# Is 2fa necessary for email?

**URL:** https://discuss.privacyguides.net/t/is-2fa-necessary-for-email/13011
**Category:** General
**Created:** 2023-06-27T16:10:42Z
**Posts:** 7

## Post 1 by @mq1 — 2023-06-27T16:10:42Z

I’m deciding on wether to use proton or [mailbox.org](http://mailbox.org) as my primary email provider, [mailbox.org](http://mailbox.org) is my preferred choice, as it’s cheaper (i don’t use e2ee (I send emails to family members who use gmail, or to people who don’t use opengpg).  
I was concerned however from the lack of 2fa authentication for accessing the email through imap/smtp. It’s a valid concern? I use 2fa for all the other important accounts.

---

## Post 2 by @Equinox — 2023-06-27T18:13:16Z

I would say yes, 2FA is necessary on your email. It’s probably tied to many accounts and registrations. Especially if you don’t use aliasing. If a bad actor gains access to your primary mail, it could potentially have big consequences for your accounts.

Mailbox is great, but the lack of its own client and the bad implementation of 2FA made me leave the company. But that’s a personal matter, the service is great tho never had any problems.

---

## Post 3 by @TeCer — 2023-06-29T10:40:39Z

mailbox has a weird 2fa implementation but the result is “similar” to specific-app-password.  
You log on your web interface with username and pin+otp (or pin+yubikey), for other services like imap, drive, xmpp, you use your username/password.

---

## Post 4 by @Skyman12 — 2023-06-29T17:58:59Z

Yes but you can use proton mail or tutanota anyway

---

## Post 5 by @anon73250778 — 2023-06-30T07:05:26Z

[mailbox.org](http://mailbox.org) is barebones. All it is good for is that the service presumably does not monetize the data of its users. There are better choices out there for actual mail but [mailbox.org](http://mailbox.org) is best used for servers to set up SMTP notification if certain services goes down in your selfhosted servers or in the cloud.

---

## Post 6 by @in_the_city — 2023-07-02T22:09:12Z

I use a Yubikey for mine. Your email is a main “key” to all of your accounts. Someone gets access to that, they can reset passwords to your accounts, including your bank account.

---

## Post 7 by @landordragen — 2023-07-03T11:04:38Z

Much like @in_the_city stated, having MFA enabled on your e-mail is most likely the most important MFA you will have.

It’s the center of it all.