Configuring two-factor authentication

Two-factor authentication (2FA) requires two factors to access Legalsense: your username and password, plus a code from a device such as an authenticator app (for example Google Authenticator or Microsoft Authenticator) or a password manager (for example 1Password). Only this combination grants access to Legalsense.

How to configure 2FA

You can always configure 2FA for your own account, unless your office enforces it centrally.

Add a 2FA device on your own initiative

If 2FA isn't mandatory within your office, you can still choose to use it:

1. Click your profile image and choose My profile.

Account menu link in the top-right corner of Legalsense.

2. On the My Profile page, you will find the Two-factor authentication section.

My account page showing the Two-factor authentication section.

3. Click Add a device to add 2FA.
4. Enter the requested data and click Add device.

• For Name you can use whatever name you want, but make sure you are able to identify it later.
• The New security token is the code your 2FA app shows after you scan the QR code. If you already have a device, also enter a code from that device in Existing security token.

You can now use the device to log in to Legalsense.

Remove a 2FA device on your own initiative

If you want to stop using 2FA, and your office doesn't enforce it, delete your devices on the My profile page. When you delete all devices, Legalsense disables 2FA automatically, and you can log in again with only your username and password.

Note: Your browser sometimes still shows the security-code field after you remove all devices. If this happens, clear your browser cache; Legalsense then shows the standard login screen with two input fields again.

If your office enforces 2FA centrally

If your office has set up 2FA centrally (see the article ↪ Two-factor authentication setup for administrators), you see a screen after logging in where you can enter your email address.

Screen prompting for an email address to receive 2FA setup instructions.

Important: This email address must match the email address of your Legalsense account.

1. Enter your email address. Legalsense sends you an email with instructions and a link to set up a 2FA device.
2. Click the link in the email.

2FA device setup instructions shown after clicking the setup link.

3. Complete the required information. Legalsense gives a confirmation once your device is set up.

From then on, you can only log in using the added device.

Manage your devices

Manage your devices from the My profile page. You can connect multiple 2FA devices to your account, for example, an authenticator app on your smartphone and a password manager such as 1Password. Click the delete icon next to a device to remove it.

My account page listing connected 2FA devices with a delete icon next to each.

Note: Legalsense doesn't provide backup codes. Add a second device, for example a password manager, so you can still log in if you lose your phone.

2FA with the Legalsense iOS app and other external applications

If an external application doesn't yet support logging in with 2FA, click Temporarily disable 2FA on your My profile page. You need to enter a security token to do this. 2FA is then disabled for your whole account for 5 minutes, so log in to the application within that time.

Note: Newer versions of the Legalsense iOS app support logging in with a 2FA code directly, so you shouldn't need to temporarily disable 2FA for the app. If your version doesn't support this yet, update the app or use the temporary disable option described above.

Troubleshooting

Legalsense says the code is incorrect

If Legalsense shows Incorrect security token., check the following:

• Enter the code that your app currently shows. Codes change every 30 seconds.
• Make sure the date and time on your phone are set automatically. If the clock on your phone is off, the codes don't match.
• If you have several accounts in your app, use the code for Legalsense.

After 10 failed login attempts, Legalsense blocks the login for 2 hours. An administrator can unblock it earlier; see ↪ Two-factor authentication setup for administrators.

You lost your phone or deleted your app

You can't add a new device yourself without a code from an existing device. If you don't have another device:

1. Ask an administrator to delete your 2FA device.
2. On the login page, click No 2FA device? and enter your email address.
3. Click the link in the email and set up your new device.