kAuth is a free mobile application that enhances and simplifies the security of Infomaniak accounts protected by two-factor authentication (or double authentication). It is one of the methods that allows you to secure access to your Infomaniak user account.

Preamble

• Two-step verification protects your account and personal data when logging into Infomaniak tools (manager.infomaniak.com and mail.infomaniak.com) by asking for:
  1. your password
  2. and a second security method

• The app kAuth is one of these methods (learn more about 2FA)

  

Install the kAuth app

Prerequisites

• Have an Infomaniak account (know your username and password).
• Have an iOS or Android mobile device.
• From your iOS or Android mobile device, download the app **Infomaniak kAuth** here:
   

Install and open the application.

Then, you have two options to link your Infomaniak accounts to kAuth:

1. Log in from this mobile (recommended):
   1. Open the kAuth app from your mobile device.
   2. Click on Log in from this mobile.
   3. Enter the credentials for the Infomaniak account to link and authenticate your connection if necessary (need help?).
   4. Click the Authorize button.
2. Log in from a computer (if you choose this method, you will need a computer connected to the Internet):
   1. Open the kAuth app from a mobile device.
   2. Click on Log in from a computer.
   3. On your computer, open the page manager.infomaniak.com/2fa
      1. if double authentication is not yet activated: click on Activate and choose kAuth Application.
      2. if double authentication is already activated: click on Add an option then choose kAuth Application.
   4. On your mobile, click on Continue.
   5. If necessary, allow kAuth to access your camera (only required to scan the identification QR code).
   6. On your computer, click on Next to display the QR code to scan.
   7. Scan the QR code displayed on the computer.

Save the backup codes

If you have just activated two-step verification, the app will automatically display your 10 personal backup codes.

How the app works

When you attempt to log in to your account and after successfully entering your usual password, you receive a push notification on your mobile device asking you to authorize the connection ("YES / NO"), via a notification:

or directly in the app:

If the connection is authorized, the initial page is automatically redirected to the Infomaniak account. You do not need to manually enter a one-time code like with a traditional OTP application or a code sent by SMS.

And without an Internet connection?

The push notifications push do not work without an Internet connection, but kAuth also works without an Internet connection and always allows you to display a one-time code in the same way as an application OTP traditional:

1. Open kAuth from your mobile device.
2. Click on the relevant Infomaniak account.
3. Copy the one-time code (each code is valid for 30 seconds) on the login page:
   

You can always access your account while traveling or on vacation.

Add additional accounts

kAuth allows you to manage multiple Infomaniak accounts:

1. Open kAuth from your mobile device.
2. Click on the blue button ‍:
   
3. Repeat the steps described above to link the account.

Delete a kAuth account

To delete your Infomaniak identity from the kAuth app, you must disable the kAuth security method from the 2FA section of the Manager.

This guide explains how to disable two-factor authentication, also known as two-step verification (two-factor authentication in English, or 2FA) for logging into Manager Infomaniak (manager.infomaniak.com) or Mail Infomaniak (mail.infomaniak.com).

Disable 2FA

If two-step verification is enabled and you wish to disable it:

1. Click here to access 2FA management on the Manager Infomaniak.
2. Click on the Remove button to disable security:
   
3. Enter the password to log in to your account.

In case of trouble

Obviously, the procedure above requires logging in one last time with two-factor authentication to then be able to disable it.

If you do not have access to the kAuth application or the device that receives the validation SMS, there is no point in calling Infomaniak; in this case, you will have no choice but to provide a number of security elements manually or via the app Infomaniak Check (kCheck) to regain access to your account:

1. Click here to access the login page for Manager Infomaniak.
2. Enter the username and the usual and correct password.
3. When prompted for additional authentication, click on the alternative methods:
   
4. Choose to enter one of your backup codes if you had downloaded the sheet when activating 2FA:
   
5. Otherwise, select the last option to request help to access the form allowing you to submit your ID documents and recognition selfie:
   
6. Follow the procedure to the end and wait:
   

This guide explains how to enable two-step verification, also known as two-factor authentication (2FA) or multi-factor authentication, to secure your connection to your Manager Infomaniak.

