2FA is a verification function used to ensure login security.

There are multiple ways to perform 2FA, including using SMS, Coremail Lunkr App, WeChat, alternative email, or third-party OTP.

Users can bind a certain number of verification methods, depending on the password policy set by the administrator in the management background. The system supports administrators to set a minimum binding quantity. After the administrator sets it, the number of verification methods bound by the user must comply with the administrator's standards, otherwise they must bind again.

Introduction to 2FA methods:

SMS: Enter the verification code in the SMS during login to perform verification.

Coremail Lunkr App: During login, choose to authorize via push notification, scan QR code, or enter a 6-digit verification code in the App to perform verification.

Alternative email: During login, enter the verification code in the verification email sent to the backup email to perform verification.

Third-party OTP: During login, enter the verification code of the third-party OTP to perform verification.

WeChat Applet: During login, perform verification by scanning the QR code via WeChat or entering the 6-digit verification code in the WeChat Mini Program.

2FA can be operated in the webmail and desktop client.

In the webmail, go to Security > Two-Factor authentication to bind and unbind 2FA.

In the Air client (version 4.0.0 or above), go to Settings > Two-Factor Authentication to bind and unbind 2FA.

If a user performs multiple binding/unbinding/modifying operations within a short period of time, it may seem cumbersome to have to perform 2FA every time.

In order to ensure a good user experience, the system will provide a 15-minute grace period after the user has performed a binding/unbinding/modifying operation. Within this grace period, the user does not need to perform 2FA again.

Note: The grace period only applies to the current device in use. If the user logs out and logs in again, or logs in on another device and enters the 2FA settings page to bind/unbind/modify verification methods, the grace period will expire.

There are two situations:

1. If the number of verification methods bound by the user is less than the minimum binding quantity set by the administrator, the user must bind again.

2. If the verification methods bound by the user do not comply with the mandatory binding methods set by the administrator, the user must bind again.