kAuth is a free mobile application that enhances and simplifies the security of Infomaniak accounts protected by two-factor authentication (or double authentication). It is one of the methods that allows you to secure access to your Infomaniak user account.

Preamble

• Two-step verification protects your account and personal data when logging into Infomaniak tools (manager.infomaniak.com and mail.infomaniak.com) by asking for:
  1. your password
  2. and a second security method

• The app kAuth is one of these methods (learn more about 2FA)

  

Install the kAuth app

Prerequisites

• Have an Infomaniak account (know your username and password).
• Have an iOS or Android mobile device.
• From your iOS or Android mobile device, download the app **Infomaniak kAuth** here:
   

Install and open the application.

Then, you have two options to link your Infomaniak accounts to kAuth:

1. Log in from this mobile (recommended):
   1. Open the kAuth app from your mobile device.
   2. Click on Log in from this mobile.
   3. Enter the credentials for the Infomaniak account to link and authenticate your connection if necessary (need help?).
   4. Click the Authorize button.
2. Log in from a computer (if you choose this method, you will need a computer connected to the Internet):
   1. Open the kAuth app from a mobile device.
   2. Click on Log in from a computer.
   3. On your computer, open the page manager.infomaniak.com/2fa
      1. if double authentication is not yet activated: click on Activate and choose kAuth Application.
      2. if double authentication is already activated: click on Add an option then choose kAuth Application.
   4. On your mobile, click on Continue.
   5. If necessary, allow kAuth to access your camera (only required to scan the identification QR code).
   6. On your computer, click on Next to display the QR code to scan.
   7. Scan the QR code displayed on the computer.

Save the backup codes

If you have just activated two-step verification, the app will automatically display your 10 personal backup codes.

How the app works

When you attempt to log in to your account and after successfully entering your usual password, you receive a push notification on your mobile device asking you to authorize the connection ("YES / NO"), via a notification:

or directly in the app:

If the connection is authorized, the initial page is automatically redirected to the Infomaniak account. You do not need to manually enter a one-time code like with a traditional OTP application or a code sent by SMS.

And without an Internet connection?

The push notifications push do not work without an Internet connection, but kAuth also works without an Internet connection and always allows you to display a one-time code in the same way as an application OTP traditional:

1. Open kAuth from your mobile device.
2. Click on the relevant Infomaniak account.
3. Copy the one-time code (each code is valid for 30 seconds) on the login page:
   

You can always access your account while traveling or on vacation.

Add additional accounts

kAuth allows you to manage multiple Infomaniak accounts:

1. Open kAuth from your mobile device.
2. Click on the blue button ‍:
   
3. Repeat the steps described above to link the account.

Delete a kAuth account

To delete your Infomaniak identity from the kAuth app, you must disable the kAuth security method from the 2FA section of the Manager.

This guide explains how to disable two-factor authentication, also known as two-step verification (two-factor authentication in English, or 2FA) for logging into Manager Infomaniak (manager.infomaniak.com) or Mail Infomaniak (mail.infomaniak.com).

Disable 2FA

If two-step verification is enabled and you wish to disable it:

1. Click here to access 2FA management on the Manager Infomaniak.
2. Click on the Remove button to disable security:
   
3. Enter the password to log in to your account.

In case of trouble

Obviously, the procedure above requires logging in one last time with two-factor authentication to then be able to disable it.

If you do not have access to the kAuth application or the device that receives the validation SMS, there is no point in calling Infomaniak; in this case, you will have no choice but to provide a number of security elements manually or via the app Infomaniak Check (kCheck) to regain access to your account:

1. Click here to access the login page for Manager Infomaniak.
2. Enter the username and the usual and correct password.
3. When prompted for additional authentication, click on the alternative methods:
   
4. Choose to enter one of your backup codes if you had downloaded the sheet when activating 2FA:
   
5. Otherwise, select the last option to request help to access the form allowing you to submit your ID documents and recognition selfie:
   
6. Follow the procedure to the end and wait:
   

This guide explains how to enable two-step verification, also known as two-factor authentication (2FA) or multi-factor authentication, to secure your connection to your Manager Infomaniak.

Preamble

• This two-step verification protects your account and personal data with your chosen password and a second method of identity verification, such as a code obtained on your mobile device.
• If a malicious person were to crack or steal your password, they would still need a validation code that only the legitimate user can obtain on their mobile device.
• Refer to this other guide if you are an administrator of an Organization and wish to enforce 2FA on all users who have not yet activated it.

Enable two-step verification

To increase the security level of your Infomaniak account:

1. Click here to access the management of two-step verification on the Infomaniak Manager.
2. Display and choose the authentication method from:
   1. The app kAuth for iOS / Android devices to simply tap a push notification YES / NO to authorize or deny the connection
   2. Any OTP application to obtain a unique connection code at a given time
   3. YubiKey (from Yubico)
   4. SMS reception (only for countries CH / FR / BE / DE) to obtain a unique connection code at a given time

Follow the on-screen instructions to complete the procedure.

Keep the backup codes safe.

Be mindful of existing synchronizations

Once strong authentication is activated, to access certain tools (such as synchronization tools) it is necessary to create application passwords.

There is no need to call Infomaniak as they do not have any of your codes & passwords in their possession. For any help request regarding 2FA, refer to this other guide.

Authenticate on every browser opening

To request not to save cookies when closing browser windows, and thus request authentication each time you access the Infomaniak Manager when you restart the browser…

... on Chrome

Specify in Google Chrome settings (chrome://settings/content/siteData to paste into the address bar or refer to the official documentation) the address [*.]infomaniak.com:

This guide explains how to force users in your Organization to enable the double authentication (2FA) feature, and then verify that it remains activated.

Introduction

• Every Infomaniak user has the option to enable two-step verification for accessing their account, which significantly enhances the security of all the Organization's services…
  • A legal representative can require this activation otherwise the user will no longer be able to access the Manager and Web apps.
  • Access to desktop apps (desktop application on macOS / Windows / Linux) and mobile apps (application for iOS / Android smartphone or tablet) will always be possible without 2FA.
• It is recommended to notify users of your Organization in advance, so that they can continue to use the services.
• If an external user does not wish to perform the operation requested by an administrator of the Organisation, they can choose to leave instead of activating it.

