Skip to main content
Security settings manages multi-factor authentication (MFA) for your Lemma user account. MFA protects your sign-in even if someone learns your password. MFA is configured per user, not per entity. If you access multiple entities, the same factors protect your Lemma account across them.

​
Available methods

​
Authenticator app

Use an app such as Google Authenticator, Authy, or Duo to generate verification codes. To enable it:
  1. Select Enable next to Authenticator app.
  2. Scan the QR code with your authenticator app. If you cannot scan it, enter the displayed secret manually.
  3. Enter the six-digit verification code.
  4. Select Verify and enable.

​
Text message (SMS)

SMS sends a one-time verification code to a mobile phone each time you sign in. Landline numbers cannot receive SMS codes. To enable it:
  1. Select Enable next to Text message (SMS).
  2. Enter a mobile phone number.
  3. Select Send code.
  4. Enter the six-digit code sent by text.
  5. Select Verify and enable.

​
Remember a trusted device

When you enter a verification code at sign-in, Lemma shows a Remember this device for 7 days checkbox, selected by default. Leave it selected and Lemma skips the verification code on that browser for the next 7 days. You still sign in with your email and password. Trust applies to one browser on one device. Signing in from a different browser or device prompts for a code as usual. Uncheck the box on shared or public computers so the device is not remembered. Signing out does not clear a remembered device. Lemma forgets all remembered devices when you change your password or disable an MFA method.

​
Disable a method

Select Disable next to the method you want to remove and complete the verification step. If another factor is enrolled, Lemma may ask you to verify with it before disabling the selected factor. This protects the session while you change security settings. Keep at least one secure factor enabled whenever possible. If your phone or authenticator is unavailable, contact Lemma support rather than sending a verification code through an untrusted channel.