> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://docs.laposta.org/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://docs.laposta.org/_mcp/server.

# Setting up two-step verification

> Secure your account with an extra login step via an authenticator app or SMS.

With two-step verification (also known as two-step authentication or two-factor authentication, 2FA), you enter an extra code after your login and password. Someone who knows your password will then also need your phone to access your account. This provides better protection for your subscriber data and campaigns.

## Enable two-step verification

You can enable two-step verification under Login → Two-step verification.

> **Note**
>
> If you do not see this tab, two-step verification is not yet available for your account. Laposta is enabling it step by step for all accounts. Once it is your account's turn, the tab will appear automatically.

![Overview of methods with the authenticator app and SMS, with the Enable link next to each method](/_fern-files/_img/d193bfe86638f39ef5ca31a09f814f0c8bcea50f39fc69df35370ffd42c773dc.webp)

Which methods you can choose depends on your subscription:

| Method            | Available for | How it works                                                                                                                                                |
| ----------------- | ------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Authenticator app | every account | You use a free app on your phone or desktop to generate the login code.                                                                                     |
| SMS               | paid accounts | When logging in, you receive a temporary code via SMS on your mobile phone. This works without an extra app, but is less secure than the authenticator app. |

You can always reconfigure your method later. With a paid account, you can also turn on both methods at the same time and choose which one to use when logging in.

## Logging in for the first time when two-step verification is already mandatory

If two-step verification has been made mandatory in your account, you must first choose and activate a method before you can continue working. Log in with your username and password. You will then automatically be taken to Login → Two-step verification.

![Selection screen when logging in for the first time, with the authenticator app and SMS side by side](/_fern-files/_img/62171d3c745ab28bac7dfa01f2e06db5dadace5871f2fbda4f6e00eddf467779.webp)

Click ‘Set up authenticator app’ or, if you have a paid account, ‘Set up SMS’.

## Checking your email address

The setup takes place on the secure login environment login.laposta.nl. Afterwards, you will automatically return to the application.

Before you set up a method, Laposta checks whether your email address is still correct. This way, Laposta can be sure that you are activating the verification yourself, and not someone else who has obtained your login details. On the ‘Check your email address’ screen, choose ‘Yes, I still have access to this email address’ or ‘No, I want to change my email address’. If you choose to change it, enter the new address. You will receive a verification code at that address which is valid for ten minutes. Confirm your address using that code.

## Setting up the chosen method

#### Authenticator app

Next to ‘Authenticator app’, click ‘Enable’ and follow the steps:

1. Download and install a two-step verification app, such as Google Authenticator ([iPhone](https://apps.apple.com/us/app/google-authenticator/id388497605) / [Android](https://play.google.com/store/apps/details?id=com.google.android.apps.authenticator2\&hl=en)), [Microsoft Authenticator](https://www.microsoft.com/en-us/security/mobile-authenticator-app) or [Authy](https://www.authy.com/download/). For desktop, you can use [Proton Authenticator](https://proton.me/authenticator/download).
2. Scan the QR code on the screen with your app. If you do not have a mobile phone and are using a desktop app, click ‘Can't scan?’ and copy the code to register manually.
3. Enter the code from the app.

#### SMS

1. Next to ‘SMS’, click ‘Enable’.
2. Select the country and enter your phone number next to it, without the country code.
3. Enter the confirmation code that you receive via SMS from Laposta and click ‘Enable’.

Afterwards, save your recovery codes and enter a recovery email address. You can read how to do this in [Recovery codes and recovery email address](/herstelcodes).

## Logging in with two-step verification

After your login and password, Laposta asks for the code from your authenticator app or the SMS code on your phone. If you tick ‘Do not ask for two-step verification for 30 days’, Laposta will skip the check on that device for 30 days.

> **Warning**
>
> Only use this option on a personal computer that is protected with a password.

If you cannot access your code, select ‘Log in with one of your recovery codes’ or ‘Log in with your recovery email address’ in the ‘No longer have access?’ box below the code screen. You can read more about this in [Solving problems with two-step verification](/problemen-met-tweestapsverificatie).

## Editing or disabling a method

Go to Login → Two-step verification. Next to an active method you will see ‘Edit’, and next to an inactive method you will see ‘Enable’.

For every change, Laposta first performs a security check: enter a verification code (from your authenticator app or via SMS) and your password, and click ‘Check’.

* Deactivating a method: click ‘Edit’ next to the method and then click ‘Disable’. If two-step verification is mandatory for your account, you cannot disable your last active method and you will see a message stating that authentication is mandatory.
* Switching to a new phone or a different authenticator app: click ‘Edit’ next to ‘Authenticator app’ and then click ‘Replace authenticator app’. This is possible for both free and paid accounts. You do not need to disable anything: the old connection will continue to work until you have confirmed the new app. The steps can be found in [Solving problems with two-step verification](/problemen-met-tweestapsverificatie).

> **Note**
>
> Whenever you add or delete a method or change your email address, you will always receive a confirmation email. If you receive such an email without having changed anything yourself, please contact the helpdesk immediately at [helpdesk@laposta.nl](mailto:helpdesk@laposta.nl).

## Making two-step verification mandatory

Laposta is making two-step verification mandatory for all accounts step by step. You can always enable it yourself in advance. If you work with a [management environment](/wat-is-een-beheeromgeving), the administrator can make it mandatory for all users. If you have a standalone account, you can request this from the helpdesk via [helpdesk@laposta.nl](mailto:helpdesk@laposta.nl).

## Related articles

#### [What are the password requirements of Laposta?](/welke-eisen-stelt-laposta-aan-een-wachtwoord)

What requirements Laposta sets for the length, characters and strength of your…

#### [What is Single Sign-On (SSO)?](/single-sign-on-sso)

How to activate Single Sign-On on a paid subscription and link the users to your…

#### [Configuring domain authentication step by step](/stap-voor-stap-je-domein-authenticeren)

Look up the DNS records for your domain, add them at your domain provider and activate…

#### [Creating an API key](/hoe-kom-ik-aan-een-api-sleutel)

You can create and manage your API keys on the Connect page. Please note: a new key can…