Identify users without 2FA

You can easily identify the people who have not yet activated this security on their account:

1. Click here to access the management of your Organization's users.
2. This red symbol indicates that 2FA is not activated:
   
3. You can also filter long lists with this specific criterion to display only users who have not yet activated 2FA:
   
   
    
4. To easily alert a user about the security of their account, click on the action menu ⋮ located to their right.
5. Click on Send a security alert to send an automatic email to the user informing them of their various settings:
   

Enforce 2FA activation

Prerequisites

• To be Administrator or Legal Representative‍ within the Organization.

To access the settings:

1. Click here to access the security management of the Organization on the Infomaniak Manager (need help?).
2. Click on the toggle switch to enable an additional login verification to be required for all users of the Organization:
   
3. Confirm the activation of the feature in the window that opens.
4. Once the feature is activated, users of the Organization who have not yet activated 2FA will receive a message (as soon as they perform their next action on their account) prompting them to set up an additional authentication method from those offered and thus preventing them from performing any other action before doing so:
   
    

This guide explains how to regain access to Infomaniak tools (manager.infomaniak.com and mail.infomaniak.com) in case of forgotten password or login identifier.

Preamble

• To log in within an Organization that manages one or more Infomaniak products, go to https://manager.infomaniak.com/ and enter the following information:
  1. A login email address (identifier).
  2. The password chosen during your registration.
  3. A additional code if 2FA (two-factor authentication) is active.
• If you can log in to the platform but need a password for one of your email addresses, refer to this other guide.
• If the issue is rather a display problem with the login form, particularly with a mobile device, refer to this other guide on the subject.

You have forgotten...

... the password for the user account

In case you forget this password, follow the reset procedure:

1. Click here to reset your password.
2. Enter the email address associated with your Infomaniak account
3. Choose the desired recovery option or follow the identity verification procedure by clicking on “You have no access to any option”.

... the login email address for the user account

When you signed up, you had to provide a phone number; it is possible to recover the login email address using your phone number:

1. Click here to retrieve your login email address.
2. Enter your mobile number.
3. Enter (if necessary) your recovery email address.

Two scenarios are then possible:

1. The system manages to identify your account: then choose how to receive your login identifier.
2. In the opposite case: follow the on-screen assistant to manually verify your identity or via kCheck:
   

And if the email address no longer exists…

If you have an Infomaniak account where the login ID is in the form of toto123@yahoo.com, there is no issue if the email address toto123@yahoo.com is deleted or no longer valid. You just need to log in one last time to the Infomaniak Manager with this ID toto123@yahoo.com and follow this other guide to change your login email address.

However, if the email address used as the identifier is hosted by Infomaniak (e.g., anna789@assoziation.ch) and an administrator deletes the email address in question or cancels the Mail Service “assoziation.ch”, the situation is different: you automatically receive an email at the secondary address and an SMS on the mobile phone number specified in your user account:

Connecting using your old "email address/password" combination will no longer work. You must follow the SMS instructions:

1. Click here to access the login page.
2. Enter the username specified in the SMS (usually the initials of your account and a series of numbers).
3. Enter the usual password (it has not changed).
4. Enter the requested new information.
5. You will be logged back into your account.

The following animation demonstrates this procedure called Infomaniak-Recovery" (or “connection address being changed” for kSuite users:

1. The impossible connection with the old credentials...
2. Mandatory connection using the SMS information…
3. And the update of the information for reconnection:
   
   

This guide concerns the mobile app kCheck (application for iOS/Android smartphone or tablet), created to simplify identity verification procedures and strengthen the security of your Infomaniak account.

Preamble

• For security reasons, to ensure the identity of the person making a specific request to Infomaniak, an identity verification procedure may be triggered in the following cases (non-exhaustive list):
  • user password forgotten
  • login email address forgotten
  • deactivation of two-factor authentication (2FA)
  • unlocking an Infomaniak account
  • during the first transfer of revenue for the product Billetterie
  • when ordering a product (suspicion of spam or fraud, brand name, etc.)
• This app allows you to securely transfer the requested items.
• Infomaniak respects your privacy: the information transmitted via the kCheck application will be kept until your file is fully processed; it will in any case be automatically deleted after 72 hours if this request is not processed.

Start the identity verification

Prerequisites

• A QR code or a link provided by Infomaniak.
• The mobile app kCheck installed on your device iOS (iPhone, etc.) or Android.
• An internet connection on the mobile device.

You can then have your identity verified with kCheck:

1. Launch the kCheck app on your mobile device.
2. Tap Start.
3. Press Scan a QR code.
4. Point the QR code at the camera.
5. Enter your mobile phone number.
6. Enter the confirmation code received.
7. Enable location services (required to continue the procedure).
8. Select the type of ID you have (ID card or passport).
9. Follow the steps to photograph your ID.
10. Take a selfie (of yourself) holding your ID in front of you.

Your documents will then be securely transmitted to Infomaniak support. These requests are processed on a priority basis with an average response time of 2 hours during opening hours.

If your order is blocked...

For security reasons, some orders may be automatically blocked.

When you place your order, an email is sent to the email address associated with your Infomaniak Manager account. This email contains the procedure to unblock your order. If you cannot find it, you can resend it from your Manager by clicking on Resend procedure from the red banner‍ informing you of the blockage.

Prerequisites

• Open the email containing the unlocking procedure.
• The mobile app kCheck installed on your device iOS (iPhone, etc.) or Android.
• An internet connection on the mobile device.

You can then start the unlocking procedure with kCheck:

1. Launch the kCheck app on your mobile device.
2. Tap Start.
3. Press Scan a QR code.
4. Scan the QR code in the email.
5. Follow the unlocking procedure to the end.

Special cases

• If you do not respond within 10 days, the order will be automatically canceled and the payment will be fully refunded to the payment method used.
• If you do not have a mobile device to follow this procedure, contact Infomaniak support.

This guide details how to restore a Windows-equipped computer using Swiss Backup the backup solution in an independent Swiss cloud.

Prerequisites

• Have a backup of the computer on Swiss Backup (refer to this other guide).
• Familiarize yourself with the Acronis documentation regarding the recovery of physical machines.
• The computer to be restored must be connected to the Internet via Ethernet cable (or WiFi depending on the computer's capabilities).

