Prerequisites
This section covers when two-factor authentication applies to you.
Two-factor authentication asks for a second proof of identity after your password. It applies when you sign in with an email address and password. If you sign in with single sign-on (SSO), your identity provider handles this step.
Before you begin:
- Your organization decides whether two-factor authentication is required and which methods you can use.
- To use an authenticator app, install one on your phone or computer.
- To use a passkey or security key, use a device or browser that supports them.
Steps
How you set up two-factor authentication depends on your organization’s sign-in system. If you sign in at a regional URL, such as app.eu.legora.com, use Regional authentication. If you sign in at app.legora.com or a dedicated *.app.legora.com URL, use Global authentication. To check in Legora, from your name on the menu, select Settings > Personal > Profile. Under Workspace access, Sign-in shows Global or Regional.
Regional authentication
Global authentication
Legora asks you to set up a method during sign-in when your organization requires two-factor authentication.
- Sign in to Legora with your email address and password.
- When Legora asks you to set up two-factor authentication, choose one of the methods shown.
- Follow the prompts on screen to finish the setup.
You can set up two-factor authentication when you sign in, or at any time from the setup page.
- Sign in to Legora with your email address and password.
- On Verify it’s you, select Set up an authenticator app or security key. If your organization requires a method you have not set up, Legora opens the setup page for you. To open it at any time, go to login.legora.com/settings/mfa.
- On Set up multi-factor authentication, choose a method:
- Authenticator app: Scan the QR code with your authenticator app, enter the code it shows, then select Set up authenticator app.
- Security key: Optionally enter a name, select Add security key, then follow your browser’s prompts to use a passkey, your device’s fingerprint or face recognition, or a hardware security key.
If your organization allows email codes, you can also select Email me a code on Verify it’s you each time you sign in, without setting anything up.The methods you see depend on what your organization allows. Expected result
This section explains how to confirm the setup worked.
You’ll know this worked when Legora confirms the method is set up. On global authentication, you see Authenticator app is set up or Security key registered. The next time you sign in, Legora asks for your second factor after your password.
Troubleshooting
These are the most common problems with a second factor.
What if I get a new phone or computer?
A passkey saved on one device may not be available on another. On Verify it’s you, use another method you have set up, such as an authenticator app or Email me a code. Then add the new device from login.legora.com/settings/mfa.
What if I cannot use any of my methods?
Contact your organization’s Admin or support@legora.com with your email address and the login URL you use.Last modified on November 6, 2026
