Published on June 14, 2018
You might be aware that Hushmail offers two-step verification as an option for further securing your email. However, you might not have fully considered whether or not this is for you. Who should be using two-step verification and why?
The concept of two-step verification is simple. When signing in to your account from an unknown computer or device, you are required to verify your identity in two different ways. The first way is with your passphrase. The second way is to verify with a security code that is sent to a second device, such as your phone, or another email account. You can also choose to receive the code through a smartphone app such as Duo Mobile or Google Authenticator. Once you enter the code, the device or computer will be “trusted” and further security codes will not be necessary to access your account.
If, for whatever reason, you aren’t able to access your security code when you need it for two-step verification, we also provide you with a backup verification code. This code is much longer than the security code we send you through your phone or email. Also, we only give out one of the backups each time you set up two-step verification, so be sure to write it down or take a screen capture and keep in a safe place.
If you are unable to access the security code and have lost the backup verification code, you can always go back into your account through a trusted device and find the backup under the Security tab within the Preferences page.
It’s important to be mindful of the device you use. If you are using a computer that has multiple users and you don’t want it to be a trusted device, you might want to use the browser in private mode such as Incognito in Chrome, Private Browsing in Firefox, InPrivate browsing in IE, etc.
If you have two-step verification turned on and also use the Hushmail for iPhone app, you will be required to authenticate with your passphrase and security code any time you switch to a new iPhone.
If you are using POP or IMAP to access your email account you will need to update your password in your email software to match the secret passphrase that’s given to you after you set up two-step verification.
If you would like to try two-step verification, setup is simple: