Two-factor authentication (2FA) asks for a code from an authenticator app after your password. SipherMail uses time-based one-time codes (TOTP), which work with common authenticator apps.
Turn it on#
- Go to Settings > Security & 2FA.
- Open the 2FA / MFA tab.
- Choose Enable 2FA.
- Scan the QR code with your authenticator app. If you cannot scan, use the secret shown under Or enter this secret manually.
- Enter the code under Enter verification code.
- Choose Verify & Enable.
- Save your backup codes, then confirm with I’ve saved my backup codes.
Backup codes#
Backup codes let you sign in if you lose your authenticator. Each code works once. You can copy or download them when they are shown. Keep them somewhere other than the phone that holds your authenticator.
Turn it off#
- Open Settings > Security & 2FA > 2FA / MFA.
- Choose Disable 2FA.
- Enter your current password in the confirmation box.
If you sign in with a social account, the dialog tells you to manage 2FA through that provider.
Organisations#
An organisation can require 2FA for all members. If yours does, you are sent to this page and cannot use your inbox until 2FA is on.
Different from recovery codes#
The 2FA tab also has Recovery Codes, which reset your password if you lose access to your email. They are separate from 2FA backup codes. See Recovery email and passwords.
Related: Sessions and devices.