truly change the level of protection
Many guides list generic advice on passwords. Two points deserve particular attention in the context of Weda.
The first concerns session management on shared workstations. In multi-professional health houses (MSP), several practitioners sometimes use the same computer. Closing the Weda session is not always sufficient if the browser retains authentication cookies. Using a private browsing window for each Weda connection eliminates this risk.
The second point relates to updates of the physical CPS card. Version 4 CPS cards are gradually being introduced to replace the old ones. A practitioner still using a card reader must check the compatibility of their equipment with the new version, or they may find themselves unable to connect.
HospiConnect Program: what is being prepared for access to health software
The national HospiConnect program, planned for the period 2026-2028, aims to deploy a single sign-on (SSO) system for healthcare professionals in institutions. This project relies on the Pro Santé Connect infrastructure and could change the way software like Weda manages identification.
The stated goal is to allow a professional to authenticate only once at the beginning of the day, then access all their digital tools without re-entering credentials. For Weda users in hospital settings or MSPs, this would represent a significant time saving.
The available data does not yet allow for confirming the exact deployment schedule or the scope of the software concerned in the first phase. However, the fact that Weda is already connected to PSC positions the software well to integrate this system at its launch.
- HospiConnect primarily targets healthcare institutions, but city structures (offices, MSPs) could follow
- The program is part of the continuity of the Ségur du numérique en santé, of which Weda is referenced
- Single sign-on will not eliminate MFA, but could reduce its frequency to daily validation
Access to Weda secure currently relies on two main pathways: the username/MFA pair and Pro Santé Connect via the e-CPS. The second option is gaining ground and simplifying mobile access. For practitioners who have not yet activated their e-CPS, it is probably the most concrete lever to streamline their digital daily life, even before the arrival of HospiConnect.