Restore the backup

To begin, from the computer in question or any other machine:

1. Click here to access the Acronis Console with the credentials obtained after adding the device (need help?).
2. Click on Devices in the left sidebar
3. Click on the Restore button on your relevant backup plan
4. Click on the other ways to restore at the top of the interface:
   

Browse through the backed-up files

If necessary, locally or remotely, you can first simply restore the files you need:

1. Click on the Download files button (in the Browse Cloud Storage section).
2. Open the relevant backup.
3. Enter the encryption password if necessary.
4. Browse the directory, select your files:
   
5. Click on Download to obtain a .zip containing your selected files

Also, refer to this other guide.

Create a boot disk (on a USB key, for example)

To create a Windows boot disk and allow the restoration of a computer:

1. Click on the button Download an ISO image (in the Restore an entire machine section).
2. Write down the code in the form AA11-BB22-CC33 that appears on the screen (more information):
   
3. Use software like Etcher to create a bootable disk from the downloaded .iso file.

Boot the computer from the removable media

Start the computer from this boot disk (by pressing the required key according to your machine: F1, F2, F10, F12, DEL, etc.) then follow the steps below:

1. Click on Rescue Media:
   
2. Connect the computer via Ethernet (or if necessary, configure the WiFi from the link located on the right side of the interface if the computer allows it) then click on Manage the device locally:
   
3. Click on Restore:
   
4. Click on Select data...
   
5. Click the Browse button:
   
6. Under Cloud Storage click on either:
   1. Log In and use the Acronis credentials (in the form SBA-XXXX-ADMIN) to authenticate (the keyboard is set to EN-US by default, make sure to type the word in plain text to verify if necessary):
      
   2. OR Use the registration code if you have 2FA enabled, by following the proposed procedure (which involves requesting a temporary code (in the form ABCD-ABCD) and then going to the page https://acronis.infomaniak.com/ui/#w=agentRegistration to enter this code once logged into your Acronis account):
      
7. Click on your Acronis account ID and proceed to access the backups (the encryption password will be requested if it had been activated - see point 12 of this guide).
8. Choose the workstation, the restore point and the volumes (disks) to restore:
   
   Useful information:
   • Use the arrow to the left of the workstation names to display the backups…
   • The first table at the top allows you to choose the workstation and the backup to restore…
   • The second table allows you to choose the content (the disks) of the backup to restore…
9. Click on OK to continue.
10. Match the original and destination volumes:
    
    Useful information:
    • For each volume or disk of the source backup, click on Required to choose where to restore the data.
    • Under Restore Options, it is recommended to check the box Automatic Restart.
11. Click on OK to start the restoration.

This guide provides instructions to synchronize kDrive with a VPS (or vice versa) via the WebDAV protocol found in the rClone application.

Prerequisites

• Have a VPS.
• Know your kDrive identifier (kDrive ID).

Synchronize kDrive and VPS via rClone

The operation allows you to retrieve in real-time the files and folders from kDrive and to read, create or modify these files from your VPS while ensuring that they are synchronized again on the kDrive server. An rClone mount point can be created with a folder on your VPS to manipulate these kDrive files.

Refer to the rClone documentation if you are looking for information about the available options:

1. Example of rClone command:

   • rclone mount kdrive:/My_kDrive_Folder_Path /home/ubuntu/Target_Folder_Path --vfs-cache-mode full --vfs-cache-max-age 24h --vfs-cache-max-size 10G --cache-dir /home/ubuntu/rclone/cache --daemon --allow-other --dir-cache-time 1h --log-file /home/ubuntu/rclone/rclone.log --log-level INFO

   • The --daemon attribute of this command allows you to start the synchronization in the background because without it, this sync ends with each disconnection of the VPS…
2. Example of an rClone configuration file:

   • [kdrive]
     type = webdav
     url = https://***.connect.kdrive.infomaniak.com/***
     vendor = other
     user = ***
     pass = ***

   • Server address: https://IDkDrive.connect.kdrive.infomaniak.com (see the prerequisites above)
   • Username: email address to log in to the Infomaniak user account
   • Password: application password if two-factor authentication is enabled or ‍your Infomaniak user account password if you have not enabled 2FA

This guide explains how to enable two-factor authentication, also known as two-factor authentication (2FA) or two-step verification for logging into the Acronis application used with Swiss Backup.

Setting up two-factor authentication

Two-factor authentication (2FA) is a type of multi-factor authentication that verifies a user's identity by using a combination of two different factors:

• something the user knows (a PIN code or a password)
• something that a user possesses (a token)
• something that is part of the user (biometrics)

Two-factor authentication provides additional protection against unauthorized access to your account.

The platform is compatible with authentication by time-based one-time password (TOTP). If TOTP authentication is enabled in the system, users must enter their usual password as well as the unique TOTP code to access the system. In other words, a user provides the password (first factor) and the TOTP code (second factor). The TOTP code is generated in the authentication application of the device that applies the second factor, based on the current time and the secret code (QR code or alphanumeric code) provided by the platform.

How it works

How 2FA works:

1. You enable two-factor authentication at the organizational level.
2. All organization users must install an authentication app on the device that applies the second factor (mobile phone, laptop or desktop, or tablet) and that will be used to generate unique TOTP codes, for example:
   • Google Authenticator iOS / Android
   • Microsoft Authenticator iOS / Android
3. Users must ensure that the time displayed on the device where the authentication application is installed is correctly set and accurately reflects the current time.
4. The users in your organization must log back into the system.
5. After entering their username and password, they will be prompted to set up two-factor authentication for their user account.
6. They must scan the QR code using their authentication app. If they are unable to scan the QR code, they can use the TOTP secret code displayed below and add it manually to the authentication app:
   • It is strongly recommended to record it (print the QR code, write down the TOTP secret code, use the application compatible with code backup in a Cloud). You will need the TOTP secret code to reset two-factor authentication if you lose the device that applies the second factor.
7. The unique TOTP code will be generated in the authentication application. It is automatically regenerated every 30 seconds.
8. On the «Set up two-factor authentication» screen, users must enter the TOTP code after entering their password.
9. As a result, two-factor authentication will be set up for users.

From now on, when users log in to the system, they will be prompted to enter the username and password, then the unique TOTP code generated in the authentication application. Users can indicate that the browser is a trusted browser when they log in to the system. The TOTP code will not be requested during subsequent logins made with this browser.

Two-factor authentication

Two-factor authentication provides additional protection against unauthorized access to your account. When two-factor authentication is set up, you must enter your password (first factor) and a unique code (second factor) to log in to the service console. The unique code is generated by a special application that must be installed on your mobile phone or another device you own. Even if someone discovers your username and password, they still won't be able to log in without accessing the device that applies the second factor.

