Activate dual authentication (2FA) on an LWS mailbox in webmail

Procédure

Objective

This documentation explains how to activate double authentication (2FA) on your LWS mailbox from Roundcube webmail.

Once this security has been activated, your password alone will no longer be enough to log in: you will also be asked to enter a temporary code displayed on your phone. This helps protect your e-mail address against unauthorised connections.

Relevant to this documentation

This procedure is intended for users who :

• use an e-mail address managed by the LWS Panel
• access their e-mail from Roundcube webmail
• have an e-mail address included with an LWS domain name or shared hosting.

This documentation does not concern

This procedure does not cover :

• configuring e-mail software such as Outlook, Thunderbird or Mail
• activating dual authentication on your LWS customer space
• recovering access to a lost phone after activation

Before getting started

Double authentication, also known as 2FA, adds a second check when you connect to your email.

Specifically

• you first enter your mailbox password
• then enter a temporary 6-digit code
• This code is generated by an authentication application installed on your phone.

Even if someone knows your password, they won't be able to connect without this temporary code.

Prerequisites

Before you start, make sure you have :

• the password for the e-mail address concerned.
• access to your LWS webmail
• a smartphone to hand
• an authentication application already installed on your phone, such as :
  • Google Authenticator
  • Microsoft Authenticator

Steps to activate dual authentication

1. Connect to your LWS webmail

Open your Internet browser, then access your webmail.

The webmail address (1) will look like this: https://mail.votredomaine.fr

Replace yourdomain.fr with your own domain name.

Once on the login page (2) :

• enter your e-mail address
• enter the password for this mailbox
• click on the login button.

2. Open the webmail settings

Once you have logged in to your mailbox, click on the Settings icon (1) represented by a cogwheel.

In the webmail side menu, click on Two-Factor Authentication (2FA ) (2).

3. Start 2FA activation

In the Activate 2-factor authentication section :

• click on Add an authentication method (1)
• Select the desired method (Email or TOTP mobile application)

Suggested authentication methods:

• Mobile application: Use a mobile authentication application to connect to your email accounts. The application will generate a 6-digit code that you will need to enter to validate the connection.
• Email address: Use your email address to receive a unique verification code. A 6-digit code will be emailed to you to validate the connection.

Method 1: 2FA via mobile application.

To activate 2FA authentication via mobile :

- Select the "Mobile application (TOTP)" option

- Enter the password for your e-mail address.

- then click on the "Confirm" button

a QR code will appear on the screen.

- Scan the QR code with an authentication application.

The application will start generating temporary 6-digit codes.

- Enter the verification code once, then click on "Save" to validate the procedure and definitively activate dual authentication via mobile.

Method 2: 2FA via email address.

To activate 2FA authentication via an email address:

- Select the "Email" option

- Enter the password for your email address.

- then click on the "Confirm" button

- Fill in the e-mail address that will receive the security code, then click on "Send code".

- Retrieve the code from your e-mail address.

- Return to webmail and enter the code before clicking on the "Save" button .

Delete a 2FA authentication method

- Select the"delete" button for the method you wish to delete.

- Enter your e-mail address password.

- Then click on the "Confirm" button

This deletes the selected method. To remove 2FA authentication completely, you must no longer have any authentication methods listed.

Check that activation has worked properly

To confirm that everything is in place:

1. Log out of webmail.
2. Reconnect with your e-mail address and password.
3. Check that you are asked for a temporary code after entering the password

What you should see

If activation was successful :

• you can no longer access your mailbox using your password alone
• Webmail also asks you for a code generated on your phone.
• Entering the valid security code allows access to the email address.

Activation takes effect as soon as the procedure has been validated.

Common problems

The code generated by the application is rejected

Check that the time on your smartphone is set automatically.
A time difference may invalidate the code.

Also try :

• wait for a new code to be displayed ;
• re-enter the new code immediately;
• check that you have added the right account in the application.

I have not received the code by e-mail

Check :

• the Junk Mail / Spam folder ;
• that the e-mail address you entered is correct ;
• that you still have access to this address.

If necessary, repeat the operation with another accessible e-mail address.

I no longer have access to my phone

If you have registered another dual authentication method, use it to log in.

If you no longer have access to any of the registered methods, you will need to request assistance from LWS support to regain access to your email.

Need help?

If you encounter any difficulty during activation or if you get stuck after activating it, contact LWS technical support from your customer area by opening a support ticket.

Conclusion

Dual authentication allows you to better protect your LWS mailbox by adding verification from your phone in addition to your password.

Once activated, remember to retain access to your authentication application to avoid any blockages when you log on again.