Keep your account secure
Keep your Mailsoftly account secure with a strong password, 2-step verification by app or email code, and a regular review of who still has access.
Your Mailsoftly account holds your contacts, campaigns, and sending reputation, so it is worth a few minutes to lock it down. This guide covers three habits that keep it safe: a strong password, a second verification step, and a clean list of who has access.
You will update your password, turn on 2-step verification, and review your team’s seats so only the right people can sign in.
Change your password
Open Settings and choose Security, then use the Change password card. It walks you through three fields, and the eye icon on each one reveals what you typed so you can check it. Confirming your current password first is what proves the change is really you.
- Current password: enter the password you sign in with today
- New password: create the new one; a strength meter reads Weak, Fair, Good, or Strong as you type, and the field must be at least 8 characters
- Confirm new password: re-enter it, and a live note tells you whether the two match
- Save the change with the Change password button; Cancel reloads the page and drops your edits
Pick something long and unique that you do not reuse on other sites.
A strong, unique password is the single biggest thing you can do to protect the account.
The strength meter is a guide, not a gate. The one hard rule is the 8 character minimum, so a longer passphrase with a mix of characters is what pushes you toward Strong.
Open your Security settings in Mailsoftly
Turn on 2-step verification
The 2-Step Verification card adds a second check at sign in, so a stolen password alone is not enough to get in. A status pill shows whether it is Off or On, and you turn it on by setting up one of two methods. Press Set up on the one you want and follow the prompts.
- Authentication App Verification, marked Recommended: press Set up to open a window with a QR code. Scan it with any authenticator app on your phone, or copy the manual key if you cannot scan, then type the 6 digit code to confirm
- Email OTP Verification: press Set up, confirm the address shown, and send yourself a code. Enter the 6 digit code from your inbox before its timer runs out to confirm
Once a method is on, generate your recovery codes and keep them somewhere safe; they let you back in if you lose the device. You can add both methods, mark one as preferred, or remove a method later, and each of those changes asks you to re-verify first.
An authentication app is the stronger of the two because its codes are generated on your device and work even offline, but an email code is still a solid step up from a password on its own.
Turn on 2-step verification for every Admin on the account, not just yourself. Your data is only as protected as the least secure login that can reach it.
Review who has access
Security is not only about your own login; it is also about who else can sign in. Open Settings and choose Team, then scan the Active tab for people who still belong there. When someone has left, open their row with the edit pencil and turn off the Active switch in the account panel. They drop to the Deactive tab and can no longer sign in, which keeps the list of who can reach your data tight.
- You cannot deactivate your own account from this panel, so a second Admin handles anyone who needs to remove you
- The Pending Invitation tab is worth a glance too, in case an old invite is still open to someone who no longer needs it
A quick review every so often keeps stray access from piling up over time.
Ready to try it in your own account?
Free to start with your Google Workspace or Microsoft 365 account. No credit card required.
