---
title: "How to Enable and Manage Two-Factor Authentication (2FA) in Mailercloud"
description: "This guide explains how to enable 2FA, use backup codes, and manage subuser and team-wide authentication settings."
url: https://help.mailercloud.com/en/articles/168-how-to-enable-and-manage-two-factor-authentication-2fa-in-mailercloud
collection: "Getting started with Mailercloud"
updated: 2025-12-04
language: en
---

# How to Enable and Manage Two-Factor Authentication (2FA) in Mailercloud

This guide explains how to enable 2FA, use backup codes, and manage subuser and team-wide authentication settings.

Two-factor authentication (2FA) adds an additional layer of security to your Mailercloud account. When enabled, you must enter a verification code—along with your password—each time you log in. This ensures only authorized users can access the account.

Mailercloud now supports **app-based authentication**, allowing you to generate secure login codes using trusted authenticator apps such as **Google Authenticator**, **Microsoft Authenticator**, or **Authy**.

## **Where to Enable 2FA**

You can enable 2FA from your account settings:

**Account → Security → Two-Factor Authentication**

Once you click Enable, a setup popup will appear.

![](https://staticfiles.gleap.io/gundefined/OH4qOkYEvz8dGwi2mYTQh9b80gFTw6MU9l1y2jfgFjYUeYxAlq6tulO8Tjjvp6f7ZoZYBSHNKMv.png)

### **Step 1: Scan the QR Code**

-   Open your authenticator app.
    
-   Scan the QR code displayed on the screen.
    
-   Enter the 6-digit authentication code shown in the app.
    

### **Step 2: Manual Setup (Optional)**

If you prefer manual entry:

-   Enter the key in your authenticator app.
    
-   When prompted, select Time-based as the key type.
    

Once verification is completed, you will receive your backup codes.

## **Backup Codes**

Backup codes act as a fallback when you cannot access your authenticator app.

-   Each code can be used only once.
    
-   Codes are shown only one time, so save them securely.
    
-   You may copy, download, or print the codes for safekeeping.
    
-   If you lose or use them all, you can generate new backup codes anytime from the Security tab.
    

![](https://staticfiles.gleap.io/gundefined/nmmZoPFP2cjb04UqVi5trqPThPR4B89fucPf4l2qLPAfwvKUKZrwvjsbOXKKOwykwPqvOK116ES.png)

## **Subuser Management**

Account owners can manage 2FA settings for each subuser individually.

Go to:

**Account → Settings → Users**

From here, owners can:

-   View 2FA status for each subuser
    
-   Enable or enforce 2FA for specific subusers
    

![](https://staticfiles.gleap.io/gundefined/NCxPUVK9dJ48qm4esx8jJaj5arR02srFa1F8URLaBwM9xRwzuwiK6zmQzNl13bz4OHJoSgSIIww.png)

## **Team-Wide 2FA Activation**

To strengthen your organisation’s security, owners can enforce 2FA for all subusers.

Once team-wide 2FA is enabled:

-   Subusers will see a mandatory setup popup during their next login.
    
-   They can skip the setup up to 3 times.
    
-   After 3 skips, setup becomes mandatory and they cannot log in without completing 2FA.
    

![](https://staticfiles.gleap.io/gundefined/GADfCCyKana7P4CeIG50o5KwF1fPmoqOrGUb40jiJJ4Iy7r70WkPRk5y1EhFdkYSyAuSMBY1F6C.png)

## **Logging in with Two-Factor Authentication**

After enabling 2FA:

1.  Enter your username and password as usual.
    
2.  You will be redirected to the 2FA verification page.
    

On this screen, you can:

-   Enter the code from your authenticator app, or
    
-   Use a backup code if you no longer have access to your app
    

You may also select Skip for two weeks.  
When enabled:

-   You will not be prompted for a 2FA code on that device and browser for the next 14 days.
    

![](https://staticfiles.gleap.io/gundefined/yDgk8W3KqFFkUgFQpXTATMeilf09jxUrjhaD2sEBMeoHXOj4SJvjPtbLPoHDSXq74NJ6A0gcgIG.png)

## **Activity Logs**

Account owners can view 2FA-related activities from:

**Logs → Activity Logs**

This helps you track login attempts, security updates, and changes made by users.

After 2FA is enabled:

-   You must enter a valid authentication code to change your password or delete your account.
    
-   This additional step ensures enhanced account protection.