EmailDiscussions.com  

Go Back   EmailDiscussions.com > Email Service Provider-specific Forums > FastMail Forum
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read
Stay in touch wirelessly

FastMail Forum All posts relating to FastMail.FM should go here: suggestions, comments, requests for help, complaints, technical issues etc.

Reply
 
Thread Tools
Old 25 Jul 2016, 07:13 PM   #121
odedp
Master of the @
 
Join Date: Mar 2000
Location: Tel-Aviv, ISRAEL
Posts: 1,587
Question confused

I use only the web (new) interface.
Login with my username and password.
Works flawlessly for me.
Are there any actions I have to take now as a result of the changes made by FM?
odedp is offline   Reply With Quote
Old 25 Jul 2016, 07:16 PM   #122
Terry
The "e" in e-mail
 
Join Date: Jul 2002
Location: VK4
Posts: 2,609
I think password recovery...or extra security if required.

Read the fastmail blog https://blog.fastmail.com/2016/07/18...n-more-secure/
Terry is offline   Reply With Quote
Old 25 Jul 2016, 07:35 PM   #123
JamesHenderson
Essential Contributor
 
Join Date: Jan 2003
Location: Oxfordshire, UK
Posts: 433
Quote:
Originally Posted by odedp View Post
I use only the web (new) interface.
Login with my username and password.
Works flawlessly for me.
Are there any actions I have to take now as a result of the changes made by FM?
I think nothing is compulsory, but it is recommended you add a recover email/phone and/or a second factor to your password.
JamesHenderson is offline   Reply With Quote
Old 25 Jul 2016, 08:04 PM   #124
edu
Senior Member
 
Join Date: Jun 2016
Posts: 170
Is it possible to use the app password without full access, or this option is deleted forever?. I think my account (and all my messages) could be in risk if my android smartphone is infected and the messages deleted, it was not like that before without full access. So?, is "pop only" the solution now?.
edu is offline   Reply With Quote
Old 25 Jul 2016, 08:16 PM   #125
odedp
Master of the @
 
Join Date: Mar 2000
Location: Tel-Aviv, ISRAEL
Posts: 1,587
Quote:
Originally Posted by Terry View Post
I think password recovery...or extra security if required.

Read the fastmail blog https://blog.fastmail.com/2016/07/18...n-more-secure/
Thank you Terry
odedp is offline   Reply With Quote
Old 25 Jul 2016, 08:16 PM   #126
CyberDyne
Master of the @
 
Join Date: Sep 2004
Posts: 1,556
I've added an account recovery mobile number, activated a 2SV device and created one app-specific password.

However, I still cannot log in using the FM iPhone app having tried both my master password and the server generated app password.

What am I missing ?

Am I meant to be using the master, or app password, and should I still append the 2SV code ?
CyberDyne is offline   Reply With Quote
Old 25 Jul 2016, 08:17 PM   #127
odedp
Master of the @
 
Join Date: Mar 2000
Location: Tel-Aviv, ISRAEL
Posts: 1,587
Quote:
Originally Posted by JamesHenderson View Post
I think nothing is compulsory, but it is recommended you add a recover email/phone and/or a second factor to your password.
James,

Say I want to add a second factor to my password.
How do I do it?
Thank you!
odedp is offline   Reply With Quote
Old 25 Jul 2016, 08:25 PM   #128
langreisboete
Junior Member
 
Join Date: Jul 2016
Posts: 9
Quote:
Originally Posted by edu View Post
Is it possible to use the app password without full access, or this option is deleted forever?. I think my account (and all my messages) could be in risk if my android smartphone is infected and the messages deleted, it was not like that before without full access. So?, is "pop only" the solution now?.
There is no solution. The upgrade of Fastmail actually downgraded my security in the two following ways.

The first one is the one you menton, before you had a base password with a 30 day restricted login. The app password won't work with their own app, so is stated on their own support page. https://www.fastmail.com/help/clients/apppassword.html If someone gain access to your smartphone, the ability to incur damage has therefore increased by this upgrade.

