Lost access to my 2FA.

I've subscribed to the standard/middle one. I know that there is no phone number for my tier, I was just stating as that it is quite weird that there is no general/public phone number to call in case of something.

Let's get some things straight before you judge my stupidity, I was in sort of "rush" to move from a different service, since I've started taking my security more seriously. I've made the email and the first thing I did was start changing email on the accounts/services that I use. Then got password manager and started doing that, then I decided that I needed 2FA on some more "serious" services/pages including mailbox but for some reason I forgot to add my phone number as a backup on the mailbox. Then I went on a short trip and my car got robbed. Basically I had the backups on my phone, laptop and ironically on my mailbox drive. Since I forgot to add phone number as a back up I am know locked out of my account.

By no means I want to seem judgemental here. Bad things can happen to any of us.

Back to the problem at hand: Do you still have access to any device that is able fetch e-mail from your account? If yes, you could use that to reset the password. However, in the German forum an employee mentioned that this is currently broken and they are about to fix it.

Sadly no, I was logged in only on those 2 devices, a couple of times on my work computer, and that's it. If I was logged on to it, I would be contacting mailbox support from there, but that is not the case now. If they asked me, I could tell them what and when certain emails were sent to my account, since I know when I was changing the emails on my other accounts and I kept getting emails let's say that the email has been changed or *service name* account.

I'm not sure whether I've understood your question correctly, I think my response makes no sense to your question.

I am curious what you mean with „taking care of your request“. What methods are in place to verify the authenticity of the request? Because writing from a different account and saying I lost access to „my“ main account is a typical social engineering attack.

Hi Ginger,

we have internal procedures to verify incoming requests. If we are not able to verify that the account really belongs to the creator of the ticket, we will of course not grant access to the account. Of course the security and integrity of the data of our customers has the highest priority for us, and our support is trained regarding social engineering and other security risks.

With kind regards
Your mailbox team

---

Useful Links:

• Knowledge Base for Private Customers
• Knowledge Base for Business Customers

Ginger Soap, I know how all this sounds, if you can, read my response to Stephan, I've explained the whole situation there, maybe that will help with understanding my situation. Since I made the account as my main one, as in for "serious" stuff I've used it is quite important and I need get the access back to my account. I'll provide the mailbox support team with whatever they ask since I'm the one that created that account and I know everything on there. I'm just waiting patiently for their response at the time.