Preamble

• This two-step verification protects your account and personal data with your chosen password and a second method of identity verification, such as a code obtained on your mobile device.
• If a malicious person were to crack or steal your password, they would still need a validation code that only the legitimate user can obtain on their mobile device.
• Refer to this other guide if you are an administrator of an Organization and wish to enforce 2FA on all users who have not yet activated it.

Enable two-step verification

To increase the security level of your Infomaniak account:

1. Click here to access the management of two-step verification on the Infomaniak Manager.
2. Display and choose the authentication method from:
   1. The app kAuth for iOS / Android devices to simply tap a push notification YES / NO to authorize or deny the connection
   2. Any OTP application to obtain a unique connection code at a given time
   3. YubiKey (from Yubico)
   4. SMS reception (only for countries CH / FR / BE / DE) to obtain a unique connection code at a given time

Follow the on-screen instructions to complete the procedure.

Keep the backup codes safe.

Be mindful of existing synchronizations

Once strong authentication is activated, to access certain tools (such as synchronization tools) it is necessary to create application passwords.

There is no need to call Infomaniak as they do not have any of your codes & passwords in their possession. For any help request regarding 2FA, refer to this other guide.

Authenticate on every browser opening

To request not to save cookies when closing browser windows, and thus request authentication each time you access the Infomaniak Manager when you restart the browser…

... on Chrome

Specify in Google Chrome settings (chrome://settings/content/siteData to paste into the address bar or refer to the official documentation) the address [*.]infomaniak.com:

This guide explains how to force users in your Organization to enable the double authentication (2FA) feature, and then verify that it remains activated.

Introduction

• Every Infomaniak user has the option to enable two-step verification for accessing their account, which significantly enhances the security of all the Organization's services…
  • A legal representative can require this activation otherwise the user will no longer be able to access the Manager and Web apps.
  • Access to desktop apps (desktop application on macOS / Windows / Linux) and mobile apps (application for iOS / Android smartphone or tablet) will always be possible without 2FA.
• It is recommended to notify users of your Organization in advance, so that they can continue to use the services.
• If an external user does not wish to perform the operation requested by an administrator of the Organisation, they can choose to leave instead of activating it.

Identify users without 2FA

You can easily identify the people who have not yet activated this security on their account:

1. Click here to access the management of your Organization's users.
2. This red symbol indicates that 2FA is not activated:
   
3. You can also filter long lists with this specific criterion to display only users who have not yet activated 2FA:
   
   
    
4. To easily alert a user about the security of their account, click on the action menu ⋮ located to their right.
5. Click on Send a security alert to send an automatic email to the user informing them of their various settings:
   

Enforce 2FA activation

Prerequisites

• To be Administrator or Legal Representative‍ within the Organization.

To access the settings:

1. Click here to access the security management of the Organization on the Infomaniak Manager (need help?).
2. Click on the toggle switch to enable an additional login verification to be required for all users of the Organization:
   
3. Confirm the activation of the feature in the window that opens.
4. Once the feature is activated, users of the Organization who have not yet activated 2FA will receive a message (as soon as they perform their next action on their account) prompting them to set up an additional authentication method from those offered and thus preventing them from performing any other action before doing so:
   
    

This guide concerns the mobile app kCheck (application for iOS/Android smartphone or tablet), created to simplify identity verification procedures and strengthen the security of your Infomaniak account.

Preamble

• For security reasons, to ensure the identity of the person making a specific request to Infomaniak, an identity verification procedure may be triggered in the following cases (non-exhaustive list):
  • user password forgotten
  • login email address forgotten
  • deactivation of two-factor authentication (2FA)
  • unlocking an Infomaniak account
  • during the first transfer of revenue for the product Billetterie
  • when ordering a product (suspicion of spam or fraud, brand name, etc.)
• This app allows you to securely transfer the requested items.
• Infomaniak respects your privacy: the information transmitted via the kCheck application will be kept until your file is fully processed; it will in any case be automatically deleted after 72 hours if this request is not processed.

