---
title: "Guide to Two-Factor Authentication (2FA) in Prima.Law: Methods and Setup"
url: "https://primalaw.productfruits.help/en/article/guide-to-two-factor-authentication-2fa-in-primalaw-methods-and-setup"
language: "en"
last_updated: "2026-11-06T21:40:15.015Z"
---

# Guide to Two-Factor Authentication (2FA) in Prima.Law: Methods and Setup

To enhance security standards and safeguard the confidentiality of legal cases, **Prima.Law** enforces mandatory Two-Factor Authentication (2FA). This policy applies to all **firm administrator accounts** (*tenants*) and is prompted again every **7 days** of active session.

Below are the **5 login methods** available: the 2 standard initial access channels and the 3 advanced options configurable directly within the platform for immediate, frictionless entry.

## Initial Login Methods (Login Screen)

When signing in with your email and password, Prima.Law displays the *Login from a new device* modal with two choices:

  

1.  **SMS (Text Message):** Available exclusively for phone numbers with the **United States country code (+1)**.
2.  **Email:** The system sends a 6-digit code to the email address registered to your account from [`no-reply@notifications.primafacieapp.com`](mailto:no-reply@notifications.primafacieapp.com) with the subject *"Double factor authentication code - Prima.Law"*.

> **Key Login Screen Features:**  
>   
> 
> -   If the code does not arrive immediately, a countdown timer is available (**"Resend code in 30s"**).
> -   If you experience delivery issues, click **"Try another method"** to toggle between email and SMS.

## Advanced Methods (Setup in *My Info*)

To prevent waiting for SMS or email codes, configure your preferred direct method once logged in.

  

```
Path: Main Navigation > Admin Console / Profile > My Info > "Two-factor authentication"
```

> **Security Verification Step:**  
>   
>   
> For security purposes, whenever you click **Add a passkey** or **Set up an authenticator app**, you will see a verification prompt:  
>   
>   
> **"Confirm it's you: Enter your password to change two-factor authentication"**. Enter your current password to proceed.

### Option 1: Create and Use a Passkey (Biometrics, PIN, or Hardware Key)

This is the fastest and most seamless method. It allows you to authenticate using Touch ID, facial recognition, Windows Hello PIN, or external security keys.

  

#### How to configure:

1.  In the **Two-factor authentication** section, click **Add a passkey**.
2.  Enter your password in the identity confirmation window.
3.  Choose where to save your passkey:  
      
    
4.  -   **Google Password Manager / Apple Keychain:** Syncs across your cloud account for seamless access on supported browsers and devices. When using Google, enter your 6-digit Google Password Manager PIN.
    -   **Windows Hello or physical security key:** Locks directly to your computer hardware using your Windows PIN or fingerprint reader.
5.  **Save your backup codes (*****Save these backup codes*****):** The platform will display a list of 10 single-use emergency codes. Click **Copy**, paste them in a secure location, and click **I saved them** (or **Go to sign in** if you started from a setup link).
6.  The Passkey will appear in your active methods list showing your system identifier (e.g., `Win32` or `MacIntel`).

#### Routine login (Every 7 days):

1.  Enter your standard email and password.
2.  In the **One more step** screen, click **Use your passkey**.
3.  Confirm with your fingerprint, Windows/Google PIN, or scan the QR code from your mobile device if signing in from another machine.

### Option 2: Use an Authenticator App (Google Authenticator, Apple Passwords, 1Password)

Generates time-based rotating 6-digit codes every 30 seconds (TOTP). Operates 100% offline without cellular coverage or mobile carrier dependencies.

