Find a Provider Community Forum
For Providers For Attorneys
Sign In Attorneys

How to Enable Two-Factor Authentication for Your Attorney Account

Last updated Aug 15, 2026

Use this guide if you need to know how to enable attorney account two factor authentication in MedXimity. Two-factor authentication, also called 2FA, adds a second verification step at sign-in so your attorney account is not protected by a password alone.

This article is for attorney users and law firm account administrators. Interface labels may vary slightly by account configuration.

What Two-Factor Authentication Does for Your Attorney Account

If you are asking, what does two factor authentication do, the short answer is: it requires something you know, such as your password, plus something you have, such as a verification code from your phone, email, or authentication app.

For law firms, 2FA may help reduce the risk of unauthorized access to sensitive account information, case-related communications, and medical-legal records available through MedXimity. It does not guarantee account security, but it is stronger than password-only login.

Before You Start

  • Make sure you can sign in to your MedXimity attorney account.
  • Have access to the phone, email inbox, or authentication app you plan to use.
  • If your account is managed by your firm, confirm whether your administrator controls security settings.
  • If you are using a shared office computer, finish setup from a private browser session and sign out when done.

How to Enable Two-Factor Authentication for Your Attorney Account

Follow the steps below to turn on 2FA for your attorney login.

Step 1: Sign In to Your Attorney Account

  1. Go to medximity.com.
  2. Select Sign In.
  3. Enter your attorney account email address and password.
  4. If prompted, complete any existing verification step.

If you cannot sign in, use the password reset option before setting up 2FA. For related login help, see Attorney Login Help or Reset Your MedXimity Password.

Step 2: Open Account or Security Settings

  1. After signing in, open your profile menu. This is usually in the upper-right corner.
  2. Select Account Settings, Security, or a similar option.
  3. Look for Two-Factor Authentication, 2-Step Verification, or Login Security.

If you searched for attorney account security settings login help because you cannot find this section, your firm administrator may need to enable access or update your user permissions.

Step 3: Choose Your Verification Method

The best verification method for attorney login is usually the method you can access reliably and keep private. Depending on your account settings, MedXimity may offer one or more of these options:

  • Authentication app: An app on your phone that creates rotating login codes. This is often a strong option because it does not depend on text message delivery.
  • SMS text message: A code sent to your mobile number. This is convenient but depends on phone service.
  • Email verification: A code sent to your email inbox. This may be useful as a backup if enabled for your account.
  1. Select your preferred verification method.
  2. Enter the requested phone number or email address, or scan the QR code if using an authentication app.
  3. Confirm that the device or inbox belongs only to you or is approved for your firm’s account-security process.

Step 4: Enter and Confirm Your Verification Code

  1. Check your selected method for the verification code.
  2. Enter the code exactly as shown.
  3. Select Verify, Confirm, or Continue.
  4. If the code is accepted, continue to save your settings.

Codes are usually time-limited. If you are wondering how long does verification code last, check the timer or message on the MedXimity screen. If the code expires, request a new one and use only the most recent code.

Step 5: Save Your Settings and Test Your Next Sign-In

  1. Select Save or Turn On Two-Factor Authentication.
  2. Sign out of MedXimity.
  3. Sign back in with your email and password.
  4. Complete the 2FA prompt using your chosen method.

Testing your next sign-in helps confirm that your method works before you need urgent account access.

How to Confirm Two-Factor Authentication Is Active

If you need to know how to confirm two factor is active, check both your settings and your sign-in flow.

  1. Open Account Settings or Security.
  2. Find the two-factor authentication section.
  3. Confirm the status shows On, Enabled, or Active.
  4. Review the listed verification method for accuracy.
  5. Sign out and sign back in to confirm you are prompted for a code.

Troubleshooting Verification Code Issues

If your verification code not working attorney account issue continues, try these steps:

  1. Use the newest code. Older codes may expire after a short period.
  2. Check for typing errors. Enter the code without extra spaces.
  3. Wait briefly before resending. Multiple requests can cause older codes to stop working.
  4. Check spam or junk folders. Do this if you selected email verification.
  5. Confirm phone service. If you selected SMS, make sure your device can receive texts.
  6. Check your device time. Authentication apps may fail if your phone’s time is not set automatically.
  7. Try a different approved method. If your account has a backup method, use it.

If you still cannot verify, contact MedXimity Support. Do not share verification codes with anyone, including coworkers.

What to Do If You Change Phones or Lose Access

If you can’t access attorney account new phone verification, or you need to reset attorney account verification method, use the safest available recovery path.

  1. Try signing in with any backup verification method listed on your account.
  2. If you are already signed in on another trusted device, open Security Settings and update your verification method.
  3. If your firm has an administrator, ask the administrator to review your user access and 2FA options.
  4. If you cannot access any method, contact MedXimity Support for account recovery assistance.

For security reasons, Support may need to verify your identity or firm affiliation before changing account access.

Attorney Users, Staff Users, and Administrator Settings

Law firm accounts may include different user roles. Available settings can depend on your role.

  • Attorney users: Can usually manage their own login security settings unless restricted by the firm.
  • Staff users: May have individual login credentials and separate 2FA requirements.
  • Administrators: May manage firm-level users, permissions, and security requirements.

If you are looking for law firm staff two factor settings, start with your firm’s user management area or ask an administrator to confirm your role. See Manage Law Firm Users and Permissions for related guidance.

Security Tips for Law Firm Account Access

When comparing two factor authentication vs password only, 2FA adds another barrier if a password is guessed, reused, or exposed. It is still important to use careful account practices.

  • Use a unique password for MedXimity.
  • Do not share attorney or staff logins.
  • Remove access promptly when staff roles change.
  • Keep your verification phone, email, or authentication app secure.
  • Sign out on shared or public computers.
  • Review active users and permissions regularly.

These are general account-security practices, not legal advice or a guarantee against unauthorized access.

Related Help Articles

For other MedXimity account tasks, you may also find these resources useful: How to Claim and Verify Your MedXimity Provider Profile, How to Message Your Provider Through the Patient Portal, and How to Update Your Practice Address, Phone Number, and Business Hours on MedXimity.

FAQ: Attorney Account Two-Factor Authentication

Is two factor authentication required for attorneys?

It may be required depending on your firm’s account settings or MedXimity security requirements. If you are unsure, check your Security Settings or ask your firm administrator.

Can law firm staff use different 2FA methods?

Staff users may be able to set their own methods, or the firm administrator may control allowed options. This depends on your account configuration.

What if I no longer have my old phone?

Use a backup method if available. If you cannot sign in, contact your firm administrator or MedXimity Support to review recovery options.

Can I turn off two-factor authentication?

You may be able to turn it off only if your firm or MedXimity does not require it. Because attorney accounts may contain sensitive information, keeping 2FA enabled is recommended when available.

Why does my code keep failing?

The code may be expired, entered incorrectly, or replaced by a newer code. Request a new code, enter it promptly, and check that your authentication app or device time is accurate.

Still Need Help?

If you cannot access your attorney account, cannot receive a verification code, or need help resetting your verification method, contact MedXimity Support. Include your name, firm name, account email, and a brief description of the issue. Do not include passwords or verification codes in your message.

We use first-party cookies to run this site and understand how patients find us. Privacy