> ## Documentation Index
> Fetch the complete documentation index at: https://support.legora.com/llms.txt
> Use this file to discover all available pages before exploring further.

# How to set up two-factor authentication

> Add a second factor, such as an authenticator app or a passkey, to protect your Legora account.

## Prerequisites

This section covers when two-factor authentication applies to you.

Two-factor authentication asks for a second proof of identity after your password. It applies when you sign in with an email address and password. If you sign in with single sign-on (SSO), your identity provider handles this step.

Before you begin:

* Your organisation decides whether two-factor authentication is required and which methods you can use.
* To use an authenticator app, install one on your phone or computer.
* To use a passkey or security key, use a device or browser that supports them.

## Steps

How you set up two-factor authentication depends on your organisation’s sign-in system. If you sign in at a regional URL, such as [app.eu.legora.com](https://app.eu.legora.com), use **Regional authentication**. If you sign in at [app.legora.com](https://app.legora.com) or a dedicated `*.app.legora.com` URL, use **Global authentication**. To check in Legora, from your name on the menu, select **Settings** > **Personal** > **Profile**. Under **Workspace access**, **Sign-in** shows **Global** or **Regional**.

> [tab] Regional authentication
>
> Legora asks you to set up a method during sign-in when your organisation requires two-factor authentication.
>
> 1. Sign in to Legora with your email address and password.
> 2. When Legora asks you to set up two-factor authentication, choose one of the methods shown.
> 3. Follow the prompts on screen to finish the setup.

> [tab] Global authentication
>
> You can set up two-factor authentication when you sign in, or at any time from the setup page.
>
> 1. Sign in to Legora with your email address and password.
> 2. On **Verify it’s you**, select **Set up an authenticator app or security key**. If your organisation requires a method you have not set up, Legora opens the setup page for you. To open it at any time, go to [login.legora.com/settings/mfa](https://login.legora.com/settings/mfa).
> 3. On **Set up multi-factor authentication**, choose a method:
>    * **Authenticator app**: Scan the QR code with your authenticator app, enter the code it shows, then select **Set up authenticator app**.
>    * **Security key**: Optionally enter a name, select **Add security key**, then follow your browser’s prompts to use a passkey, your device’s fingerprint or face recognition, or a hardware security key.
>
> If your organisation allows email codes, you can also select **Email me a code** on **Verify it’s you** each time you sign in, without setting anything up.
>
> The methods you see depend on what your organisation allows.

## Expected result

This section explains how to confirm the setup worked.

You’ll know this worked when Legora confirms the method is set up. On global authentication, you see **Authenticator app is set up** or **Security key registered**. The next time you sign in, Legora asks for your second factor after your password.

## Troubleshooting

These are the most common problems with a second factor.

### What if I get a new phone or computer?

A passkey saved on one device may not be available on another. On **Verify it’s you**, use another method you have set up, such as an authenticator app or **Email me a code**. Then add the new device from [login.legora.com/settings/mfa](https://login.legora.com/settings/mfa).

### What if I cannot use any of my methods?

Contact your organisation’s Admin or [support@legora.com](mailto:support@legora.com) with your email address and the login URL you use.