Multi-factor authentication (MFA) adds an extra layer of security to your Lingo account. When enabled, you'll need both your password and a verification code from your phone to sign in.
Why use MFA?
Even strong passwords can be compromised through phishing, data breaches, or other attacks. MFA protects your account by requiring something you know (your password) and something you have (your phone). Even if someone steals your password, they can't access your account without your verification code.
Setting up MFA
Click your avatar in the bottom-left corner
Select Account settings
Find the Password tab in the left rail
Click Enable in the Two factor authentication section
Scan the QR code with an authenticator app (like Google Authenticator, Authy, or 1Password)
Enter the 6-digit code from your authenticator app to confirm
Save your backup codes in a secure location
Recommended authenticator apps
Any TOTP-compatible authenticator app works with Lingo:
Google Authenticator — Simple and widely used (iOS, Android)
Authy — Includes cloud backup and multi-device sync (iOS, Android, Desktop)
1Password — Built into the password manager (iOS, Android, Desktop)
Microsoft Authenticator — Good for Microsoft-heavy environments (iOS, Android)
Signing in with MFA
Once MFA is enabled, signing in requires two steps:
Enter your email and password as usual
Open your authenticator app and enter the current 6-digit code
Click Verify to complete sign-in
Codes refresh every 30 seconds, so enter the current one quickly.
Backup codes
When you set up MFA, you'll receive backup codes. These one-time codes let you sign in if you lose access to your authenticator app.
Important:
Save backup codes somewhere secure (password manager, printed copy in a safe place)
Each backup code can only be used once
Generate new backup codes if you run out or suspect they've been compromised
If you lose access to your authenticator
If you can't access your authenticator app:
Use one of your backup codes to sign in
Go to Account settings and disable MFA
Set up MFA again with your new device
If you've lost both your authenticator and backup codes, contact support for account recovery. You'll need to verify your identity.
Disabling MFA
If you need to turn off MFA:
Click your avatar in the bottom-left corner
Select Account settings
Find the Password tab
Click Disable
Enter your password to confirm
We recommend keeping MFA enabled for the strongest account security.
MFA and SSO
If your organization uses Single Sign-On (SSO), MFA is typically managed through your identity provider (Okta, Azure AD, etc.) rather than directly in Lingo. Check with your IT team about your organization's MFA policies.