Zimbra 2FA: How to enable and set-up 2-Factor Authentication for your HIS-Hosted Zimbra email account

2-step or 2-Factor Authentication is an extra layer of security for your email account. With it enabled, to log into your Zimbra account, you need your password (One thing you know) and a code generated by your smartphone (One thing in your possession).

Check the 2FA Authenticators Zimbra supports

To setup 2-Factor authentication in your Zimbra email account:

Step 1: Secure the HIS Zimbra Webmail Login

After enabling 2FA: your current password will now only work for login to Webmail.
You will be prompter to enter a code from the Authentication App each time after you login to HIS webmail.

You will now need to generate a new "Application code", i.e. a special password generated in Zimbra for your other email Applications (Outlook, Mac Mail, Thunderbird...) that do not support 2FA.
This way if your Webmail password get compromised, it can not be used for sending mail from your email account.

Instead, each of your email applications or devices will use its own "application passcode" a special password generated in Zimbra. You will need to update the configuration of each of your applications and devices; however, most will simply note that the old password is not working and prompt you for the new one.

Step 2: Generate Applications passcodes for mail apps not supporting 2FA

Step 3: Generate One-Time codes for Emergency Use