The unique code to set up two-factor authentication for your account is generated based on the current time of the device, as well as the secret code provided by the service Cyber Protection in the form of a QR code or an alphanumeric code. When you first log in, you must enter this secret code into the authentication application.

Set up two-factor authentication for your account

You can and should set up two-factor authentication for your account when two-factor authentication has been enabled by an administrator for your organization. If two-factor authentication was enabled while you were logged into the service console Cyber Protection, you will need to set it up at the end of your current session.

Prerequisites

• Two-factor authentication must be enabled for your organization.
• You must be logged out of the Cyber Protection service console.

Next:

1. Choose a device for the second factor. This is often a smartphone, but you can also use a tablet, laptop, or desktop computer.
2. Make sure the time displayed on the device is correctly set and reflects the current time, and that the device locks itself after a period of inactivity.
3. Install the authentication app on the device. Possible apps include Google Authenticator, Authy, etc.
4. Go to the login page of the service console Cyber Protection and set your password. The service console displays the QR code and the alphanumeric code.
5. Save the QR code and the alphanumeric code in a convenient way (e.g., print the screen, write down the code or save the screenshot in the Cloud storage). If you lose the device that applies the second factor, you will be able to reset the two-factor authentication using these codes.
6. Open the authentication app, then perform one of the following actions:
   • scan the QR code
   • Enter the alphanumeric code manually into the application (the authentication application generates a unique code; a new code will be generated every 30 seconds).
7. Go back to the service console login page and enter the generated code. A unique code is valid for 30 seconds. If you wait more than 30 seconds, use the code generated just after.

On your next login, you can select the box Trust this browser… In this case, the unique code will not be required for your login with this browser on this machine.

What if...

… I have lost the device that applies the second factor?

If you have a trusted browser, you can log in using it. However, when you get a new device, repeat steps 1 to 3 and 6 to 7 of the procedure above using the new device and the stored QR code or alphanumeric code.

If you did not record the code, ask your administrator or support Infomaniak to reset two-factor authentication for your account, then repeat steps 1 to 3, and 6 and 7 of the procedure above using the new device.

… I want to change the device that applies the second factor?

When logging in, click on the link Reset two-factor authentication‍, confirm the operation by entering the unique code, then repeat the procedure above using the new device.

This guide provides instructions to synchronize kDrive with a NAS Synology (or vice versa) via the WebDAV protocol found in the Cloud Sync application.

Prerequisites

• Have a Synology NAS accessible from the Internet.
• Know your kDrive identifier (kDrive ID).

Synchronize kDrive and Synology via Cloud Sync

To do this:

1. Log in to the Synology DiskStation Manager (DSM).
2. If necessary, download and install the app Cloud Sync from the Package Center.
3. Open Cloud Sync.
4. Click on the + at the bottom left to add a Cloud.
5. Select WebDAV at the bottom of the list of available Clouds:
   
6. For the account settings, use the following information:
   1. Server address: https://IDkDrive.connect.kdrive.infomaniak.com (see prerequisites above)
   2. Username: email address to log in to the Infomaniak user account
   3. Password: application password if two-factor authentication is enabled or‍ the one for your Infomaniak user account if you have not enabled 2FA
7. Choose the local folder, destination and desired synchronization type:
   
   • Bidirectional: changes made will be reflected in both directions.
   • Download only remote changes: ideal for backing up a kDrive to your NAS.
   • Download only local changes: ideal for backing up data from your NAS to a kDrive.

This guide explains how to store the database of Joplin on your kDrive Infomaniak and connect your various devices via the WebDAV protocol. You thus keep your notes safe in a storage medium located in Switzerland.

Preamble

• Joplin is a free and open-source note-taking tool that allows you to organize all your notes within folders and access them from any device (computer, mobile device, etc.)
• Joplin will store several of its configuration files, so to avoid cluttering your kDrive directories, it is recommended to create a dedicated folder in your personal directory on kDrive, with a simple folder name like "joplin", for example, and then specify it at the end of the WebDAV link in step 7 below:
  

Set up Joplin to use kDrive via WebDAV

Prerequisites

• Download Joplin
• Know your kDrive identifier (kDrive ID).

The example below is essentially the same for all versions of Joplin:

1. Open the Joplin application.
2. Click on the menu at the top left:
   
3. Click on Settings:
   
4. Click on Synchronization.
5. Press the menu to select a target.
6. Select the **WebDAV** mode:
   
7. For the account settings, use the following information:
   1. Server address: https://IDkDrive.connect.kdrive.infomaniak.com/joplin (or /folder-name — read the preamble above)
   2. Username: email address used to log in to the Infomaniak user account
   3. Password: application password if two-factor authentication is enabled or‍ the one for your Infomaniak user account if you haven't enabled 2FA
8. Click on the synchronization test and wait for the connection confirmation below:
   
9. Tap on the top left to return to the previous menu and tap on Synchronize to create files on kDrive:
   
10. Go back to your notes to start working.

This guide explains how to connect the desktop apps Contacts and Calendar (desktop applications on macOS) with the contacts & calendars hosted at Infomaniak.

Preamble

• Your macOS computer will be automatically configured using .mobileconfig configuration profiles compatible with Apple, unlike a manual configuration.
• Infomaniak contacts & calendars are linked to your Infomaniak user account. When you log in to contacts.infomaniak.com or calendar.infomaniak.com you will likely have to perform double validation (2FA) during login.
  • In this case, an application password is required to establish synchronization between your device and Infomaniak tools.
  • But don't worry, creating such a password is offered by following the configuration assistant (point 4 below).
• It is possible to delete a configuration profile once installed (scroll to the bottom of this page for explanations).
• The Infomaniak tools are compatible with any application supporting CardDAV/CalDAV.
  • For additional help, contact the support of the software used or a Partner — also discover the role of the host.

