Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

This page allows setting new security levels to all MailUp accounts.

Two-factor authentication

Two-factor authentication (2FA) adds an additional layer of security to the authentication process by making it harder for attackers to gain access to MailUp platform.

Two-factor authentication (also known as two-step verification) is associates a security code delivered through a mobile device to the classic account password. Once activated, when first entering in the platform, users will be asked to scan the QR code on the login page and enter a verification code generated by an application installed on a device in their possession. To use this option, users will need to download the Google Authenticator app.

Since then, during the login MailUp will ask your username and password as usual. A second page will then be displayed asking to enter a verification code received on the associated mobile device.

The Two-factor authentication is by default disabled. The administrator accounts can enable the option:

  • for all users
  • for certain users
    • by looking for them manually in the search bar
    • by selecting all users and excluding the one you want to disable the option for.

When a user logs in for the first time after 2FA has been enabled at a user level, MailUp will ask to follow this 3 steps:

  1. Download Google Authenticator app on your mobile device.
  2. Open Google Authenticator app and add a new website: it will ask you to scan the QRcode.
  3. Enter the numerical code shown in the app.

...

2FA is essential to web security because it immediately neutralizes the risks associated with compromised passwords. If a password is hacked, guessed, or even phished, that’s no longer enough to give an intruder access: without approval at the second factor, a password alone is useless.


Set up two-factor authentication to enhance your account's security. With two-factor authentication enabled in MailUp, you need your login credentials and a one-time passcode to log in to your account. This passcode is generated by the Google Authenticator app.

Setup for 2-factor authentication

1.Follow the path: Settings>Advanced settings>User permissions>Account security. If you can not see the page please get in touch with platform Administrator to get the permission the access.

Image Added

2.When you activate the 2 Factor Authentication toggle, you will see two options.


  • Enabled for all users: You can activate 2 Factor Authentication for all users. Please, inform the users before activating 2 Factor Authentication for all users. 
  • Enable for some users: You can activate 2 Factor Authentication for a specific user. If you will activate 2 Factor Authentication for a user except you, please inform the user. 

Image Added

3. Download Google Authenticator. For iPhone please click here.  For Android please click here.


4. When you login after you activate the 2 Factor Authentication, first you will enter the username and password then you will scan the QR-code via Google Authenticator and enter the one-time passcode that Google Authenticator gives you. When you click Authenticate you will login to the platform.

Image Added

5.For the next login you will just open Google Authenticator and take the one-time passcode. You will not scan the QR-code again.

Image Added

Don't forget! 2FA does something that’s key to maintaining a strong security posture: it actively involves users in the process of remaining secure, and creates an environment where users are knowledgeable participants in their own digital safety. 

Password management

Each administrator can set up user password expiration policies that may also include:

...

Info
titleInfo | Access to Password Management Page

You need to have permission (to access the Password Management page. If you can not see the page, please get in touch with your platform administrator to give you the permission to access.


Info
titleHow to reset two-factor authentication

In case a device connected to a MailUp user is no more available, the 2FA can be reset from the “User permissions” page by selecting “Reset two-factor authentication” in the Actions available for an existing user. At the next login, this user will be asked to associate another device with a QR code.

...