# Configure Two-factor Authentication using Email

Two-factor authentication asks for a one-time code in addition to your password whenever you sign in, so a stolen password alone is not enough to reach your account. This page walks through turning it on with email delivery, where the verification code arrives at the address you sign in with.

:::note
Whatever you set here governs every Cloud Voice App client tied to your extension, not just the one you configure it from.
:::

:::tip
Before you switch this on, confirm you can open the mailbox for the email address you sign in with. Every verification code is delivered only to that address, so you will need access to it each time you log in.
:::

## Turn on email verification

1. In the Cloud Voice App web client, click your account name in the top-right corner and open **Change Password & Security > Security Settings**.
2. Tick the **Two-Factor Authentication** checkbox.
3. When the **Password** window appears, type your account password and click **Confirm** to confirm it is you making the change.
4. Choose **Authenticated by Email**, then work through the fields below.

   
   ![Cloud Voice, email two-factor authentication panel with a Send button and a field for the verification code](/images/pbx/click-to-send-email-for-2fa.png)

   1. Click **Send**. A six-digit code is emailed to the address you use to log in.

      :::caution
      The code is only valid for five minutes from the moment the email goes out. Request a fresh one if it lapses.
      :::
   2. Type the code into the **Authentication Code** field.
   3. Click **Save**.

## What to expect afterward

- An **Edited successfully.** confirmation means two-factor authentication is now active.
- From now on, signing in to any Cloud Voice App client, web, desktop, or mobile, with your extension's email address and password will also prompt you for a verification code.

:::note
If the email address on your extension is later changed, two-factor authentication switches itself off automatically.
:::

## If you get locked out

Lost the device you sign in on, or no longer receiving the emailed codes? Ask your system administrator to disable two-factor authentication for your account. Once it is off, you can sign in again with just your email address and password.