Two-factor authentication, also known as 2FA, strengthens your email account's security by adding a verification step at sign-in.

Once enabled, your email address and password alone are no longer sufficient to access your mailbox. You will also need a verification code generated by an authentication app on your phone.

This additional protection helps reduce the risk of unauthorized access if your password is compromised or disclosed.

Important: after enabling 2FA, you will need your authentication app to generate the security code requested at sign-in.

021. Sign in to Webmail

Open the Webmail interface and sign in with your email address and password.

Webmail sign-in screen with email address and password fields

After signing in, scroll down to find "Two-Factor Authentication"

Two-factor authentication settings in Roundcube

032. Enable two-factor authentication

Click "Set up two-factor authentication"

Configuring two-factor authentication in Roundcube

A QR code should appear. It links your email account to your authentication app.

You can also set it up using the account and key displayed on screen.

Webmail two-factor authentication setup key

043. Set up the authentication app

Open the authentication app on your smartphone.

Add a new account and choose the option to scan a QR code. Scan the QR code displayed in Webmail.

Once the account is added, the app will automatically generate a temporary security code.

Tip: keep the recovery information provided during setup in a safe place. You may need it to recover account access if you lose access to your phone.

054. Confirm activation

Enter the code currently displayed by your authentication app in Webmail, then confirm activation.

Enabling two-factor authentication in Webmail

If the code is correct, two-factor authentication is enabled for your mailbox.

065. Test sign-in

To check the setup, sign out of Webmail and sign in again.

After entering your email address and password, you will be asked for an additional verification code.

Open your authentication app and enter the displayed code.

If accepted, you can access your mailbox normally.

07Remember

2FA adds another layer of protection to your mailbox. Once enabled, you will need your authentication app for new sign-ins that require verification.

Do not remove your mailbox's account from the authentication app until you have configured another recovery method.

If you lose or change your phone

If you change your phone or lose access to your authentication app, use the recovery methods available for your account.

If no recovery method is available, contact your email provider or administrator to check whether two-factor authentication can be reset.

Enabling 2FA is an important step toward a more secure mailbox.

Share

Reference documentation:

Sources accessed on October 11, 2026. Available features depend on your hosting version and options.