Two-Factor Authentication

Two-Factor Authentication (2FA)

Two-factor authentication adds a critical extra layer of security to your C-Band Mailbox account. Given that your virtual mailbox may contain sensitive personal documents, financial statements, legal correspondence, and other confidential mail, protecting your account with more than just a password is strongly recommended. This guide explains what 2FA is, why it matters, and how to set it up on your account.

What Is Two-Factor Authentication?

Two-factor authentication (2FA) requires you to provide two separate forms of verification when logging into your account:

1. Something you know: Your password.
2. Something you have: A one-time code generated by your phone (via SMS or an authenticator app).

Even if someone discovers or steals your password, they cannot access your account without also having access to your second factor. This dramatically reduces the risk of unauthorized access from password theft, phishing attacks, or data breaches at other services where you may have used the same password.

Why 2FA Matters for Virtual Mailbox Accounts

Your C-Band Mailbox account is not just another online account. It provides access to:

• Physical mail: Scanned images of your personal and business correspondence.
• Financial documents: Bank statements, tax forms, credit card statements, and investment documents.
• Legal documents: Contracts, court notices, government correspondence, and official letters.
• Personal information: Documents containing your name, address, Social Insurance Number (Canada) or Social Security Number (US), and other sensitive identifiers.
• Billing information: Your payment methods and billing history.

Unauthorized access to your mailbox account could expose all of this information. Enabling 2FA is one of the most effective steps you can take to protect yourself.

How to Enable 2FA

To enable two-factor authentication on your C-Band Mailbox account:

1. Log in to your C-Band Mailbox dashboard.
2. Navigate to Settings > Security > Two-Factor Authentication.
3. Click "Enable Two-Factor Authentication".
4. Choose your preferred 2FA method (see options below).
5. Follow the setup instructions for your chosen method.
6. Verify your setup by entering a test code.
7. Save your backup/recovery codes (see below).

2FA Method: SMS-Based

SMS-based 2FA sends a one-time verification code to your registered phone number via text message each time you log in. To set up SMS-based 2FA:

1. Select "SMS" as your 2FA method.
2. Confirm or update your phone number.
3. Click "Send Test Code" to receive a verification SMS.
4. Enter the code you received to confirm setup.
5. Click "Enable" to activate SMS-based 2FA.

Pros: Simple to use, no additional app needed. Cons: Requires cellular reception to receive codes, and SMS can be intercepted in rare cases (SIM swapping attacks).

2FA Method: Authenticator App (Recommended)

Authenticator app-based 2FA uses a time-based one-time password (TOTP) generated by an app on your phone. This is the recommended method as it is more secure than SMS. Compatible apps include:

• Google Authenticator (iOS, Android)
• Authy (iOS, Android, Desktop)
• Microsoft Authenticator (iOS, Android)
• 1Password (built-in TOTP support)

To set up authenticator app-based 2FA:

1. Select "Authenticator App" as your 2FA method.
2. A QR code will be displayed on screen.
3. Open your authenticator app and scan the QR code (or manually enter the provided setup key).
4. The app will begin generating 6-digit codes that change every 30 seconds.
5. Enter the current code from the app to verify setup.
6. Click "Enable" to activate authenticator-based 2FA.

Pros: More secure than SMS, works without cellular reception, codes cannot be intercepted remotely. Cons: Requires installing an authenticator app.

Backup and Recovery Codes

When you enable 2FA, you will be provided with a set of backup recovery codes. These one-time-use codes allow you to log in if you lose access to your phone or authenticator app. It is critical that you save these codes securely:

• Write them down and store them in a secure physical location (such as a safe or locked drawer).
• Save them digitally in a password manager or encrypted file.
• Do not store them in plain text on your phone, in an email, or in an unprotected file on your computer.

Each recovery code can only be used once. After using a recovery code, it is consumed and cannot be used again. If you run out of recovery codes, you can generate a new set from Settings > Security > Two-Factor Authentication > Regenerate Recovery Codes.

What to Do If You Lose Your Device

If you lose your phone or cannot access your authenticator app or SMS:

1. Use a recovery code: Log in using one of your saved backup recovery codes instead of the 2FA code.
2. Contact support: If you have also lost your recovery codes, contact our support team at support@cbanddigital.com or call +1 (888) 914-9777. You will need to verify your identity before 2FA can be reset on your account.

The identity verification process for 2FA reset is intentionally thorough to protect your account from unauthorized access. You may be asked to provide your government-issued photo ID and answer security questions.

Managing Your 2FA Settings

After enabling 2FA, you can manage your settings at any time from Settings > Security > Two-Factor Authentication:

• Change 2FA method: Switch between SMS and authenticator app.
• Update phone number: Change the phone number used for SMS-based 2FA.
• Regenerate recovery codes: Generate a new set of backup codes (this invalidates all previous codes).
• Disable 2FA: Turn off two-factor authentication (not recommended). You will need to enter your current 2FA code to confirm this action.

Security Best Practices

• Use an authenticator app over SMS for the highest level of security.
• Keep your recovery codes safe and accessible only to you.
• Use a strong, unique password in combination with 2FA. See our guide on changing your password.
• Keep your authenticator app updated to the latest version for security patches and improvements.
• Enable 2FA on your email account as well, since your email is used for password resets and notifications.

For more information about securing your account, visit our Security page. For additional help, visit our Help Center or submit a support ticket.