Multi-Factor Authentication

Getting StartedLast updated:

Multi-factor authentication (MFA) is required for all GEMA accounts. After entering your email and password, GEMA sends you to a second verification step before granting access.

Verifying Your Identity at Sign-In

The Multi-Factor Authentication page shows the heading Multi-Factor Authentication and the prompt Please verify your identity using one of the methods below.

If you have enrolled more than one method, a Choose verification method selector appears at the top. Select the method you want to use.

Authenticator App

  1. Open your authenticator app (Google Authenticator, Authy, or similar) and find the GEMA entry.
  2. Enter the 6-digit code shown in the app into the Verification Code field.
  3. Select Verify.

Biometric Authentication

If your device supports fingerprint or face recognition and you have enrolled biometrics, GEMA starts the biometric prompt automatically. If it does not start on its own, select Authenticate. Follow your device’s biometric prompt to confirm your identity.

Email Verification

  1. Select Send Email Code to send a one-time code to your registered email address.
  2. Enter the 6-digit code from the email into the Email Verification Code field.
  3. Select Verify Email.

If the email does not arrive, select the small Resend code link below Verify Email. To keep your inbox from filling up, the link is unavailable for about 30 seconds after each code is sent and shows the remaining wait in parentheses — for example Resend code (24s). When the countdown reaches zero the link becomes available again.

If a resend cannot be delivered, the green Verification code sent to your email address confirmation is replaced by a message explaining what went wrong, and the Resend code link stays available so you can try again right away. If you ask for a code too soon, you instead see a note that a code was sent recently along with the remaining wait.

SMS Verification

  1. Select Send SMS Code to send a one-time code to your registered phone number.
  2. Enter the 6-digit code from the text message into the SMS Verification Code field.
  3. Select Verify SMS.

A Resend code link appears below Verify SMS with the same short wait between requests. If a code cannot be sent, a message explains what went wrong and you can try again right away.

Using a Recovery Code

If you cannot access any of your enrolled methods, select Use recovery code instead at the bottom of the page. Enter your 8-character recovery code and select Verify Recovery Code.

Save your recovery codes. Recovery codes are shown once during enrollment. Store them somewhere safe — a password manager or printed copy in a secure location. Each code can only be used once.

Setting Up MFA for the First Time

If no MFA methods are enrolled on your account, GEMA redirects you to the Set Up Multi-Factor Authentication page automatically after you sign in.

Choosing a Method

Select one of the available methods to begin setup:

Method How it works
Authenticator App Generates time-based 6-digit codes in an app like Google Authenticator or Authy.
Biometric Authentication Uses your device’s fingerprint or face recognition. Requires Chrome, Safari, or Edge.
Email Verification Sends one-time codes to your registered email address.

Setting Up an Authenticator App

  1. Select Set Up Authenticator.
  2. Scan the QR code displayed on screen with your authenticator app.
  3. Enter the 6-digit code the app shows into the Verification Code field.
  4. Select Verify & Complete Setup.
  5. GEMA shows your Recovery Codes. Copy and store these codes securely — a successful copy shows an in-app confirmation — then select Continue to Application.

Setting Up Biometric Authentication

  1. Select Set Up Biometrics (only visible if your browser supports WebAuthn).
  2. Follow your device’s biometric prompt to register your fingerprint or face.
  3. GEMA confirms setup and may show recovery codes. Select Continue to Application.

Setting Up Email Verification

  1. Select Set Up Email.
  2. Select Send Verification Code. A code is sent to your registered email address.
  3. Enter the 6-digit code in the Verification Code field.
  4. Select Verify & Complete Setup.
  5. Copy any recovery codes shown, then select Continue to Application.

If the code does not arrive, select Resend code in Step 1. It is unavailable for about 30 seconds after each send and shows the remaining wait, and a note on screen tells you how long before you can request another code.

Adding Additional Methods

After completing setup for one method, you can select Add Another MFA Method to enroll a second or third method, giving you backup options if your primary method is unavailable.

Changing MFA Methods in Settings

Open Settings and find the multi-factor authentication section to add or remove methods on an existing account.

When you add Email Verification, the Setup Email Verification dialog shows your registered email address. Select Send Code, enter the 6-digit code in the Verification Code field, then select Verify & Enable.

If the code does not arrive, select Resend code beneath the code field. As on the sign-in page, it is unavailable for a short wait — about 30 seconds — after each code is sent and shows the remaining seconds in parentheses.

When You Can Remove a Method

Because MFA is required, you can never remove your last remaining method. Each enabled method’s card shows a Disable button only while two or more methods are enabled. When just one method is left, its card replaces the button with Cannot disable - MFA required and this is your only method.

The cards update as soon as an add or remove finishes. Enable a second method and the first card immediately gains a Disable button. Remove one of two methods and the remaining card immediately switches to the message above — no page refresh needed.

Regenerating Recovery Codes

When recovery codes are already active, the Recovery Codes card shows Regenerate Codes.

  1. Select Regenerate Codes.
  2. Review the warning that regenerating invalidates your existing codes immediately, then confirm.
  3. GEMA shows your new recovery codes once. Select Copy All Codes to copy them, or write them down, then select I’ve Saved My Codes.

A successful copy shows an in-app confirmation. If regenerating or copying fails, GEMA shows an in-app error notification so you can try again.