In the Webmail, you will be prompted to enter the MFA code in a new pop-up window.
[](https://wikidev.emailarray.com/uploads/images/gallery/2026-06/JAnimage.png)When logging into the User Panel, if you have MFA enabled for your mailbox, you must add at the end of the password the 6-digit code provided by the app on your phone. For example, if your password is **T9D3K!px** and the 6-digit code is **189 145**, you must enter **T9D3K!px189145** in the login form of the User Panel.
[](https://wikidev.emailarray.com/uploads/images/gallery/2024-08/user-panel-login-form.JPG) ### 1. How to enable MFA from the Webmail 1. Log into the **Webmail** using your full **e-mail address** and your **current e-mail password** 2. Click on the **User** icon from the top right to activate the menu. Then click on **My account** [](https://wikidev.emailarray.com/uploads/images/gallery/2026-06/3yYimage.png) 3. In the **Account** tab, reach for the **MFA** section. 4. Click on **Enable MFA**. [](https://wikidev.emailarray.com/uploads/images/gallery/2026-06/DqJimage.png) 5. Use your authenticator app to scan the **QR code**, then enter the **6-digit** verification code and click **Verify & Enable**. [](https://wikidev.emailarray.com/uploads/images/gallery/2026-06/fMNimage.png) 6. Click **Save**. ### 2. How to enable MFA from the User Panel First, you need a smartphone with a two-factor authenticator App installed (OTP / M-Step Verification / M-Factor Authentication), such as [Authy](https://play.google.com/store/apps/details?id=com.authy.authy&hl=en) or [Google Authenticator](https://play.google.com/store/apps/details?id=com.google.android.apps.authenticator2&hl=en). To enable MFA for your e-mail address: - Log in to the **[User Panel](https://cp.emailarray.com/)** - From the menu, go to **MFA** [](https://wikidev.emailarray.com/uploads/images/gallery/2026-06/Frpimage.png) - Update the dropdown **Status** to **Enabled**. Click on the **Save** button. [](https://wikidev.emailarray.com/uploads/images/gallery/2026-06/KwXimage.png) - Recheck the requirements: have a MFA App installed on your phone, such as [ Authy ](https://play.google.com/store/apps/details?id=com.authy.authy&hl=en)or [Google Authenticator](https://play.google.com/store/apps/details?id=com.google.android.apps.authenticator2&hl=en) - When ready, click on the **Next** button [](https://wikidev.emailarray.com/uploads/images/gallery/2026-06/Ialimage.png) - Scan the QR code with the installed MFA App and fill in the generated six-digit code in the **Challenge** input field. - **Click on the Save button before your token expires. It is always better to wait for the app to generate a fresh token, so you have enough time before it expires.** - You have enabled MFA, and you will be prompted to fill in the token every time you log in using Webmail. [](https://wikidev.emailarray.com/uploads/images/gallery/2026-06/yvlimage.png) ### 3. Disable MFA from the Webmail 1. Log into the **Webmail** using your full **e-mail address** and your **current e-mail password** 2. Click on the **User** icon from the top right to activate the menu. Then click on **My account** [](https://wikidev.emailarray.com/uploads/images/gallery/2026-06/3yYimage.png) 3. In the **Account** tab, reach for the **MFA** section. 4. Click on **Disable MFA.**[](https://wikidev.emailarray.com/uploads/images/gallery/2026-06/lBeimage.png) 5. Use your authenticator app to generate a 6-digit code, then enter it and click **Disable two-factor authentication**. [](https://wikidev.emailarray.com/uploads/images/gallery/2026-06/VANimage.png) 6. Click **Save**. ### 4. Disable 2FA from the User Panel To disable MFA for your e-mail address: - Log in to the **[U](https://admin.emailarray.com/)[ser Panel](https://cp.emailarray.com)** - From the menu, go to **MFA** [](https://wikidev.emailarray.com/uploads/images/gallery/2026-06/Frpimage.png) - Update the dropdown **Status** to **Disabled**. Click on the **Save** button. [](https://wikidev.emailarray.com/uploads/images/gallery/2026-06/uTzimage.png) - Insert the token from your MFA App (such as Authy or Google Authenticator) in the **Challenge** input field. - **Click on the Save button before the token expires. It is always better to wait for the app to generate a fresh token, so you have enough time before it expires.** - After you see the confirmation message that the MFA was disabled, you can delete the entry from your MFA app. [](https://wikidev.emailarray.com/uploads/images/gallery/2026-06/iLeimage.png)