A two-factor authenticator (2FA) is a small mobile or browser app that produces a fresh 6-digit code every 30 seconds. Mailpro asks for that code right after your password, so even a leaked password isn’t enough to break in.

In short: 2FA = something you know (password) + something you have (the code on your phone). Both are required to sign in.

How an authenticator works

When you turn 2FA on, Mailpro generates a secret key — usually shown as a QR code — that you scan into your authenticator app. The app then derives a TOTP (time-based one-time password) from that secret plus the current time. Mailpro runs the same calculation on its side and accepts the code if they match.

Popular authenticator apps

AppPlatformsNotes
Google AuthenticatoriOS, AndroidSimple, no account needed
Microsoft AuthenticatoriOS, AndroidPush notifications, cloud backup
AuthyiOS, Android, desktopMulti-device with encrypted sync
1Password / BitwardeniOS, Android, desktop, browserStored alongside your passwords

Why use 2FA on Mailpro

Your Mailpro account holds your subscriber lists, sender reputation and billing details. 2FA blocks the majority of password-based attacks, including phishing and reused-password breaches.

Related questions

Ready to set it up? See how to enable 2FA on Mailpro. Worried about losing your phone? Read do I need my phone for 2FA.

Add a second lock to your Mailpro account

Install an authenticator app, then follow double authentication setup. Activation takes under two minutes.

Previous question

   

Next question

You might also be interested in:

MSISDN: Definition and Format (CC+NDC+SN)

MSISDN stands for Mobile Station International Subscriber Directory Number. It is the worldwide format your SMS gateway uses to identify...

Read more

What Is Graymail and How Is It Different From Spam?

Graymail is the email category that sits between truly wanted messages and outright spam: newsletters, promotions, alerts and notifications that...

Read more

What is the +1 Gmail trick? (and why you shouldn’t rely on it)

The “+1 Gmail trick” (also called the “Gmail plus trick”) uses a small feature in Gmail: you can add a...

Read more

What is DMARC? Policies, alignment and safe sending

DMARC (Domain-based Message Authentication, Reporting and Conformance) is the shield that protects your domain from spoofing and phishing. It combines...

Read more

What Is a Monitoring DMARC Policy?

A monitoring DMARC policy is the safest way to start with DMARC. You publish a TXT record with p=none, which...

Read more