Skip to main content
The turboSMTP dashboard uses Keycloak for sign-in and two-factor authentication. Two-factor authentication is available on Free, Basic, Pro, and Enterprise plans.

​
Enable two-factor authentication

In the dashboard, click your name in the top-right corner, open My Account, and select Edit on the Two-Factor Authentication card. Follow the setup steps shown there. Contact support if you need help accessing your account security settings. Two-factor authentication protects dashboard sign-in. SMTP and HTTP API integrations continue to authenticate with their Consumer Key and Consumer Secret.

​
Protect integration credentials

Create credentials under Settings → Integrations → API Keys → Edit. Enable only the services your integration needs:
  • SMTP Sending for SMTP relay.
  • HTTP API Sending for the send API.
  • Statistics & Management APIs for management operations.
Use IP restrictions when your application’s outbound IP addresses are known. Store secrets in your application’s secret manager or environment, and replace credentials if they are exposed. See API keys for creation, limits, and rotation.

​
Dashboard passwords and API access

Change your login password under your name → My Account → Change password. Use Consumer credentials for integrations; see API authentication for the legacy login endpoint’s limitations and the operations that require a session.