2 Factor Authentication for Crystal Email users

2 Factor Authentication/2FA

• The easiest way to turn on 2fa for your account is to click here: myaccount.google.com.
• For more information see the Google provided documentation.
• The steps from your GMail web interface are as follows: Click on the SBGrid icon in the upper left - Select 'Manage your Google Account' - On the left select 'Security' - in the middle select '2-Step Verification' and then complete the web forms.

Alternative 2FA options

You will need a phone to set up 2-Step Verification at first, however these options are available afterwards.

• Android based phone Google Prompts
• Apple Phone/iPad Google Prompts
• Android based Google Authenticator app
• Apple Phone/iPad Google Authenticator app
• Sign in using App Passwords
• Sign in using backup codes
• Sign in with a backup phone
• Sign in with a security key

Apple Mail and 2FA

After 2FA is enabled you will be prompted to re-authenticate your Apple Mail client. A drop down will appear in Mail.app. It is a good idea to have your phone handy for the initial process.

Click on the 'Open Safari' button

You will then be prompted for your Crystal Gsuite credentials. If other credentials are listed you will need to manually fill in your Crystal GSuite info.

Then procede with your password

On your device that you set up from myaccount.google.com you should receive a one time code.

Enter the code and then be sure to allow the permissions in the following screen.

You will likely not be prompted to do this again for some months.