Secure Hosted Email with 2FA and app passwords Print

Use the Hosted Email mail portal to configure two-factor authentication for a mailbox. Mail applications that cannot supply a second factor use separate app passwords instead.

Mailbox-portal security, webmail access and your ArkHost Client Area login are separate settings. Do not assume that enabling one protects every sign-in route. If you require a second factor on direct webmail access, ask support to confirm the available sign-in method for your service.

Enable two-factor authentication

1. Open your Hosted Email service in the ArkHost Client Area.
2. Open the App Keys tab.
3. Select Set up 2FA.
4. Sign in with the mailbox address and its current password.
5. Open the mailbox profile settings and enable two-factor authentication.
6. Scan the QR code with your authenticator app, enter the generated code to confirm activation and save any recovery information offered.
7. Test a new portal sign-in before closing your working session.

Create an app password

1. Return to the App Keys tab in the ArkHost Client Area.
2. Select Add App Password.
3. Select the mailbox and enter a recognizable name, such as Work laptop.
4. Create and confirm a unique password.
5. Allow only the services that device needs, such as email, mobile sync, or Calendar and Contacts.
6. Select Add App Password.
7. Enter that password in the mail application instead of the main mailbox password.

Revoke access

Select the bin button beside the app password and confirm it disappears from the list. This revokes that credential without changing the main mailbox password or the other app passwords. Do not assume every existing connection or session is immediately closed: reconnect the application to check that the revoked password is refused. If a device is lost or compromised, contact support about any further session or account recovery steps needed.