Skip to main content
Manage your personal sign-in details and security methods any time you’re logged in. These settings apply to your own user account, not your organization. To manage other people’s access, see team management.

Change your email

  1. Open the Update email page.
  2. Enter your new email address and select Send confirmation links.
  3. Lemma sends a confirmation link to both your current and your new address. The change takes effect once you confirm from both.
Until you confirm from both inboxes, you keep signing in with your current email.

Change your password

  1. Open the Update password page.
  2. Enter your new password, confirm it, and select Save new password.
Your password must be at least 12 characters and include an uppercase letter, a lowercase letter, and a number. If you’re signed out and can’t remember your password, select Forgot your password? on the login page. Lemma emails you a link to reset it.

Set up multi-factor authentication

Multi-factor authentication (MFA) protects your account by requiring a one-time code in addition to your password when you sign in. Lemma supports two methods:
  • Authenticator app: an app like Google Authenticator, Authy, or Duo generates codes on your device.
  • Text message (SMS): Lemma texts a one-time code to your mobile phone.

Enable an authenticator app

  1. Go to Settings > Security and select Enable next to Authenticator app.
  2. Scan the QR code with your authenticator app. If you can’t scan it, enter the setup secret manually instead.
  3. Enter the 6-digit code from the app and select Verify and enable.

Enable SMS verification

  1. Go to Settings > Security and select Enable next to Text message (SMS).
  2. Enter your mobile phone number and select Send code. Landlines can’t receive SMS codes.
  3. Enter the 6-digit code from the text message and select Verify and enable.

Switch or disable a method

You can only disable a method while the other one stays enabled, so your account always keeps at least one active method. To switch methods, enable the new method first, then disable the old one. When you disable a method, Lemma asks you to confirm with a code from the method that remains.

Why an authenticator app is better than SMS

Both methods are far better than a password alone, but an authenticator app is the stronger choice:
  • Resistant to SIM swapping. SMS codes go to your phone number. An attacker who convinces your carrier to transfer your number to their SIM receives your codes. Authenticator codes are generated on your device and never leave it.
  • Nothing to intercept. SMS messages travel over carrier networks and can be intercepted or redirected. Authenticator codes are computed locally, so there is no message to steal.
  • Works without cell service. Authenticator apps generate codes offline, so you can sign in while traveling or anywhere without reception.