Start the identity verification

Prerequisites

• A QR code or a link provided by Infomaniak.
• The mobile app kCheck installed on your device iOS (iPhone, etc.) or Android.
• An internet connection on the mobile device.

You can then have your identity verified with kCheck:

1. Launch the kCheck app on your mobile device.
2. Tap Start.
3. Press Scan a QR code.
4. Point the QR code at the camera.
5. Enter your mobile phone number.
6. Enter the confirmation code received.
7. Enable location services (required to continue the procedure).
8. Select the type of ID you have (ID card or passport).
9. Follow the steps to photograph your ID.
10. Take a selfie (of yourself) holding your ID in front of you.

Your documents will then be securely transmitted to Infomaniak support. These requests are processed on a priority basis with an average response time of 2 hours during opening hours.

If your order is blocked...

For security reasons, some orders may be automatically blocked.

When you place your order, an email is sent to the email address associated with your Infomaniak Manager account. This email contains the procedure to unblock your order. If you cannot find it, you can resend it from your Manager by clicking on Resend procedure from the red banner‍ informing you of the blockage.

Prerequisites

• Open the email containing the unlocking procedure.
• The mobile app kCheck installed on your device iOS (iPhone, etc.) or Android.
• An internet connection on the mobile device.

You can then start the unlocking procedure with kCheck:

1. Launch the kCheck app on your mobile device.
2. Tap Start.
3. Press Scan a QR code.
4. Scan the QR code in the email.
5. Follow the unlocking procedure to the end.

Special cases

• If you do not respond within 10 days, the order will be automatically canceled and the payment will be fully refunded to the payment method used.
• If you do not have a mobile device to follow this procedure, contact Infomaniak support.

This guide offers a solution for users wishing to increase the security level of their email, on a particularly weak point if you use an email software/client to check your emails.

All passwords are stored

When you use the Infomaniak online interface mail.infomaniak.com to view and send your emails, it is accessible via your Infomaniak account on which two-factor authentication (2FA) is enabled.

Indeed, all the passwords for each of the email addresses you have attached to mail.infomaniak.com are stored, and you will not need to enter them each time you want to check your messages.

But before that, you provide 3 pieces of information:

1. your login ID
2. the password for this login ID
3. you then validate your access request using one of the additional available methods

In all logic, a person in possession of your Infomaniak password will therefore not be able to access your mailbox if they do not also have access to your mobile device.

Case of an email software/client

Two-factor authentication (2FA described above) does not exist directly with email retrieval protocols of the IMAP type. An email address has a password, and that's it.

Therefore, an email client installed on a computer will also store all the passwords for each of the attached email addresses, but will not ask for a login password.

There is a solution with Mozilla Thundebird:

1. Open the email client software.
2. At the top right, click on the menu button with three horizontal lines ☰ .
3. Click on Preferences (and not on Account Settings):
   
4. Click on Privacy and security in the left-hand menu.
5. Scroll down to the Passwords section (all your stored email passwords are here).
6. Check the box Use a master password:
   
7. Click on the button in the same place to set your new password for opening the software/client of the email:
   

To finish:

• Close and then restart Thunderbird.
• Upon reopening, enter your master password.
• If you enter the password correctly, you will have access to your accounts.
• In case of failure, Thunderbird will still open, but it will ask for the master password again.

This method especially protects you if you share your environment with other users.

Also, familiarize yourself with fingerprint security for checking emails on the mobile app Infomaniak Mail.

This guide explains how to set up the synchronization of Infomaniak calendars/agendas and contacts with Mozilla Thunderbird.