Install a configuration profile

For this:

1. Click here to access the Infomaniak configuration tool (online service https://config.infomaniak.com) — log in if necessary to your Infomaniak account on the Organization managing your email address.
2. Choose to install the profile on this device.
3. Choose to synchronize the contacts & calendars.
4. Generate an application password dedicated to synchronization (in order to maintain the usual 2FA connection of your user account):
   
5. Copy the generated application password (it will be requested during the installation of the Apple profile).
6. Download the Apple profile:
   
7. Open the System Settings of the computer.
8. Click on General in the sidebar, then click on Device Management (for macOS Sequoia 15 version). If you have a lower version or cannot find the profile, refer to the official documentation by changing the system version at the top of the page if necessary:
   
9. Click on +:
   
10. Locate and then open the previously downloaded file:
    
11. Click on Continue:
    
12. Enter the application password twice (contacts + calendars).

If your macOS applications Contacts and Calendar were already open, you need to restart them. You will then see the information added by the synchronization.

Contacts Features

Display shared address books

The Sync server applies a restriction to the macOS Contacts application because this application does not support multiple address books for the same account. Synchronization therefore only returns the default address book. You need to use another CardDAV software (e.g., Thunderbird) to access all address books.

Contact list/group/folder

In the macOS Contacts app, you can add contact lists (or groups), but the information indicating which contacts belong to which list will not be synchronized with contacts.infomaniak.com:

Therefore, if you want to remove these lists, you must press the DEL key on your keyboard after selecting the list to delete (this does not delete the contacts).

On the other hand, a folder (or group) that you can configure on **contacts.infomaniak.com** from the editing of a contact card (see below) is not synchronized with the **Contacts** application on macOS:

Calendar Features

Display shared calendars

By default, only your personal calendars are displayed in the Calendar application. Here is an example of synchronization between multiple calendars from multiple Organizations (to which the user account specified in the macOS application is linked).

Calendar Infomaniak:

macOS:

To display calendars shared by another user:

1. Open the Calendar application.
2. Open the Calendar menu.
3. Click on Preferences.
4. Go to the Accounts tab.
5. Go to the Delegation tab:
   
6. Check the shared calendars to display.

Delete a CardDAV or CalDAV account

Refer to the chapter "Stop using an account" by changing the system version at the top of the page* if necessary.

Delete an Apple profile

Refer to the official documentation by changing the system version at the top of the page* if necessary.

*Why is it necessary to choose the guide version that exactly matches your macOS / iOS system version? Apple introduces sometimes subtle changes with each new version of its system, for example a path on iOS 15…

… becomes this on iOS 18…

This guide provides instructions for connecting to kDrive using the WebDAV connection protocol.

Preamble

• Connecting via WebDAV allows, among other things…
  • … to use your preferred WebDAV application instead of the official kDrive application (only solution if the latter is unavailable on your OS, for example macOS 10.14.6)
  • … to use kDrive as a synchronization base for a tool that would allow this via WebDAV (e.g., Joplin).
  • … to access kDrive from your operating system's file manager.

Get the identifier (kDrive ID)

To find out your kDrive ID:

1. Click here to access the Web app kDrive Infomaniak (online service kdrive.infomaniak.com).
2. The kDrive file structure appears in the left sidebar.
3. The URL https://kdrive.infomaniak.com/app/drive/123456 displayed at the top of your browser contains a number:
   

This number (in the example 123456) is your kDrive identifier (IDkDrive).

You will therefore need to write https://IDkDrive‍.connect.kdrive.infomaniak.com whenever necessary (https://123456.connect.kdrive.infomaniak.com for example as a WebDAV address).

Connect to kDrive via WebDAV…

... on Windows

To do this:

1. Open the File Explorer from the taskbar or the Start menu.
2. Select This PC from the left pane.
3. In the Computer tab, select Add a network location:
   
4. Click on Next.
5. Click on Choose a custom network location:
    
6. Click on Next.
7. Enter the server address: https://IDkDrive.connect.kdrive.infomaniak.com
8. Click on Next.
9. For the account settings, use the following information:
   • Server address: https://IDkDrive.connect.kdrive.infomaniak.com (read the ID kDrive chapter above)
   • Username: email address used to log in to the Infomaniak user account
   • Password: application password if two-factor authentication is enabled or‍ the one for your Infomaniak user account if you have not enabled 2FA
10. If desired, click the box to save the connection information.
11. Enter a name for this connection or leave the default indication.
12. Click on Finish.
13. Two folders will appear, one containing deleted files & folders, the other with the name of your kDrive and containing your data.

... on macOS

For a macOS computer, follow the Apple instructions, which may result in this:

1. Click on the Go menu from the Finder.
2. Click on Connect to Server:
   
3. Enter the server address: https://IDkDrive.connect.kdrive.infomaniak.com (read the ID kDrive chapter above)
4. Click on Connect:
   
5. Confirm the connection by clicking the blue button.
6. Enter the following information:
   • Username: email address used to log in to the Infomaniak user account
   • Password: application password if two-factor authentication is enabled or‍ the one for your Infomaniak user account if you have not enabled 2FA
7. If desired, click the box to save the connection information.
8. Click on the blue button to connect:
   
9. Here it is, the kDrive content is displayed on the Finder:
   

... on Linux (Gnome)

To do this:

1. Open Files.
2. In the sidebar, click on Other location.
3. In the Server Connection field, enter davs://IDkDrive.connect.kdrive.infomaniak.com
4. Click on Connect.
5. For the account settings, use the following information:
   • Server address: https://IDkDrive.connect.kdrive.infomaniak.com (read the ID kDrive chapter above)
   • Username: email address used to log in to the Infomaniak user account
   • Password: application password if two-factor authentication is enabled or‍ the one for your Infomaniak user account if you have not enabled 2FA
6. Click on Connect.

... with a Windows software

Use the software RaiDrive for quick access to your hosted data. Fill in the fields as shown in the image below:

... with a Windows or macOS software

Use the software Cyberduck for quick access to your hosted data:

1. Open Cyberduck.
2. In the software menu, go to Bookmark then to New bookmark.
3. Choose the protocol WebDAV (https).
4. Enter the following information:
   • Server address: https://IDkDrive.connect.kdrive.infomaniak.com (read the ID kDrive chapter above)
   • Username: email address used to log in to the Infomaniak user account
   • Password: application password if two-factor authentication is enabled or‍ the one for your Infomaniak user account if you have not enabled 2FA
   • Download folder: the folder where downloaded files will be stored

Direct WebDAV connection URL to a specific folder

To facilitate a direct connection via WebDAV to a specific folder, you can use the following URL:

https://XXXXXX.connect.kdrive.infomaniak.com/Common documents/folder-name

This simple method allows you to quickly access the desired folder without manually navigating the directory structure. You just need to replace « folder-name » with the exact name of the targeted folder to establish a direct and secure connection via WebDAV.