  

#### How to configure:

1.  Under **Two-factor authentication**, click **Set up an authenticator app**.
2.  Enter your account password to authorize the change.
3.  The **Scan this with your authenticator app** modal will present a QR code.
4.  Open your preferred application:  
      
    
5.  -   **Google Authenticator / Microsoft Authenticator:** Tap `+`, select *Scan a QR code*, and frame the QR code on your screen.
    -   **Apple Passwords (iOS / macOS):** Scan the QR code; if entering manually, specify your username and domain (`prima.law`).
    -   **Password Managers (1Password, Bitwarden):** Capture the QR code directly via their browser extension.
6.  In Prima.Law, type the 6 digits generated by your app into the field labeled **"Then type the six-digit code it shows"** and click the green **Confirm** button.
7.  The method will now be listed under your active table as **Authenticator app**.

#### Routine login (Every 7 days):

1.  Upon logging in, the platform will prompt: **"One more step: Code from your authenticator app"**.
2.  Type the current 6-digit code shown in your app and click **Continue**.

### Option 3: Administrative One-Time Setup Link (*Set up for them / Reset*)

Designed specifically for firm administrators who **cannot access their login email inbox** or **do not possess a US phone number** to receive verification texts.

  

Any active administrator inside the firm can provide immediate access recovery:

  

#### For the Assisting Administrator:

1.  Navigate to **My Info** and scroll down to the **Your firm** section.
2.  Locate the locked user in the list of team members.
3.  Click the **Set up for them** button next to their name (or **New setup link** if one was previously issued).
4.  A **One-time setup link** modal appears:  
      
    
    > *"Give this to \[User\] in person or by phone — not by email, usually email is not working. It expires in 24 hours and works once. They will have to enter their own password."*
    
5.  Click **Copy and close** and hand over the link securely (via internal chat, WhatsApp, or phone call; **never via their locked email address**).
6.  **Resetting Access (****`Reset`****):** If a user loses their phone, misplaces backup codes, and loses access entirely, an admin can click the red **Reset** button next to their name. This clears prior credentials, reverts them to email-based login, and dispatches a notification.

#### For the Locked Administrator:

1.  Open the received link in any browser.
2.  The verification screen will display:  
      
      
    **"Set up two-factor authentication: This link was issued for** [**your\_email@domain.com**](mailto:your_email@domain.com)**. Enter your own password to continue — the link alone is not enough."**
3.  Type your current Prima.Law password.
4.  Select your preferred permanent login method:  
      
    
5.  -   **Use an authenticator app** (to scan the QR code with your app).
    -   **Use a passkey on this device** (to bind device biometrics or local PIN).
6.  Copy your **Backup codes** and click **Go to sign in**. Account access will be restored immediately.

## Method Management and Emergency Access

The **Two-factor authentication** dashboard includes ongoing administration tools:

  

-   **Rename:** Label your devices (for example, renaming `Win32` to *"Office Laptop"*) to keep track of active credentials.
-   **Remove:** Delete outdated keys or retired hardware with a single click.
-   **Backup Codes:** Click **New backup codes (10 left)** at any time to generate a replacement set of 10 emergency keys.
-   **Emergency Login:** If you do not have your authenticator device with you, click **"Lost your phone? Use a backup code"** at the bottom of the login modal and submit any unused code from your saved list.

## Quick Reference Summary Table

| **Method** | **Where It Is Used** | **Key Requirement** | **Primary Benefit** |
| --- | --- | --- | --- |
| **SMS** | Login Screen | US phone number (+1) | Quick initial entry without setup. |
| **Email** | Login Screen | Access to registered login email | Accessible globally for any standard email provider. |
| **Passkey** | Login (Every 7 days) | Touch ID, Windows Hello, PIN, or Google Password Manager | Fastest option: 1-second login using device biometrics. |
| **Authenticator App** | Login (Every 7 days) | Google Authenticator, Authy, Apple Passwords, or 1Password | Operates 100% offline without network carrier dependencies. |
| **Recovery Link (*****Set up for them*****)** | Created by an Admin in *Your firm* | Valid for 24 hours, single-use | Recovers locked admins lacking email/SMS access so they can configure a Passkey or App. |