Two-step verification for your Mailamber account
In short
In the account area, Security tab: enter your password, scan the QR code with an app such as Google Authenticator, Microsoft Authenticator or Aegis, confirm with the 6-digit code and save the 10 recovery codes. From then on, the website and the apps ask for the code after your password.
Two-step verification protects your Mailamber account: on top of your password, you need a 6-digit code that changes every 30 seconds and that only your phone knows. Even if someone found out your password, without that code they couldn’t sign in or touch your plan, licenses, devices and synced settings.
It’s optional and free on every plan, but we recommend it to everyone.
How do I turn on two-step verification?#
You need an authenticator app on your phone: Google Authenticator, Microsoft Authenticator, Aegis, 1Password, Bitwarden, Authy or any app that supports TOTP codes.
- Sign in to the account area on the website and open the Security tab.
- Start the setup and enter your current password for the Mailamber account.
- Open your authenticator app, add a new account and scan the QR code. If you can’t scan it, choose manual entry and type the setup key shown below the code.
- Type the 6-digit code shown in the app into the website to confirm.
- Save the 10 recovery codes: you can download them as a .txt file or copy them. They are shown only once.
- Done: verification is on and you get a confirmation email.
How do I sign in once it’s on?#
It works the same way on the website, in the Windows app and in the Android app:
- enter your email and password as usual;
- when asked, type the 6-digit code from your authenticator app;
- if you don’t have your phone at hand, use one of your recovery codes instead.
On the website you can tick “Remember this browser for 30 days”: we won’t ask for the code on that browser for a month. The option isn’t available in the apps; on the PC, if you sign in with “Stay signed in on this PC (otherwise you'll sign in at every launch)”, your session stays open between launches anyway.
How do recovery codes work?#
They are 10 codes in the XXXXX-XXXXX format that you can use instead of the app code when you don’t have your phone. Each one works only once; when you use one, we email you, so if it wasn’t you you’ll know right away.
If you’ve used several, or you’re worried someone has seen them, generate new ones from the Security tab: you need a valid code, and the old ones stop working immediately.
How do I turn it off?#
From the Security tab of the account area: enter your password and a code (from the app or a recovery code). Verification is turned off, remembered browsers are forgotten and you get a confirmation email.
Problems with codes#
Why is my code rejected?#
It’s almost always your phone’s clock. Codes depend on the exact time and are accepted with a tolerance of about 30 seconds: if your clock is further ahead or behind, the code won’t work. Turn on automatic date and time in your phone’s settings and try again with a fresh code.
Also check that you’re reading the right entry in the app (the one called “Mailamber” with your email), and remember that each code can be used only once: if you’ve just used it, wait for the next one.
Why are my attempts blocked?#
After 10 wrong codes within 15 minutes, we block attempts for 15 minutes, even with a correct code. If this happens while signing in, we send you an email: it means someone entered the correct password. If it wasn’t you, change your account password right away.
“Sign-in expired”: what does it mean?#
After entering your email and password you have 5 minutes to type the code. If that time runs out, or you get it wrong too many times, you need to start again from your email and password.
Frequently asked questions#
I lost my phone: how do I get in?#
Use one of your recovery codes instead of the app code. Once you’re in, turn verification off and back on with your new phone, or generate new codes.
I lost both my phone and my recovery codes: what do I do?#
Write to support@mailamber.app from your account’s email address (or open a ticket, if your plan includes it). After verifying your identity, support can reset two-step verification; you’ll get an email when that happens. You can then turn it back on.
I’m changing phones: do I have to start over?#
Many authenticator apps (Microsoft Authenticator, 1Password, Bitwarden, Authy, Aegis with backups) move your accounts to the new phone. If yours doesn’t, while you still have the old phone, turn verification off and on again from the Security tab and scan the QR code with the new one.
What happens to remembered browsers if I change my password?#
They’re all forgotten: both when you change your password in the account area and when you reset it with Forgot password. We’ll ask for the code again the next time you sign in.
Does two-step verification change anything for my mailboxes?#
No. It only concerns signing in to your Mailamber account. Mailbox passwords and Gmail or Microsoft tokens stay encrypted on your device and never reach our servers.
What data do you store for two-step verification?#
The bare minimum: the encrypted secret key, recovery codes only as an irreversible fingerprint, and usage dates. The details are in the privacy policy.