This guide provides instructions to synchronize kDrive with a NAS Qnap (or vice versa) using the WebDAV protocol found in the HBS 3 Hybrid Backup Sync application.

Prerequisites

• Have a Qnap NAS accessible from the Internet.
• Know your kDrive identifier (kDrive ID).

Synchronize kDrive and Qnap via HBS 3

To do this:

1. Log in to the Qnap NAS administration interface (QTS).
2. If necessary, download and install the app HBS 3 Hybrid Backup Sync.
3. Open HBS 3.
4. Go to Sync from the left menu.
5. Create a synchronization task (Two-way Sync Job).
6. Select WebDAV from the list of Cloud providers:
   
7. For the account settings, use the following information:
    
   • Server address: https://IDkDrive.connect.kdrive.infomaniak.com (see prerequisites above)
   • Username: email address used to log in to the Infomaniak user account
   • Password: application password if two-factor authentication is enabled or ‍the one for your Infomaniak user account if you have not enabled 2FA
8. Select the local and destination folders:
   
9. Customize the task frequency.
10. Finish the assistant.

This guide explains how to import external data (files, folders, etc.) into your kDrive using the WebDAV protocol.

Preamble

• Refer to this other guide if you are looking for information on how to copy specific data from one kDrive to another when your user has access to both kDrive accounts.

Import external data via WebDAV

To access the import tool, where the data needs to be imported:

1. Click here to access the Web app kDrive Infomaniak (online service kdrive.infomaniak.com).
2. Click on the Settings icon ‍ at the top right.
3. Check or select the kDrive in question from the dropdown menu on the left sidebar.
4. Click on General in the left sidebar.
5. Click on Import external data:
   
6. Click the blue Start button.
7. Click on WebDAV.
8. Fill in the required information based on the source (especially the WebDAV address you have - obtained from the source).
9. Select the destination kDrive and the desired location to store the imported data.
10. Click on Start:
    

Example: copy data from an external kDrive to the Organization

To import a kDrive that would be outside of the Organization in which your destination kDrive is located, you must enter the following information at point 9 above (your credentials will be used exclusively to import your data; they will be immediately deleted at the end of the process):

• Username: email address to log in to the Infomaniak user account
• Password: application password if two-factor authentication is enabled or‍ the one from your Infomaniak user account if you have not enabled 2FA
• Entry point: direct access to kDrive (refer to this other guide regarding the kDrive ID for the connection URL)
  • It is possible to choose a subfolder as the source folder, by combining the kDrive ID and the desired folder by entering for example https://IDkDrive.connect.kdrive.infomaniak.com/My/Subfolder or https://IDkDrive.connect.kdrive.infomaniak.com/MykDrive/My/Subfolder

This guide details how to import data from iCloud using rClone on kDrive Infomaniak.

Preamble

• Since Apple does not offer an API like its competitors, one solution to retrieve documents from an iCloud Drive is to install the kDrive macOS app to synchronize the icloud folder, which should be in your library. The guide below offers a solid alternative.
• kDrive supports rclone streaming upload via WebDAV, up to 50 Go (extendable to 100 Go) to prevent abuse, with automatic error handling if the limit is exceeded without prior specification of the size via Content-Length.

1. Set up rclone for drive access

Installing rclone on your computer

There is a version of rclone with a graphical interface (GUI) but it is quite possible to do this via command line (CLI):

1. Install rclone from a terminal application on your device by entering the following command:
   sudo -v ; curl https://rclone.org/install.sh | sudo bash
2. Enter the password for your session on your computer to start the installation:
   
   • Refer to the official installation guide if necessary.

Configuring the remote drive (iCloud) on rclone

1. Once rclone is installed, enter the command rclone config.
   • Refer to the official configuration guide if necessary.
2. Then choose to configure a new remote import by answering n for New remote.
3. Name the remote disk, for example appledrive:
   
4. Then choose the type of disk to import by answering iclouddrive which corresponds to iCloud Drive among the choices offered.
5. Tell rclone the apple_id by entering your Apple ID (usually an email address).
6. Choose to use your own password linked to the Apple ID account (y).
7. Enter your password twice as prompted:
   
8. Answer “No” n to the question about “advanced configuration”.
9. A window on your device should open to warn you about a remote connection; authorize it:
   
10. A window on your device should open with a 2FA code; copy it:
    
11. Paste the code when rclone it asks you.
12. Answer “Yes” y to the last question if all the presented information is correct.

Configuration of the destination disk (kDrive) on rclone

It is possible to act directly on the configuration file of rclone by pasting your kDrive configuration in the following format, for example:

[kDrive]
type = webdav
url = https://kDrive_ID_HERE.connect.kdrive.infomaniak.com/
vendor = other
user = user@email.com
pass = PASSWORD_HERE_OR_APP_PASSWORD_IF_2FA

But here is how to proceed step by step, just like for the previous configuration:

1. Still in the terminal, enter n for a new disk configuration and enter the name kDrive to recognize your destination disk:
   
2. Then choose the type of disk to import by answering webdav which corresponds to a WebDAV configuration from the options provided.
3. Enter the following information:
   • url = direct access to kDrive (refer to this other guide regarding the kDrive ID for the connection URL)
   • vendor = rclone (option number 6)
   • user = email address to log in to the Infomaniak user account
4. Answer “Yes” y when prompted for the password, then enter the password:
   • application password if two-factor authentication is enabled or‍ the one for your Infomaniak user account if you have not enabled 2FA.
5. Leave bearer_token empty then answer “No” n to the question about “advanced configuration”.
6. Answer “Yes” y to the last question and your 2 disks will be displayed:
   ‍

2. Copy iCloud data to kDrive

Prerequisites

• Check the available options on the official guide before starting an import.

Example command to start copying your iCloud data to the root of your kDrive:

sudo rclone copy appledrive: kDrive:

This will instantly start copying your folders, subfolders, and iCloud contents to your personal folder on your Infomaniak kDrive!

Details about the dates of your exported photos

If you export your photos from iCloud to kDrive Infomaniak, be mindful of the date metadata. During export, the file creation dates may be altered and replaced with the export date instead of the original capture date.

