We’re pleased to announce the addition of YubiKey OTP support to both webmail clients. This option is disabled by default, but can be enabled in preferences.
- For Roundcube: Settings -> Preferences -> Server Settings: “Require YubiKey OTP” and “YubiKey ID”
- For SquirrelMail: Options -> Personal Information: “Yubikey Options”
Two factor authentication is a security method of combining something you have (your YubiKey token) with something you know (your regular username and password). Both must be used together to gain access. But don’t lose your token: a lost token means you’re locked out even if you know your password, so make sure your token is kept in a safe location at all times.
For more information on YubiKey hardware go to: http://www.yubico.com/products/yubikey-hardware/yubikey/