Secure e-mails by additional password

This guide offers a solution for users wishing to increase the level of security of their messaging, on a particularly weak point if you are using a software/mail client to view your e-mails.

All passwords in memory

When using the Infomaniak Online Interface mail.infomaniak.com for the consultation and sending of your e-mails, it is accessible via your Infomaniak account on which 2-factor authentication (2FA) is activated.

Of course all the passwords of each of the email addresses you have attached to mail.infomaniak.com are in memory and you will not need to enter them every time you want to view your message.

But before that, you indicate 3 informations:

1. your login ID
2. the password of this login ID
3. you then validate your access request by one of the existing additional means

Therefore, a person in possession of your Infomaniak password will not be able to access your email if they do not also have access to your mobile device.

Software/Mail Client Case

The double authentication (2FA described above) does not exist directly with IMAP-type messaging consultation protocols. An email address has a password, and that's all.

Therefore a software/message client installed on a computer will also keep all passwords for each of the attached email addresses, but will not require a login password.

There is a solution with Mozilla Thundebird:

1. Open the software/mail client.
2. At the top right click the three-line horizontal menu button .
3. Click on Preferences (not on Account Settings):
   
4. Click on Privacy and security in the left menu.
5. Scroll down to the section Passwords (all your e-mail passwords in memory are here).
6. Check the box Use a main password:
   
7. Click the button at the same location to set your new software/client opening password by courier:
   

To conclude:

• Close and then restart Thunderbird.
• When reopening, enter your main password.
• If you enter the password correctly, you will have access to your accounts.
• In case of failure, Thunderbird will still open, but will ask you again for the main password.

This method protects you especially if you share your environment with other users.

Also take note of the security by fingerprint for viewing emails on the mobile app Infomaniak Mail.