Turning on two-factor authentication

With two-factor authentication, you need a code as well as your password when you log in. An app on your phone creates that code, with a new one every 30 seconds. Even if someone knows your password, they still can't get into your webmail. In the webmail it's called 2-Factor Authentication.

What do you need?

An authenticator app on your phone, such as Google Authenticator, Microsoft Authenticator, Aegis or the app of your password manager. You can read more about these apps in Two-factor authentication: codes, apps and text messages.

How to turn it on

1. Go to Settings and click 2-Factor Authentication.
2. Tick Activate (1).
3. Click Fill all fields (press Save button to save) (2). The webmail now creates a secret key, four recovery codes and a QR code. A message tells you to scan the QR code and check the code first. Click OK.

4. Open the authenticator app on your phone and scan the QR code (4). Can't scan it? Then type the Secret (2) into the app.
5. Keep the Recovery codes (3) in a safe place, for example in your password manager or on paper. With a recovery code you can still get in if you lose your phone. Each code works once.

6. Type the code the app is showing into the field next to Check code (1) and click Check code. You'll see the message Code OK.
7. Click Save (2). This button only works once the code has been checked.

From now on, the webmail asks for a code when you log in. See Logging in with two-step verification.

Please note: two-factor authentication in the webmail only applies to the webmail. Your email program and your phone still log in with just your password. So make sure you also use a strong, unique password. You set up two-factor authentication for My WebOké separately, see Setting up two-factor authentication in My WebOké with an authenticator app.

Turning it off again

Go to 2-Factor Authentication, untick Activate and click Save.