Prerequisites

• Get your synchronization information provided by the synchronization assistant Infomaniak:
  • account address: https://sync.infomaniak.com
  • username: e.g. AB12345
  • application password in case of double authentication activated or ‍the one of your Infomaniak user account if you have not activated the 2FA

Synchronize calendars and address books

If you encounter any issues with the prerequisites mentioned above…

To obtain a more advanced synchronization URL:

1. Open the synchronization assistant Infomaniak
2. Click on the blue link Select a device
   
3. Choose a GNU/Linux synchronization type:
   
4. Make a note of the full synchronization URL displayed at step 4 of the assistant.

Connect to a CardDAV address book

With the latest versions of Thunderbird, synchronization of your Infomaniak calendars and address books is offered immediately after configuring your email address within the software:

Click on it; the configuration starts:

1. Enter the username and the synchronization URL (see above):
   
2. Thunderbird then asks for the password (see above):
   

Once authentication is successfully completed, the application displays your address books and you can choose which ones to synchronize.

Connect to a remote calendar

Add a new calendar in Thunderbird:

1. Choose On the network
   
2. Enter the username and the synchronization URL (see above)
   

Once authentication is successfully completed, the application displays the calendars and you can choose which ones to synchronize.

Display calendars and address books

Your events are visible by activating the calendar from the Events and Tasks menu in Thunderbird.

Your contacts are visible by activating the address book from the Window menu in Thunderbird.

Fix a configuration issue with Thunderbird (email, contacts, calendars)

This guide provides instructions to synchronize kDrive with a NAS Qnap (or vice versa) using the WebDAV protocol found in the HBS 3 Hybrid Backup Sync application.

Prerequisites

• Have a Qnap NAS accessible from the Internet.
• Know your kDrive identifier (kDrive ID).

Synchronize kDrive and Qnap via HBS 3

To do this:

1. Log in to the Qnap NAS administration interface (QTS).
2. If necessary, download and install the app HBS 3 Hybrid Backup Sync.
3. Open HBS 3.
4. Go to Sync from the left menu.
5. Create a synchronization task (Two-way Sync Job).
6. Select WebDAV from the list of Cloud providers:
   
7. For the account settings, use the following information:
    
   • Server address: https://IDkDrive.connect.kdrive.infomaniak.com (see prerequisites above)
   • Username: email address used to log in to the Infomaniak user account
   • Password: application password if two-factor authentication is enabled or ‍the one for your Infomaniak user account if you have not enabled 2FA
8. Select the local and destination folders:
   
9. Customize the task frequency.
10. Finish the assistant.

This guide explains how to import external data (files, folders, etc.) into your kDrive using the WebDAV protocol.

Preamble

• Refer to this other guide if you are looking for information on how to copy specific data from one kDrive to another when your user has access to both kDrive accounts.

Import external data via WebDAV

To access the import tool, where the data needs to be imported:

1. Click here to access the Web app kDrive Infomaniak (online service kdrive.infomaniak.com).
2. Click on the Settings icon ‍ at the top right.
3. Check or select the kDrive in question from the dropdown menu on the left sidebar.
4. Click on General in the left sidebar.
5. Click on Import external data:
   
6. Click the blue Start button.
7. Click on WebDAV.
8. Fill in the required information based on the source (especially the WebDAV address you have - obtained from the source).
9. Select the destination kDrive and the desired location to store the imported data.
10. Click on Start:
    

Example: copy data from an external kDrive to the Organization

To import a kDrive that would be outside of the Organization in which your destination kDrive is located, you must enter the following information at point 9 above (your credentials will be used exclusively to import your data; they will be immediately deleted at the end of the process):

• Username: email address to log in to the Infomaniak user account
• Password: application password if two-factor authentication is enabled or‍ the one from your Infomaniak user account if you have not enabled 2FA
• Entry point: direct access to kDrive (refer to this other guide regarding the kDrive ID for the connection URL)
  • It is possible to choose a subfolder as the source folder, by combining the kDrive ID and the desired folder by entering for example https://IDkDrive.connect.kdrive.infomaniak.com/My/Subfolder or https://IDkDrive.connect.kdrive.infomaniak.com/MykDrive/My/Subfolder

