Security & 2FA

Password

Manage your password under Settings → Security. Use a long, unique password and a password manager. If you signed up with a social login, you can set a password to enable email sign-in as well.

Two-factor authentication

Two-factor authentication (2FA) adds a second step to sign-in, so a stolen password alone is not enough to access your account. MailSandbox uses authenticator apps (TOTP) such as 1Password, Authy or Google Authenticator.

To enable it:

1. Go to Settings → Security and enable two-factor authentication
2. Scan the QR code with your authenticator app
3. Enter a code from the app to confirm and finish setup
4. Store your recovery codes somewhere safe in case you lose your device

Keep your recovery codes

Recovery codes are the only way back into your account if you lose your authenticator device. Save them in your password manager, not on the same phone.

Active sessions

Signing in from a new browser confirms your password (and 2FA, if enabled) before entering sensitive areas of your account. If you ever suspect unauthorised access, change your password — this protects the account and forces a fresh sign-in.