Skip to content
LegalBook

Signing in and two-step verification

One LegalBook account, a required second step for everyone who works in the firm, and why some actions ask you to sign in again.

For: OwnerAttorneyStaffClient

On this page

LegalBook has one sign-in: your LegalBook account. The app itself keeps no passwords. When you sign in, you are sent to the LegalBook account service, you prove who you are there, and you come back signed in.

Sign in

  1. Go to app.legalbook.work.
  2. Choose Continue with LegalBook account.
  3. Enter your email and password at the account service, then your second step if you have one.
  4. You return to LegalBook and land on the home of your workspace.

If you work for more than one firm, the firm you are working in is always shown at the top of the screen. See Finding your way.

Two-step verification

Anyone who works in LegalBook (firm staff, attorneys, owners, the shared workforce and platform staff) must have two-step verification. Until you set it up, LegalBook shows only the Set up two-step verification screen in place of the product. Clients and external accounts are not required to use it.

You can use either or both of:

  • an authenticator app (a time-based code on your phone), or
  • a passkey (your phone's or computer's built-in fingerprint, face or device unlock).

Setting up gives you ten recovery codes. Each works once. Save them somewhere safe and separate from your phone: they are how you get back in if you lose it.

Set it up

  1. On the Set up two-step verification screen, choose Open the Security page. It opens your account's Security page at the LegalBook account service.
  2. Add an authenticator app or a passkey, and save your recovery codes.
  3. Return to LegalBook and choose Continue. If LegalBook does not see your second step yet, choose Sign in again.

Adding or removing a method, or creating new recovery codes, needs a sign-in from the last ten minutes. After five wrong answers a sign-in attempt ends, and ten wrong answers in fifteen minutes lock two-step sign-in for the account for a while.

Why some actions ask you to sign in again

Some actions need a recent sign-in, not just a session that is still open. Examples include changing a matter to attorney-only, sharing a document outside the firm, connecting an integration, releasing a legal hold, and approving or downloading an export. When you take one of these actions, LegalBook sends you back to the account service to sign in again, then returns you to finish.

Devices and sessions

Every browser or phone you sign in on is a separate session. Open the account menu (your picture, top right) and choose Sessions in this app to see Your sessions in this app: each device, its address and when it was last active.

  • Sign out one device, for example a lost phone. That device is signed out on its next request, and its account-service session ends too.
  • Sign out everywhere ends every session in this app and your LegalBook account session.

If your account is paused or blocked at the account service, every LegalBook session ends.

Signing in with Google or Microsoft

Not available yet. The account service supports Google and Microsoft sign-in, and the buttons appear only once LegalBook has configured those providers.

Clients

Clients sign in with their own LegalBook account too, after accepting the invitation their firm sends. A representative or household member gets their own sign-in, never a shared password. See Using your client portal.