Two-factor authentication and account security

Two-factor authentication adds a code from an authenticator app to every sign-in, so a stolen password alone cannot open your account. You choose whether to turn it on, and every part of Mailglo works either way.

With it on, Mailglo asks for the code each time you sign in and when you reset your password. Once you are signed in, nothing asks for it again.

Turn it on

1. Open Settings, Security, and choose Set up an authenticator.
2. Add the secret to your authenticator app.
3. Enter the six-digit code to confirm. Your next sign-in asks for a code.

Sessions and tokens

Settings lists your signed-in sessions; sign out any you do not recognize. Personal API tokens let your own scripts act as you. For an AI agent, connect it under Agents instead, so it has its own identity, permissions and limits.

Losing your authenticator

A reset waits a safety period before it completes, and owners are told, so it can be cancelled if you did not ask for it.