Multi-factor authentication (MFA) for email
MFA adds a required second step when you sign in to webmail, so a stolen or guessed password alone is not enough to reach your email.
MFA adds a second step when you sign in to webmail, so that a stolen or guessed password alone is not enough to reach your email. It is required for MyPandos webmail, and you set it up once, on your first sign-in.
Setting it up (first sign-in)
- Sign in to your webmail as usual. After your password, you'll be prompted to set up an authenticator.
- Choose a method: an authenticator app (recommended) such as Google Authenticator, Microsoft Authenticator, 1Password or Authy — scan the QR code and enter the 6-digit code; or a security key / passkey (WebAuthn), a hardware key or your device's built-in biometric.
- Save your recovery codes somewhere safe, such as a password manager. These let you back in if you lose your phone or key. Treat them like passwords.
After setup, each webmail sign-in asks for your second factor (or less often, if you stay signed in on a trusted device).
Does MFA apply to Outlook, Apple Mail or my phone's mail app?
No. MFA protects webmail sign-in. Desktop and phone mail apps use an app password instead — that app password is itself a strong, revocable, per-device credential.
Lost your phone or authenticator?
Use a recovery code to sign in, then set up a new authenticator. If you have no recovery codes, contact your administrator — they can reset your MFA enrolment so you can set it up again.