Configuring two-factor authentication on an Exchange account
Find out how to configure two-factor authentication on an Exchange account
Objective
To increase the security of your Exchange account, you can enable two-factor authentication (2FA). Each time you log in to OWA (Outlook Web App) webmail, you then enter a random code in addition to your password. This code is generated by a one-time password (OTP) app installed on your smartphone or tablet.
Two-factor authentication only protects access to OWA webmail. It does not apply to email clients (Outlook, Mail, Thunderbird, etc.) or to mobile devices: these connections (ActiveSync, EWS, IMAP, POP, etc.) remain protected by the account password alone. We therefore recommend choosing a strong password.
This guide explains how to enable two-factor authentication on your Exchange account.
Requirements
- an OVHcloud Exchange solution already set up
- an OTP mobile application installed on your Android or iOS smartphone or tablet
OTP mobile applications
You can choose from a number of OTP applications. Here are two examples that are free to use.
- For Android: Free OTP
- For iOS: OTP Auth
OVHcloud Control Panel Access
- Direct link:
- Navigation path:
Web Cloud>Exchange> Select your platform
Instructions
First configuration
Step 1: Enable two-factor authentication on the platform
For the initial configuration, you need to enable two-factor authentication on the Exchange service before enabling it on an account.
Switch to the Security tab.
- Under "Two-factor authentication", click on
Enabled. - To finish, scroll to the bottom of the page and click on
Save changes.
Step 2: Enable two-factor authentication on an account
After enabling two-factor authentication on the Exchange service, you can then enable it on each one of your accounts.
Go to the Email accounts tab and click on ... to the right of the account on which you wish to enable two-factor authentication, then click on Enable two-factor authentication.
To link the Exchange account to your OTP app, log in to your webmail.
At the first attempt to log in, a QR code will appear. Use your OTP app to scan it, then enter the code that the app generates to log in.
When you next log in, webmail will only ask for the code generated by the app.
Disabling two-factor authentication
You can disable two-factor authentication on your account in three ways.
From the Email accounts tab, click on ... to the right of the account on which two-factor authentication is already enabled.
Select the option that you need according to the table below:
Go further
Join our community of users.