Set Up Two-Step Verification

If enabled for a domain by the system administrator, two-step verification adds an extra layer of protection to your vBoxxConnect account. It ensures that only YOU have access to your account, even if someone knows your password.

When protected with two-step authentication, logging in to webmail requires two authentication methods: your vBoxxConnect password and a verification code that is available only to you. This code can be generated from an app, such as Google or Microsoft Authenticator apps available for iOS and Android, or delivered via a recovery address set up for your account. If you open your email through a mobile or desktop email client, such as Microsoft Outlook or Apple Mail, you also need to use 'application passwords' when setting up those accounts. (If you already have an email client set up, you will need to log in again with an application password after two-step verification is set up.)

To set up Two-Step Authentication, navigate to More > Settings > Account > Two-Step Authentication.

Once you click the Enable button, you will go through the process of setting up two-step authentication. The steps you go through depend on the type of authentication you choose: Authenticator App or Recovery Address. The fields you see are as follows:

• Verification Methods - Here, you select the type of additional verification you want to use: Authenticator App (e.g., Google or Microsoft Authenticator) or recovery address. Whichever method you choose, you must provide a recovery email address. This is necessary even if you are using an Authenticator app, for example, in case there are issues with the app, such as the inability to scan a QR code, for which an authentication code may need to be emailed to you.
• Recovery Email Address - This is an alternative email address, other than the one you use, that can receive authentication codes. If you already have one set for your account, it will be displayed here. If you wish, you can, however, change this to a separate address. You will need to re-enter this address to confirm it on the next line.
• Verification Code - If you are using the Authenticator App method, you will be asked to scan a QR code with the app you want to use for authentication and then enter the code displayed by the app. If you are using the recovery email address, you need to enter the verification code emailed to that address.

Setting Up Two-Step Verification Using a Recovery Email Address

Using a recovery email address means that every time you sign in to webmail, a verification code is sent to the recovery email address you specify. You then enter that code on the vBoxxConnect login screen for your account before gaining access to webmail. To get started with using Two-Step with a recovery address, do the following:

1. Select Recovery Email Address in the Verification Methods dropdown.
2. Enter and confirm the recovery email address that will be used to retrieve the verification code. (This email address will be automatically used as a recovery email address also used for resetting your password.)
3. Click Next.
4. Wait until the verification code is sent to that address and then enter the 6-digit code once received.
5. Click Verify to confirm the verification code and complete the setup of two-step verification.

Setting Up Two-Step Using an Authenticator App

Using an Authenticator app, such as Microsoft Authenticator, means that every time you log in to webmail, you retrieve the verification code from the Authenticator app of your choice. You then enter that code on the vBoxxConnect login screen for your account before gaining access to webmail. To get started with an Authenticator for Two-Step, follow these steps:

1. Install an Authenticator app, such as Google or Microsoft Authenticator, on your phone or computer. (In this article, we show how to set up two-step verification with Google Authenticator on your mobile device.)
2. Select Authenticator App in the Verification Methods dropdown.
3. Enter a recovery email address and confirm it to be used as an alternative method to retrieve the verification code. If your Authenticator app is not accessible, the verification code will be sent to this address. (This email address will be automatically used as a recovery email address also used for resetting your password.)
4. Click Next. On the next page, a QR code will appear.
5. Open the Google Authenticator app. Click "BEGIN SETUP" if you haven't used it for other accounts yet, or use the plus sign (+) to add a new token.
6. Select Scan QR code to use your phone's camera to scan the code displayed in vBoxxConnect. A new token will be added to Google Authenticator.
7. Enter the 6-digit code from the token into vBoxxConnect.
8. (If you can't scan the QR code, click "Can't scan the QR code?" in vBoxxConnect. In the Authenticator app, choose to create a new token via manual entry. In the Account field, enter a token descriptor, such as the username of your account. In the Key field, enter the secret key displayed in vBoxxConnect. Then enter the 6-digit code from the token into vBoxxConnect.)
9. Click Verify to confirm the verification code and complete the setup of two-step verification.

Logging in with Two-Step Verification

To log in to vBoxxConnect, enter your email address and password. Then enter the six-digit verification code sent to your recovery email address or to the token displayed in the Authenticator app.

Configure third-party applications with application passwords

Keep in mind that once two-step authentication is set up for your account, you will also need to reconfigure third-party applications or email clients using the "application passwords" automatically generated and displayed on the two-step authentication card in your account settings. Different passwords are provided based on the protocol type used. For example, an EAS password can be used for each mobile email client. Passwords can be used multiple times, across multiple clients. They can also be reset/renewed. Make sure to use the correct password for the corresponding protocol.