This guide explains how to transfer to Infomaniak email addresses currently hosted by Google (with a custom domain). Refer to this other guide if you are looking for information on importing a simple Gmail address (…@gmail.com),

Google Prerequisites

1. Enable two-step authentication (2FA):
   • It is imperative to enable two-step authentication in Gsuite - if necessary, the organization administrator will first have to allow users to activate it from admin.google.com.
   • In the settings of your Google account (https://myaccount.google.com/), go to the Security tab and enable Two-Step Verification:
     
   • Read the complete Google guide
      
2. Create an application password:
   • Once 2FA is activated, go back to Two-Step Verification and scroll to the bottom of the page to the application passwords:
     
      
   • Follow the complete Google guide:
     • Click on App passwords.
     • Enter your Gmail account password if prompted.
     • Click on Select app and then on Mail.
     • Click on Select device and choose Other (Custom name).
     • Give a name to your password (e.g., Infomaniak), it's just descriptive.
     • Click on Generate.
     • Copy or write down the password that appears on the screen (it does not contain any spaces).

Infomaniak prerequisites

• Have a Mail Service on your Infomaniak Manager.
• Have available a quota of free addresses or order more if necessary:
  1. Click here to access the management of your product on the Infomaniak Manager (need help?).
  2. Click directly on the name assigned to the product in question.
  3. Click on the shopping cart icon at the top:
     

Transfer emails from Gmail to Infomaniak

a. Recreate the email address(es) on Infomaniak

Access the Infomaniak Mail Service and create the email addresses:

1. Click here to access the management of your product on the Infomaniak Manager (need help?).
2. Click directly on the name assigned to the product in question.
3. Click the blue button Create an email address in the top right.
4. Enter the address (what comes before the at sign @) for example contact or michelle.
5. Click the blue Continue button.
6. Select I will be the only one to access the email address.
7. Click the blue Continue button.
8. Enter a password.
9. Click the blue Continue button.
10. Click the blue Finish button.
11. Start again at point 3 above to recreate all the email addresses identically.

b. Import Google mail content into Infomaniak

Access the Infomaniak Mail Service and import your emails:

1. Click here to access the management of your product on the Infomaniak Manager (need help?).
2. Click directly on the name assigned to the product in question.
3. Click on the chevron ‍ in the right part of the blue button Create an email address.
4. Click on Import emails (direct link).
5. Click on Import my emails into a single email address.
6. Enter the existing email address at Google.
7. Enter the password for this email address.
8. Click on Advanced settings.
9. Enter imap.gmail.com in IMAP Server Address (or try mail.gmail.com in case of error).
10. Enter 993 in IMAP Port.
11. Enable SSL and disable TLS.
12. Click on the blue button Validate and continue.
13. Enter the email address (which was recreated at Infomaniak at point a.10 above).
14. Click on the blue button Import emails.
15. The import starts and runs in the background. An email is sent once the import is complete.
16. Start again at point 3 above to import the rest of the email addresses.

Labels and data volume

The storage space displayed at Infomaniak may not match that shown in Gmail, notably due to the different management of labels/tags.

Indeed, these, present in Gmail, will be converted into folders on the Infomaniak servers (same principle as when using an email client like Thunderbird to retrieve emails via IMAP):

Therefore, an email tagged in multiple Gmail folders may be counted multiple times during migration, which is why an account showing, for example, 6 GB in Gmail may occupy 18 GB once transferred to Infomaniak servers.

Adjust the application settings

As soon as you have ensured that the domain name associated with your email works with Infomaniak, change the settings of the software/email clients you use so that they connect correctly to the Infomaniak servers: follow the configuration assistant.

To finish

• Ensure that the email is properly secured
• Copy the content from other Mail providers