As your email address becomes tied to more of the systems you rely on, securing it matters more than ever. A strong, unique password is essential, but extra protection helps. This FAQ answers common questions about two enhanced security features for webmail: two-factor authentication and app-specific passwords.
About enhanced email security
OpenSRS webmail offers two complementary security features. Two-factor authentication (2FA) protects access to your webmail by requiring a second verification code at sign-in. App-specific passwords protect access through email clients by giving each app its own revocable password. You can use either feature on its own or both together.
Do I need to set up both 2FA and app-specific passwords?
No. The two features are independent. You can use one without the other, or use both for extra security. App-specific passwords secure access from email clients you have set up, while 2FA secures your webmail sign-in.
How do I change the authentication device or phone number for 2FA?
To change your 2FA method, sign in, disable 2FA, and then re-enable it with the new device or phone number.
I lost my 2FA token. How do I get access?
If you lost, reset, or replaced your phone before you were able to disable and reconfigure 2FA, contact your reseller to bypass your 2FA. Once it is bypassed, you can set up 2FA again.
I set up app-specific passwords and now I cannot access email on my phone. What happened?
Once you set up app-specific passwords, each app, such as your phone's mail app, needs the specific password generated for it. Sign in to your account, go to your password settings, and create a new app password for your mail app.
Next steps
Questions? Contact OpenSRS Support.
How helpful was this article?
Thanks for your feedback!
Do you still need help? If so please submit a request here.