Description
Mailprotector supports Multi-factor Authentication (MFA) for unlocking a message in Lockbox or releasing a held outbound email within Shield Ctrl.
In addition to Shield MFA for certain sensitive actions, Mailprotector recommends using Multi-factor Authentication in the M365 tenant to prevent unauthorized access to your account(s).
Verification Methods
The Security Checkpoint now accepts three kinds of verification:
- An SMS text message that includes a code for use in Shield.
- An authenticator app such as Google Authenticator, Authy, or 1Password. You scan a QR code once, then enter the rotating 6-digit code it shows you.
- A passkey, which uses your device's own sign-in like Touch ID, Face ID, Windows Hello, or a security key. There's nothing to type and nothing a scammer can trick out of you.
Enable Multi-factor Authentication
Sign in to Shield, click on the menu in the upper-right corner, and choose Security. The Security Tools page will offer choices for Multi-factor Authentication. Click Enable to begin setup.
SMS Text
Click on Add.
Choose your country or region, enter your mobile number, and click Next.
Enter the 6-digit code sent to your mobile device and click Verify.
Authenticator App
Visit the app store for your mobile device to download and configure an authenticator app. Microsoft Authenticator and Google Authenticator are common authenticators, but password managers like 1Password can also include an authenticator. Choose an app that's right for your needs.
Passkey
Use your device's biometrics or a security key.
MFA is now enabled for Shield features, such as Lockbox and releasing held outbound messages.
This is separate from MFA for the Microsoft account login to Shield.
Shield Admins and User Security
Shield Admins can manage these methods for the people they support. From the View Users page, click the vertical ellipsis and choose Security to see which methods someone has set up, with sensitive details hidden. One option can be removed as needed. Or, if a person is locked out or replacing a lost device, all methods can be reset at once, and a confirmation screen shows exactly what will be cleared first.
Related to
Updated