hmLoadTopic({
hmKeywords:"Account Editor,Account Editor App Passwords,App Passwords,Passwords,Passwords App Passwords",
hmTitle:"App Passwords",
hmDescription:"App Passwords App Passwords are very strong, randomly-generated passwords for use in email clients and apps, to help make your email apps more secure since they can\'t be protect",
hmPrevLink:"access_control_list.html",
hmNextLink:"ae_signature.html",
hmParentLink:"account_manager.html",
hmBreadCrumbs:"Accounts Menu &gt; <a href=\"account_manager.html\">Account Manager<\/a> &gt; Account Editor",
hmTitlePath:"Accounts Menu > Account Manager > Account Editor > App Passwords",
hmHeader:"<h1 class=\"p_Heading1\" style=\"page-break-after: avoid;\"><span class=\"f_Heading1\">App Passwords<\/span><\/h1>\n\r",
hmBody:"<p class=\"p_BodyText_Center\"><img style=\"margin:0 auto 0 auto;width:41.3125rem;height:28.8750rem;border:none\" src=\".\/images\/account-editor_app-passwords.png\"\/><\/p>\n\r<p class=\"p_DialogSectionHeading\" style=\"page-break-after: avoid;\"><span class=\"f_DialogSectionHeading\">App Passwords<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">App Passwords are very strong, randomly-generated passwords for use in email clients and apps, to help make your email apps more secure since they can\'t be protected by <a href=\"ae_worldclient_webadmin.html\" class=\"topiclink\">Two-Factor Authentication<\/a> (2FA). 2FA is a secure way for a user to sign in to Webmail or MDaemon Remote Administration (MDRA), but an email app can\'t use it, because the app must be able to access your email in the background without you having to enter a code from your authenticator app. The App Passwords feature allows you to create strong, secure passwords for use in your apps, while still keeping your account password secured by 2FA. App Passwords can only be used in email apps, they cannot be used to sign in to Webmail or MDRA. This means that even if an App Password were somehow compromised, the unauthorized user still wouldn\'t be able to get into your account to change your password or other settings, but you, however, would still be able to sign in to your account with your account password and 2FA, to delete the compromised App Password and create a new one if needed.<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_BodyText\">If you do not wish to allow a user to use App Passwords, you can do so by disabling the <\/span><span class=\"f_BodyText\" style=\"font-style: italic;\"><a href=\"ae_worldclient_webadmin.html\" class=\"topiclink\">...edit app passwords<\/a><\/span><span class=\"f_BodyText\"> option on the user\'s Web Services page. If you wish to disable support for App Passwords for all users, you can do so using the <\/span><span class=\"f_BodyText\" style=\"font-style: italic;\"><a href=\"passwords.html\" class=\"topiclink\">Enable app passwords<\/a><\/span><span class=\"f_BodyText\"> option on the Passwords page.<\/span><\/p>\n\r<p class=\"p_DialogSectionHeading\" style=\"page-break-after: avoid;\"><span class=\"f_DialogSectionHeading\">App Password requirements and recommendations<\/span><\/p>\n\r<p class=\"p_List1\" style=\"text-indent: 0; padding-left: 1.6875rem; margin-left: 2.0625rem;\"><span class=\"f_List1\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:1.6875rem;margin-left:-1.6875rem\">&#8226;<\/span><span class=\"f_List1\">In order to create App Passwords, 2FA must be enabled for the account (although you can <a href=\"passwords.html\" class=\"topiclink\">turn off this requirement<\/a> if you choose).<\/span><\/p>\n\r<p class=\"p_List1\" style=\"text-indent: 0; padding-left: 1.6875rem; margin-left: 2.0625rem;\"><span class=\"f_List1\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:1.6875rem;margin-left:-1.6875rem\">&#8226;<\/span><span class=\"f_List1\">App Passwords can only be used in email apps—they cannot be used to sign in to Webmail or MDRA.