Two-factor authentication and recovery codes

Two-factor authentication (2FA) protects your account even if outsiders learn your password: signing in then also requires a one-time code from an app on your phone. For a lawyer who keeps Customers' data in the system, we recommend turning it on.

How to turn it on

1. Install an authenticator app on your phone (for example, Google Authenticator);
2. In the Profile section, in the "Security and sign-in" card, next to "Two factor authentication", click "Set up";
3. Scan the QR code in the app;
4. Enter the six-digit code the app shows and confirm.

After confirmation the system shows 10 recovery codes.

How signing in works

1. Enter your email and password;
2. In the window that opens, enter the six-digit code from the app. The window is valid for 20 minutes: if you didn't make it in time, start signing in again.

If your phone isn't at hand, click the link to sign in with a recovery code and enter one of the saved codes. A used code will no longer work.

Managing 2FA

When 2FA is on, the same button ("Set up") opens a management window:

• Replace the setup — for example, when you change phones: the system shows a new QR code that you need to scan again;
• Recovery codes — the "View codes" button lets you see the codes (used ones are marked), and the "Generate new recovery codes" button issues new ones. The old codes stop working after that.