Enabling Two Factor Authentication in Roundcube

Best Roundcube 2FA plugin
Two-factor authentication is essential when protecting access to email. Using the Protectimus Roundcube OTP plugin, you can set up two-factor authentication in the Roundcube webmail client in just 15 minutes.

The Roundcube 2 factor authentication plugin from Protectimus enables you to easily integrate a professional, OATH-certified MFA solution into the Roundcube webmail client, giving you the maximum protection against unauthorized account access. When logging into Roundcube, users will be asked first for their normal passwords, and then for a one-time password.

2FA from professionals

Multi-factor authentication plugin for Roundcube and Protectimus multifactor authentication solution itself are developed by leading IT security engineers. The Protectimus two-factor authentication service has been protecting payment systems, corporate infrastructures, and personal computers all around the world since 2013. Protectimus is a coordinating member of the OATH initiative.

Adding 2FA to Roundcube in 15 minutes

It takes just 15 minutes to configure two-factor authentication in Roundcube and secure access to Roundcube using one-time passwords. We offer a customer-tested, ready-to-use 2FA plugin, Protectimus Roundcube OTP. If you have any questions, we invite you to contact our support team.

OTP delivery methods

Choose your Roundcube two-factor authentication methods: hardware tokens; the Protectimus Smart one-time password generator app; SMS-based OTP delivery; or chatbots on Telegram, Viber, and Messenger. These are virtually all of the one-time password delivery methods available today. The Protectimus two-factor authentication solution is available as a cloud service or an on-premise solution.

See also

Image Token Model Price, pcs
15050010005000
Brief Description Description
PROTECTIMUS ONE PROTECTIMUS ONE --$8.99$7.99$6.99 The most popular solution, secure two-factor authentication on your resource at an affordable price The most popular solution
PROTECTIMUS TWO PROTECTIMUS TWO $10.99$10.49$9.99$8.99$7.99

$2 when paying service in advance for a year
Bulletproof OTP token: reliable, waterproof, stylish Bulletproof TOTP token: reliable, waterproof, stylish

$2 when paying service in advance for a year
Buy
PROTECTIMUS CRYSTAL PROTECTIMUS CRYSTAL $11.99$11.49$10.99$9.99$8.99 The most stylish and handy hardware TOTP token The most stylish and handy hardware TOTP token
Buy
PROTECTIMUS ULTRA PROTECTIMUS ULTRA --$14.99$13.99$11.99 The most secure solution, ideal for the most sensitive system areas OCRA token for the most sensitive system areas
PROTECTIMUS SLIM MINI PROTECTIMUS SLIM NFC $29.99$28.99$26.99$24.99$21.99 Reprogrammable NFC token, that fits any two-factor authentication system Reprogrammable NFC token
Buy
PROTECTIMUS SMART PROTECTIMUS SMART free Available for all key Android and iPhone platforms Software token for Android and iPhones
PROTECTIMUS BOT PROTECTIMUS BOT free OTP delivery via messenger — easy, secure, convenient. The service is available on Telegram, Viber and Facebook Messenger. The service is available on Telegram, Viber and Facebook Messenger
PROTECTIMUS SMS PROTECTIMUS SMS $2 per user/month Minimum hassle Minimum hassle
PROTECTIMUS MAIL PROTECTIMUS MAIL free Minimum costs Minimum costs


knowledge base

When setting up the Roundcube Webmail client, make sure that all the basic security rules have been taken into account: the connection between Roundcube and the mail server is protected with an SSL certificate, email encryption is set up, and 2-factor authentication plugin for Roundcube Webmail security is built in. With Protectimus Roundcube OTP Plugin adding two-factor authentication to Roundcube will be done in just a few clicks.

Most services use email for changing passwords and restoring access to accounts. That means that reliable email access protection — and in this case, that means Roundcube authentication security — is fundamental to IT security in general. Even if you use a secure password, that password could be intercepted by a keylogger, brute-forced, or obtained using phishing or social engineering. Two-factor authentication adds an extra level of Roundcube brute force protection — one-time passwords are valid for 30 to 60 seconds. They can't be guessed or collected, and they're difficult or impossible to intercept.

Two-factor authentication protects Roundcube from keyloggers and brute-force attacks. It also guards against phishing and social engineering attacks, and data signing functionality protects against man-in-the-middle attacks. Roundcube just can't be secure without a verified multi-factor authentication plugin for Roundcube. The Roundcube MFA plugin from Protectimus lets you configure multifactor authentication for Roundcube in just a few minutes. Features available in Protectimus's solution include geographic and time-based filters, self-service, CWYS data signing, user environment analysis, and a broad assortment of 2FA tokens to choose from.

The Protectimus multi-factor authentication plugin for roundcube supports hardware OTP tokens with hard-coded secret keys, the reflashable Protectimus Slim NFC hardware token, the Protectimus Smart 2FA app for iOS and Android, email, and SMS authentication. Roundcube two-factor authentication methods also include delivery of one-time passwords over Telegram, Viber, and Facebook Messenger. Hardware tokens are the most reliable OTP tokens. These tokens cannot be infected by viruses, and intercepting one-time passwords is impossible. Messaging service chatbots are both convenient and secure; however, we don't recommend SMS-based authentication.

To begin setting up two-factor authentication for the Roundcube client, download the Protectimus 2FA plugin for Roundcube from GitHub and install it. For adding two-factor authentication to Roundcube find plugin setup instructions on the official plugin repository for Roundcube Webmail. After installing the Roundcube 2-factor authentication plugin, register with the Protectimus service, and create a resource, user, and token. Assign the user and token to the resource.

How to secure Roundcube?


Why do I need two-factor authentication in Roundcube?


Why Protectimus is the best Roundcube 2FA plugin?


What Roundcube two-factor authentication method should I choose?


How do to set up two-factor authentication in Roundcube?