Here is a script for advanced users that allows you to restore the correct data to your files from the EXIF information (it is recommended to process batches of 7000 photos max. to avoid a crash):

1. Download ExifTool https://exiftool.org/index.html (macOS Package).
2. Install the application by allowing it to open first if necessary:
   
3. Open Script Editor (located in your Applications > Utilities folder):
   
4. Click on New document.
5. Copy and paste the long script provided below into the Script Editor window.
6. Click on Run to start the script, a window opens:
   
7. Select the folder to analyze.
8. Let the script run, it will modify the dates or write errors in a file errors.txt on the desktop.

The script to copy and paste in full:

-- replace file date with EXIF creation date or date from name after the first dash -

tell application "Finder"
    set FolderPath to choose folder with prompt "Select the folder containing the files to update"
    my processFolder(FolderPath)
end tell

on processFolder(aFolder)
    tell application "Finder"
        -- process files:
        set fileList to files of aFolder
        repeat with eachFile in fileList
            -- process a single file
            
            set theFile to eachFile
            set AppleScript's text item delimiters to {""}
            set fileName to name of eachFile --get the file name
            
            set eachFile to eachFile as string --file path
            set hasDate to true --initialize date found flag
            
            try
                --get date if available
                set photoDate to do shell script "/usr/local/bin/exiftool -DateTimeOriginal " & quoted form of POSIX path of eachFile
                if photoDate is "" then set photoDate to do shell script "/usr/local/bin/exiftool -CreationDate " & quoted form of POSIX path of eachFile
                if photoDate is "" then set photoDate to do shell script "/usr/local/bin/exiftool -CreateDate " & quoted form of POSIX path of eachFile
                
                if photoDate is "" then
                    set hasDate to false --check if date was found
                end if
                
            on error
                set hasDate to false -- error retrieving date
                set photoDate to ""
            end try
            
            if length of photoDate > 20 then
                --format extracted date
                set x to (length of photoDate) - 33
                set OriginalDate to text -x thru -1 of photoDate
                set formattedDate to text 1 thru 5 of OriginalDate
                set theYear to formattedDate
                set formattedDate to formattedDate & text 7 thru 8 of OriginalDate
                set theMonth to text 7 thru 8 of OriginalDate
                set formattedDate to formattedDate & text 10 thru 11 of OriginalDate
                set theDay to text 10 thru 11 of OriginalDate
                set formattedDate to formattedDate & text 13 thru 14 of OriginalDate
                set theHour to text 13 thru 14 of OriginalDate
                set formattedDate to formattedDate & text 16 thru 17 of OriginalDate
                set theMinute to text 16 thru 17 of OriginalDate
                set formattedDate to formattedDate & "." & text 19 thru 20 of OriginalDate
                set theSecond to text 19 thru 20 of OriginalDate
                set newName to theYear & "-" & theMonth & "-" & theDay & " " & theHour & "." & theMinute & "." & theSecond
                
                set testValue to formattedDate as string --check if found date is 000
                if testValue is " 000000000000.00" then
                    set hasDate to false
                else
                    -- set file date to original EXIF date and write to log
                    do shell script "touch -t " & formattedDate & " " & quoted form of POSIX path of eachFile
                    set logFile to open for access ((path to desktop folder as text) & "Date Found.txt") as text with write permission
                    write "Original date found for file: " & OriginalDate & " " & eachFile & return to logFile starting at eof
                    close access logFile
                end if
            end if
            
            if hasDate is false then
                -- get date from file name after first dash
                set nb to ""
                set nameDate to ""
                set fileName to fileName as string
                set savedDelimiters to AppleScript's text item delimiters --save delimiters
                set AppleScript's text item delimiters to {"-"} --split on "-"
                set nb to offset of "-" in fileName
                if nb is not 0 then
                    set AppleScript's text item delimiters to savedDelimiters --restore delimiters
                    set nameDate to characters (nb + 1) thru (nb + 8) of fileName as string
                    set nameDate to nameDate & "1200.00"
                    set cmd1 to "/usr/local/bin/exiftool -datetimeoriginal=" & nameDate & " " & quoted form of POSIX path of eachFile
                    set cmd2 to "/usr/local/bin/exiftool -createdate=" & nameDate & " " & quoted form of POSIX path of eachFile
                end if
                try
                    -- write date from name to EXIF
                    do shell script cmd1
                    do shell script cmd2
                    do shell script "touch -t " & nameDate & " " & quoted form of POSIX path of eachFile
                    do shell script "rm " & quoted form of POSIX path of (eachFile & "_original")
                on error
                    -- if date from name is invalid, log the error
                    set logFile to open for access ((path to desktop folder as text) & "Date Error.txt") as text with write permission
                    write "No valid date found in file name: " & eachFile & return to logFile starting at eof
                    close access logFile
                end try
            end if
        end repeat
        
        -- process folders:
        set folderList to folders of aFolder
        repeat with eachSubfolder in folderList
            -- process a subfolder
            my processFolder(eachSubfolder)
        end repeat
    end tell
end processFolder

tell application "Finder"
    display dialog "Done! All files processed." buttons {"Close"}
end tell

This guide explains how to transfer to Infomaniak email addresses currently hosted by Google (with a custom domain). Refer to this other guide if you are looking for information on importing a simple Gmail address (…@gmail.com),

Google prerequisites

1. Enable two-step authentication (2FA):
   • It is imperative to enable two-step authentication in Gsuite - if necessary, the organization administrator will first have to allow users to activate it from admin.google.com.
   • In the settings of your Google account (https://myaccount.google.com/), go to the Security tab and enable Two-Step Verification:
     
   • Read the complete Google guide
      
2. Create an application password:
   • Once 2FA is activated, go back to Two-Step Verification and scroll to the bottom of the page to the application passwords:
     
      
   • Follow the complete Google guide:
     • Click on App passwords.
     • Enter your Gmail account password if prompted.
     • Click on Select app and then Mail.
     • Click on Select device and choose Other (Custom name).
     • Give your password a name (e.g., Infomaniak), this is just descriptive.
     • Click on Generate.
     • Copy or write down the password that appears on the screen (it does not contain any spaces).

Infomaniak prerequisites

• Have a Mail Service on your Infomaniak Manager.
• Have a quota of available addresses or adjust it in advance if necessary.