<\/span><\/p>\n\r<p class=\"p_List1\" style=\"text-indent: 0; padding-left: 1.6875rem; margin-left: 2.0625rem;\"><span class=\"f_List1\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:1.6875rem;margin-left:-1.6875rem\">&#8226;<\/span><span class=\"f_List1\">Each App Password is displayed only once, when it is created. There is no way to retrieve it later, so users should be ready to enter it into their app when it is created.<\/span><\/p>\n\r<p class=\"p_List1\" style=\"text-indent: 0; padding-left: 1.6875rem; margin-left: 2.0625rem;\"><span class=\"f_List1\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:1.6875rem;margin-left:-1.6875rem\">&#8226;<\/span><span class=\"f_List1\">Users should use a different App Password for each email app, and they should revoke (delete) its password whenever they stop using an app or when a device is lost or stolen.<\/span><\/p>\n\r<p class=\"p_List1\" style=\"text-indent: 0; padding-left: 1.6875rem; margin-left: 2.0625rem;\"><span class=\"f_List1\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:1.6875rem;margin-left:-1.6875rem\">&#8226;<\/span><span class=\"f_List1\">Each App Password lists when it was created, when it was last used, and the IP address from which it last accessed the account\'s email. If a user finds something suspicious about the Last Used or Last IP data, the user should revoke that App Password and create a new one for his or her app.<\/span><\/p>\n\r<p class=\"p_List1_LastItem\" style=\"text-indent: 0; padding-left: 1.6875rem; margin-left: 2.0625rem;\"><span class=\"f_List1\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:1.6875rem;margin-left:-1.6875rem\">&#8226;<\/span><span class=\"f_List1_LastItem\">When an account password is changed, all App Passwords are automatically deleted—a user cannot continue using old App Passwords.<\/span><\/p>\n\r<p class=\"p_DialogSectionHeading\" style=\"page-break-after: avoid;\"><span class=\"f_DialogSectionHeading\">Creating and using App Passwords<\/span><\/p>\n\r<p class=\"p_BodyText\"><span class=\"f_BodyText\">User\'s will typically create and manage their own App Passwords from within Webmail following the steps outlined below (this information is included in the Webmail help file). Before the user begins, he should have his email app or client ready to enter the password, because the App Password will only be displayed once while creating it.<\/span><\/p>\n\r<p class=\"p_List1\" style=\"text-indent: 0; padding-left: 1.6875rem; margin-left: 2.0625rem;\"><span class=\"f_List1\" style=\"display:inline-block;width:1.6875rem;margin-left:-1.6875rem\">1.<\/span><span class=\"f_List1\">Have the app or email client ready to enter the App Password.<\/span><\/p>\n\r<p class=\"p_List1\" style=\"text-indent: 0; padding-left: 1.6875rem; margin-left: 2.0625rem;\"><span class=\"f_List1\" style=\"display:inline-block;width:1.6875rem;margin-left:-1.6875rem\">2.<\/span><span class=\"f_List1\">Sign in to Webmail and click <\/span><span class=\"f_List1\" style=\"font-weight: bold;\">Options » Security<\/span><span class=\"f_List1\">.<\/span><\/p>\n\r<p class=\"p_List1\" style=\"text-indent: 0; padding-left: 1.6875rem; margin-left: 2.0625rem;\"><span class=\"f_List1\" style=\"display:inline-block;width:1.6875rem;margin-left:-1.6875rem\">3.<\/span><span class=\"f_List1\">Enter the account password in <\/span><span class=\"f_List1\" style=\"font-weight: bold;\">Current Password<\/span><span class=\"f_List1\">.<\/span><\/p>\n\r<p class=\"p_List1\" style=\"text-indent: 0; padding-left: 1.6875rem; margin-left: 2.0625rem;\"><span class=\"f_List1\" style=\"display:inline-block;width:1.6875rem;margin-left:-1.6875rem\">4.<\/span><span class=\"f_List1\">Click <\/span><span class=\"f_List1\" style=\"font-weight: bold;\">New App Password<\/span><span class=\"f_List1\">.<\/span><\/p>\n\r<p class=\"p_List1\" style=\"text-indent: 0; padding-left: 1.6875rem; margin-left: 2.0625rem;\"><span class=\"f_List1\" style=\"display:inline-block;width:1.6875rem;margin-left:-1.6875rem\">5.<\/span><span class=\"f_List1\">Enter the name of the app that will use this password (e.g. &quot;Phone email app&quot;), and click <\/span><span class=\"f_List1\" style=\"font-weight: bold;\">OK<\/span><span class=\"f_List1\">.<\/span><\/p>\n\r<p class=\"p_List1_LastItem\" style=\"text-indent: 0; padding-left: 1.6875rem; margin-left: 2.0625rem;\"><span class=\"f_List1\" style=\"display:inline-block;width:1.6875rem;margin-left:-1.6875rem\">6.<\/span><span class=\"f_List1_LastItem\">Copy\/paste or manually enter the displayed password into the email app, or paste it into a text file or write it down if necessary. If one copies the password to use later then he should delete the copy after entering it into his email client. When finished, click <\/span><span class=\"f_List1_LastItem\" style=\"font-weight: bold;\">OK<\/span><span class=\"f_List1_LastItem\">.<\/span><\/p>\n\r<p class=\"p_BodyText\"><span class=\"f_BodyText\">If for some reason you need to create or delete an App Password for one of your users, you can do so using the options on this page. Just as in Webmail, the App Password will only be displayed once when it is created, so it should immediately be entered into the app or copied somewhere to give to the user later.<\/span><\/p>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 3.0625rem 0.8750rem 3.0000rem;\"><table style=\"background-color:#ffffe6; border:solid thin #000000; border-spacing:0;\">\n\r<tr>\n\r<td style=\"vertical-align:top; width:3.1250rem; height:3.1250rem; padding:0.3125rem; border:none\"><p class=\"p_NoFormat\"><img style=\"margin:0;width:3.1250rem;height:3.1250rem;border:none\" src=\".\/images\/lightbulb_on_50_yback.gif\"\/><\/p>\n\r<\/td>\n\r<td style=\"vertical-align:top; padding:0.3125rem; border:none\"><p class=\"p_Notes\"><span class=\"f_Notes\">There is an account option on the <a href=\"ae_options.html\" class=\"topiclink\">Account Editor\'s Settings<\/a> page that you can use to &quot;<\/span><span class=\"f_Notes\" style=\"font-style: italic;\">Require app password to log in to SMTP, IMAP, ActiveSync, etc.<\/span><span class=\"f_Notes\">&quot;<\/span><\/p>\n\r<p class=\"p_Notes\"><span class=\"f_Notes\">Requiring App Passwords can help protect an account\'s password from dictionary and brute force attacks via SMTP, IMAP, etc. This is more secure because even if an attack of this sort were to guess an account\'s actual password, it wouldn\'t work and the attacker wouldn\'t know, because MDaemon would only accept a correct App Password. Additionally, if your accounts in MDaemon are using <a href=\"active-directory_overview.html\" class=\"topiclink\">Active Directory<\/a> authentication and Active Directory locks an account after a number of failed attempts, this option can help prevent accounts from being locked out, because MDaemon will only check the App Passwords, not try to authenticate to Active Directory.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<p class=\"p_SeeAlso\" style=\"page-break-after: avoid; border-right: none; border-bottom: none; border-left: none;\"><span class=\"f_SeeAlso\">See:<\/span><\/p>\n\r<p class=\"p_SeeAlsoLinks\" style=\"page-break-after: avoid;\"><span class=\"f_SeeAlsoLinks\"><a href=\"passwords.html\" class=\"topiclink\">Passwords<\/a><\/span><\/p>\n\r<p class=\"p_SeeAlsoLinks\" style=\"page-break-after: avoid;\"><span class=\"f_SeeAlsoLinks\"><a href=\"ae_options.html\" class=\"topiclink\">Account Editor » Settings<\/a><\/span><\/p>\n\r"
})
