> ## Documentation Index
> Fetch the complete documentation index at: https://support.legora.com/llms.txt
> Use this file to discover all available pages before exploring further.

# How to set up two-factor authentication

> Add a second factor, such as an authenticator app or a passkey, to protect your Legora account.

## Prerequisites

This section covers when two-factor authentication applies to you.

Two-factor authentication asks for a second proof of identity after your password. It applies when you sign in with an email address and password. If you sign in with single sign-on (SSO), your identity provider handles this step.

Before you begin:

* Your organization decides whether two-factor authentication is required and which methods you can use.
* To use an authenticator app, install one on your phone or computer.
* To use a passkey or security key, use a device or browser that supports them.

## Steps

How you set up two-factor authentication depends on your organization’s sign-in system. If you sign in at a regional URL, such as [app.eu.legora.com](https://app.eu.legora.com), use **Regional authentication**. If you sign in at [app.legora.com](https://app.legora.com) or a dedicated `*.app.legora.com` URL, use **New authentication**.

<Tabs>
  <Tab title="Regional authentication">
    Legora asks you to set up a method during sign-in when your organization requires two-factor authentication.

    1. Sign in to Legora with your email address and password.
    2. When Legora asks you to set up two-factor authentication, choose one of the methods shown.
    3. Follow the prompts on screen to finish the setup.
  </Tab>

  <Tab title="New authentication">
    You can set up two-factor authentication when you sign in, or at any time from the setup page.

    1. Sign in to Legora with your email address and password.
    2. On **Verify it’s you**, select **Set up an authenticator app or security key**. If your organization requires a method you have not set up, Legora opens the setup page for you. To open it at any time, go to [login.legora.com/settings/mfa](https://login.legora.com/settings/mfa).
    3. On **Set up multi-factor authentication**, choose a method:
       * **Authenticator app**: Scan the QR code with your authenticator app, enter the code it shows, then select **Set up authenticator app**.
       * **Security key**: Optionally enter a name, select **Add security key**, then follow your browser’s prompts to use a passkey, your device’s fingerprint or face recognition, or a hardware security key.

    If your organization allows email codes, you can also select **Email me a code** on **Verify it’s you** each time you sign in, without setting anything up.

    The methods you see depend on what your organization allows.
  </Tab>
</Tabs>

## Expected result

This section explains how to confirm the setup worked.

You’ll know this worked when Legora confirms the method is set up. On new authentication, you see **Authenticator app is set up** or **Security key registered**. The next time you sign in, Legora asks for your second factor after your password.

## Troubleshooting

These are the most common problems with a second factor.

### What if I get a new phone or computer?

A passkey saved on one device may not be available on another. On **Verify it’s you**, use another method you have set up, such as an authenticator app or **Email me a code**. Then add the new device from [login.legora.com/settings/mfa](https://login.legora.com/settings/mfa).

### What if I cannot use any of my methods?

Contact your organization’s Admin or [support@legora.com](mailto:support@legora.com) with your email address and the login URL you use.