Secondly, the recovery code cannot be deleted once generated. Please be aware that this is just a 16 digit lowercase code, without special characters. Earlier FastMail recommended to use a reasonable base password with 2FA in addition to it, and use a long and strong master password and write & lock it down somewhere. How this can be an upgrade has yet to be known by me.
langreisboete is offline   Reply With Quote
Old 25 Jul 2016, 08:29 PM   #129
CyberDyne
Master of the @
 
Join Date: Sep 2004
Posts: 1,556
Quote:
Originally Posted by CyberDyne View Post
I've added an account recovery mobile number, activated a 2SV device and created one app-specific password.

However, I still cannot log in using the FM iPhone app having tried both my master password and the server generated app password.

What am I missing ?

Am I meant to be using the master, or app password, and should I still append the 2SV code ?
OK I've just worked out that on the Fastmail iPhone mobile app, the Production backend isnt asking for a 2SV code, whereas the Beta is. I'm now logged in.
CyberDyne is offline   Reply With Quote
Old 25 Jul 2016, 08:31 PM   #130
langreisboete
Junior Member
 
Join Date: Jul 2016
Posts: 9
Quote:
Originally Posted by CyberDyne View Post
OK I've just worked out that on the Fastmail iPhone mobile app, the Production backend isnt asking for a 2SV code, whereas the Beta is. I'm now logged in.
An app password cannot be used to log in on the web or the FastMail app.
https://www.fastmail.com/help/clients/apppassword.html
langreisboete is offline   Reply With Quote
Old 25 Jul 2016, 08:32 PM   #131
JamesHenderson
Essential Contributor
 
Join Date: Jan 2003
Location: Oxfordshire, UK
Posts: 433
Quote:
Originally Posted by odedp View Post
James,

Say I want to add a second factor to my password.
How do I do it?
Thank you!
1. Go to:Settings / Passwords and security
2. Type in your master password at the top (to give you access)
3. Add an account recovery phone number
4. Switch 2FA on
5. Add a verification device (you get a choice of app / U2F key / "old" yubikey"
6. Make a note of your recovery key (keep it safe and secure)

7. Then you can add device specific passwords (e.g.: for your phone etc)
J.
JamesHenderson is offline   Reply With Quote
Old 25 Jul 2016, 08:34 PM   #132
CyberDyne
Master of the @
 
Join Date: Sep 2004
Posts: 1,556
Quote:
Originally Posted by langreisboete View Post
An app password cannot be used to log in on the web or the FastMail app.
https://www.fastmail.com/help/clients/apppassword.html
No I should have made it clear I need my master password and then the 2SV code.
CyberDyne is offline   Reply With Quote
Old 25 Jul 2016, 08:40 PM   #133
edu
Senior Member
 
Join Date: Jun 2016
Posts: 170
Quote:
Originally Posted by langreisboete View Post
There is no solution. The upgrade of Fastmail actually downgraded my security in the two following ways.
What I mean is that if I create an "only pop" password app then it's supposed to work only in pop and so nobody can't delete messages (only read). It's not like imap. I haven't tested it yet but I suppose it must be the purpose of this pop only option, and so it would be like "not full acess" before, using it now in some email client (k9,etc).
edu is offline   Reply With Quote
Old 25 Jul 2016, 08:46 PM   #134
JamesHenderson
Essential Contributor
 
Join Date: Jan 2003
Location: Oxfordshire, UK
Posts: 433
Quote:
Originally Posted by edu View Post
What I mean is that if I create an "only pop" password app then it's supposed to work only in pop and so nobody can't delete messages (only read). It's not like imap. I haven't tested it yet but I suppose it must be the purpose of this pop only option, and so it would be like "not full acess" before, using it now in some email client (k9,etc).
yes and no (I think)

POP isn't full access (no contacts, no calendar...), but does't POP remove the message from the server on transfer to your device?
JamesHenderson is offline   Reply With Quote
Old 25 Jul 2016, 08:52 PM   #135
edu
Senior Member
 
Join Date: Jun 2016
Posts: 170
Quote:
Originally Posted by JamesHenderson View Post
yes and no (I think)

POP isn't full access (no contacts, no calendar...), but does't POP remove the message from the server on transfer to your device?
Not always, but I'm not sure in Fastmail or if that option exists. Normally pop only delete messages in your email client/device, not in the server.
edu is offline   Reply With Quote
Reply


Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is Off
HTML code is Off
Forum Jump


All times are GMT +9. The time now is 07:59 PM.

 

Copyright EmailDiscussions.com 1998-2013. All Rights Reserved. Privacy Policy