EnsureMail Webmail provides 3 three options for Multi-Factor Authentication (MFA).

• Forced-On – The End User must setup MFA before they can access Webmail.
• Optional – The End User can decide if/when they MFA
• Off – The End User does not have the option to set up MFA

The default setting is “Optional”, and it’s applied to all new domains and we recommend that you change it to Force-On.  Switching off MFA is exposing your business to a risk that you cannot control and that is the common sense of your users.

Manage Multi-Factor Authentication Settings

1. Log in to the PracticalHost Email Admin Control Panel. 
2. In the Email Hosting section, click Mailboxes. Note: You will need to select the appropriate domain if your account has more than one domain.
3. In the left side menu click Settings, and then click WEBMAIL SETTINGS.
4. In the Admin-only Settings section, select the desired MFA option, and save the setting.
   
   

Reset Multi-Factor Authentication for an End-User

You might need to perform these steps if the End User gets a new mobile device.

1. Log in to the Email Admin Control Panel. 
2. In the Email Hosting section, click Mailboxes. Note: You will need to select the appropriate domain if your account has more than one domain.
3. Find the mailbox that requires the reset and click the Manage
4. Click the More button and select Reset Multifactor Authentication.