Two-factor authentication protects the webmail account with a time-based one-time code in addition to the password.

Quick setup

Turn on Activate. The plugin automatically creates a Secret, four recovery codes, and the corresponding QR code.
Scan the QR code with a TOTP-compatible app. Alternatively, enter the displayed Secret manually in the app.
Enter the current six-digit code from the app into the six fields and select Verify code.
Save becomes available only after successful verification. Save the configuration afterward.

Secret and QR code

A Secret must contain at least %d Base32 characters. Regenerate secret and QR code replaces the previous Secret; scan the new QR code again with the authenticator app. Regenerate QR code becomes available only after the Secret has actually changed.

Recovery codes

The four recovery codes are single-use emergency codes. Store them separately from the password and preferably outside the webmail account. A recovery code becomes invalid after use.

Trust this device

During login, you can trust the current device for the duration selected in Settings. Use this option only on a private and protected device.

Deactivation

Turn off Activate, confirm the change with a current code, and save. The Secret, QR code, and recovery codes are then removed from Settings.

Security notes

Never share the Secret, QR code, or recovery codes with anyone.
Verify a code before saving so that you do not lock yourself out of the account.
If the authenticator device is lost, use a recovery code.

Username
Password

W23 / SiDEx GmbH | Webmail Login