How to enable two-factor authentication (2FA) on SOGo
Two-factor authentication (2FA) adds an extra layer of security to your SOGo account. Once activated, you will need your password and a temporary code generated by an app on your phone (like Google Authenticator) to log in. This guide shows you the process step by step.
Logging in to SOGo
- Go to the SOGo login page. Enter your username (email address) and password. The access URL would be something like: sogo.yourdomain.com How to access and manage email accounts from SOGo
Access Preferences
- To enable 2FA, go to the Preferences menu, located at the top left of the screen (next to your username).
Enable 2FA in Settings
- In the Preferences menu, under the "General" section, scroll down until you find the option: "Enable two-factor authentication using a TOTP app".
Set up the Authenticator App
- After checking the box, SOGo will show a screen with important information to configure your authentication app.
- Open your authentication app on your phone (Google Authenticator, Authy, etc.) and scan the QR code displayed on the SOGo screen. Example screenshot:
- The app will automatically add your SOGo account and start generating 6-digit codes.
- Enter the 6-digit code generated by the app into the field "Enter TOTP verification code".
After entering the code, click the "Save" button at the top right of the screen (in green). If you don't, the changes won't be applied.
IMPORTANT: Once you activate this option and save the settings, SOGo will always require the verification code from your app to log in.
Make sure you have scanned the QR code correctly and that the app is generating codes before saving. If you save the settings without the app configured, you may lose direct access to that email account in SOGo.
This setting only affects access to SOGo (email, calendar, contacts), not other services.
From now on, each time you log in to SOGo, there will be an additional security step:
- First, enter your usual username and password (as shown in the first screenshot of this guide).
- Immediately after, a new screen will appear requesting the 6-digit verification code from your authentication app.
- Enter the current code shown by your app, and you will access your account securely.
Related Articles
Transition from Roundcube to SOGo
To provide a more modern, complete, and device-friendly email tool, we have replaced the old Roundcube manager with SOGo as the new webmail application at cdmon. Reasons for the change Roundcube has been a useful tool for years, but it had ...How to add the SOGo calendar to other email clients
SOGo allows you to easily synchronize your calendar with other managers thanks to the CalDAV protocol. In this guide, we explain step by step how to configure your SOGo calendar in several different environments: Mac Mail (macOS) Thunderbird iPhone ...How to modify Sogo features
From the SOGo panel, you can customize different aspects of your account: language, time zone, email display, labels, folder synchronization, and IMAP settings. Below, we explain how to access these settings and which options you can modify. The ...How to use contacts in Sogo
SOGo allows you to manage your personal contacts through a clean and intuitive interface. From the address book, you can create new contacts, group them into lists or categories, and easily view their details. Below, we explain how to do it: ...How to create a signature in SOGo
A signature is a block of text (and optionally images or links) that is automatically added at the end of the emails you send. It serves to identify the sender, display contact information, or include your company logo. In this guide, you will learn ...