Two-Factor Authentication (2FA) for the Control Panel

Two-factor authentication is required to sign in to the AtrioMail control panel. It applies to the control panel only. Webmail and mail apps (Outlook, Thunderbird, your phone's mail app) sign in with the mailbox's own email address and password.

What is 2FA?

Signing in to the control panel takes two things:

• Something you know: your password
• Something you have: a code from your authenticator app, or a code we send to your email

Even if someone learns your password, they cannot get into the control panel without the second code.

Your two options for the code

• Authenticator app (recommended): an app on your phone shows a 6-digit code that changes every 30 seconds
• Code by email: we send a code to the email address on your account

Set up an authenticator app

1. Sign in to the control panel
2. Open Two-Factor Auth from your account menu (your avatar at the top right)
3. Install an authenticator app if you do not have one, for example:
   • Google Authenticator
   • Microsoft Authenticator
   • Authy
   • 1Password
4. Scan the QR code with the app
5. Enter the 6-digit code the app shows to confirm
6. Save your recovery codes somewhere safe

Signing in

1. Enter your email address and password
2. Enter the 6-digit code from your authenticator app, or the code sent to your email
3. You are signed in

Recovery codes

• Save them somewhere safe, such as a password manager
• Use one if you lose access to your authenticator app
• Each code works once
• You can create a new set from the Two-Factor Auth page with New recovery codes. The new set replaces the old one

Best practices

• ✅ Use an authenticator app
• ✅ Save your recovery codes
• ✅ Keep your phone locked and up to date
• ✅ Turn on 2FA for your other important accounts too
• ❌ Never share a code with anyone. We will never ask you for one
• ❌ Don't keep recovery codes in a screenshot on the same phone

Troubleshooting

Lost your phone:

1. Sign in with a recovery code
2. Set up your authenticator app again on the new device
3. No recovery codes left? Contact support

Code not working:

• Check your device's time is set automatically (codes depend on the correct time)
• Wait for the next code and try again
• Use the code sent by email instead, or a recovery code

New phone:

• Install your authenticator app
• Transfer your accounts if the app supports it, or set it up again from the Two-Factor Auth page

Recommended authenticator apps

Google Authenticator: simple and reliable, free

Microsoft Authenticator: cloud backup, free

Authy: multi-device sync and cloud backup, free

1Password: password manager with built-in codes, paid

Need help?

Having trouble with 2FA? Contact support through the live chat, or contact support if you cannot sign in at all.