Transfer emails from Gmail to Infomaniak

a. Recreate the email address(es) on Infomaniak

Access the Infomaniak Mail Service and create the email addresses:

1. Click here to access the management of your product on the Infomaniak Manager (need help?).
2. Click directly on the name assigned to the relevant product.
3. Click the blue button Create an email address in the top right corner.
4. Enter the address (what comes before the at sign @) for example contact or michelle.
5. Click the blue Continue button.
6. Select I will consult the email address alone.
7. Click the blue Continue button.
8. Enter a password.
9. Click the blue Continue button.
10. Click the blue Finish button.
11. Start again at point 3 above to recreate all the email addresses identically.

b. Import the mail content from Google to Infomaniak

Access the Infomaniak Mail Service and import your emails:

1. Click here to access the management of your product on the Infomaniak Manager (need help?).
2. Click directly on the name assigned to the relevant product.
3. Click on the chevron ‍ in the right part of the blue Create an email address button.
4. Click on Import emails (direct link).
5. Click on Import my emails into a single email address.
6. Enter the existing email address at Google.
7. Enter the password for this email address.
8. Click on Advanced settings.
9. Enter imap.gmail.com in IMAP Server Address (or try mail.gmail.com in case of error).
10. Enter 993 in IMAP Port.
11. Enable SSL and disable TLS.
12. Click on the blue button Validate and continue.
13. Enter the email address (which was recreated at Infomaniak at point a.10 above).
14. Click on the blue button Import emails.
15. The import starts and runs in the background. An email is sent once the import is complete.
16. Start again at step 3 above to import the rest of the email addresses.

Labels and storage space

The storage space displayed at Infomaniak may not match that indicated in Gmail, notably due to the different management of labels/tags.

Indeed, these, present in Gmail, will be converted into folders on the Infomaniak servers (same principle as when using an email client/software IMAP like Thunderbird):

As a result, an email tagged in multiple Gmail folders can be counted multiple times during migration, which explains why an account showing, for example, 6 GB in Gmail can take up 18 GB once transferred to Infomaniak servers.

Adjust the application settings

As soon as you have ensured that the domain name associated with your email works with Infomaniak, adjust the settings of the email software/clients you use so that they connect correctly to the Infomaniak servers: follow the configuration assistant.

To finish

• Ensure that the email is properly secured
• Copy the content from other Mail providers

This guide offers a solution for users wishing to increase the security level of their email, on a particularly weak point if you use an email software/client to check your emails.

All passwords are stored

When you use the Infomaniak online interface mail.infomaniak.com to view and send your emails, it is accessible via your Infomaniak account on which two-factor authentication (2FA) is enabled.

Indeed, all the passwords for each of the email addresses you have attached to mail.infomaniak.com are stored, and you will not need to enter them each time you want to check your messages.

But before that, you provide 3 pieces of information:

1. your login ID
2. the password for this login ID
3. you then validate your access request using one of the additional available methods

In all logic, a person in possession of your Infomaniak password will not be able to access your mailbox if they do not also have access to your mobile device.

Case of a software/email client

Two-factor authentication (2FA described above) does not exist directly with email retrieval protocols of the IMAP type. An email address has a password, and that's it.

Therefore, an email client installed on a computer will also store all the passwords for each of the attached email addresses, but will not ask for a login password.

There is a solution with Mozilla Thundebird:

1. Open the email client software.
2. At the top right, click on the menu button with three horizontal lines ☰ .
3. Click on Preferences (and not on Account Settings):
   
4. Click on Privacy and security in the left-hand menu.
5. Scroll down to the Passwords section (all your stored email passwords are here).
6. Check the box Use a master password:
   
7. Click on the button in the same place to set your new password for opening the software/client of the email:
   

To finish:

• Close and then restart Thunderbird.
• Upon reopening, enter your master password.
• If you enter the password correctly, you will have access to your accounts.
• In case of failure, Thunderbird will still open, but it will ask for the master password again.

This method especially protects you if you share your environment with other users.

This guide explains how to set up the synchronization of calendars/agendas and contacts Infomaniak with the desktop app Mozilla Thunderbird (desktop application on macOS / Windows / Linux).

Prerequisites

• Get your synchronization information provided by the synchronization assistant Infomaniak:
  • account address: https://sync.infomaniak.com
  • username: for example AB12345
  • application password in case of double authentication activated or ‍the one of your Infomaniak user account if you have not activated the 2FA

If you encounter any issues with the prerequisites above… and to obtain a more advanced synchronization URL:

1. Open the synchronization assistant Infomaniak
2. Click on the blue link Select a device
   
3. Choose a GNU/Linux synchronization type:
   
4. Note the full synchronization URL displayed at step 4 of the assistant.

Synchronize calendars and address books

Connect to a CardDAV address book

With the latest versions of Thunderbird, synchronization of your Infomaniak calendars and address books is offered immediately after configuring your email address within the software:

Click on it; the configuration starts:

1. Enter the username and the synchronization URL (see above):
   
2. Thunderbird then asks for the password (see above):
   

Once authentication is successfully completed, the application displays the address books and you can choose which ones to synchronize.

Connect to a remote calendar

Add a new calendar in Thunderbird:

1. Choose On the network
   
2. Enter the username and the synchronization URL (see above)
   

Once authentication is successfully completed, the application displays the calendars and you can choose which ones to synchronize.

Display calendars and address books

Your events are visible by activating the calendar from the Events and Tasks menu in Thunderbird.

Your contacts are visible by activating the address book from the Window menu in Thunderbird.

Refer to this other guide if you need to fix a configuration issue with Thunderbird (email, contacts, calendars)…

This guide concerns the management of application passwords from the Infomaniak Manager.

Preamble

• Application passwords allow you to establish an authenticated connection between certain tools & services even if two-step verification (2FA authentication) is enabled.
• To synchronize, for example, contacts & agendas of your Infomaniak account with a mobile device or a messaging software/client, perform the actions presented in the guide below to generate a new password specific to this application.
• It is possible to generate several specific passwords (e.g., 1 for the contacts and 1 for the calendars) or to use the same one for synchronizing both services.

Create an application password

To do this:

1. Click here to access the application password management on the Manager Infomaniak.
2. Click on Generate an application password:
   
3. Enter a name for the application password in the dialog box, then click on Generate an application password:
   
4. Copy and save the generated application password in a secure but accessible location, it will no longer be accessible once the window is closed.

Revoke application passwords

In the same place, you can delete one or more application passwords when they are no longer needed:

1. Click on the action button ⋮ to the right of each password and revoke it…
2. or on Revoke All at the top of the table: