feat(workspace): add 2FA and premium

# Configure two-factor authentication

Secure your Murena Workspace account with time-based one-time passwords (TOTP) plus application passwords for devices or apps that cannot prompt for the second factor.

## Enabling TOTP

1. Install a compatible authenticator app (see https://github.com/nextcloud/twofactor_totp#readme for examples).

2. Sign into your account and visit https://murena.io/settings/user/security.

3. Enable **TOTP**, scan the QR code, or type the secret into your authenticator.

4. Enter a generated code to verify the setup (codes refresh every 30 seconds, so be quick).

5. After verification, TOTP protects every login to Murena Workspace.

## Disabling TOTP

1. Open https://murena.io/settings/user/security.

2. Uncheck **Enable TOTP** to remove the second-factor requirement.

## App passwords for legacy devices

1. From the same security page, expand **Devices & sessions**, give the integration a name, and click **Create new app password**.

2. Copy the login and password that appear and save them securely (you won’t see them again).

3. On your /e/OS device go to **Settings → Accounts → Add account**, select Murena Workspace, and enter the generated credentials.

4. Tap **Login** to finish the connection.

## Manually configuring email clients after enabling 2FA

- Open the Mail app on /e/OS and enter your Murena Workspace credentials when prompted.

- If needed, choose **Manual setup**, provide the IMAP/SMTP details (server: `mail.ecloud.global`, port: 993 IMAP, 587 SMTP with authentication), and finish the configuration.

- Reminder: IMAP is not protected by 2FA, so use app passwords for clients that cannot prompt for a second factor.

Need more detail? Reach out to Murena Support if you have trouble generating codes or app passwords.

## Configure

- **Email:** Follow the complete setup, alias, encryption, filters, contact sync, and Hide My Email guidance on [Configure email on Murena Workspace](/workspace/email).

- **2FA:** Protect your account with time-based codes and application passwords on [Configure two-factor authentication](/workspace/configure-2fa).

- **Premium storage:** Upgrade to a larger quota and connect Murena Shop if needed via [Move to premium storage](/workspace/move-to-premium).

# Move to premium storage

Upgrade your Murena Workspace storage tier to unlock more space and higher upload counts.

1. Log into your Murena Workspace account at [https://murena.io](https://murena.io).

2. Click **Upgrade storage** on the dashboard or choose **Increase storage size** inside the Files app to reach the subscriptions page.

3. If prompted, log in again with your Murena ID to confirm the destination account and grant Murena Shop access.

4. Back on the subscriptions page, scroll down, choose a plan (monthly or annual), and enter your billing details.

5. Complete the payment and the new storage benefit is applied automatically to your Workspace account.

*Legacy subscribers (before October 13, 2022) must first sign in to [Murena Shop](https://murena.com), link the accounts, and authorize the upgrade using their Murena Workspace password before continuing with the workspace subscription flow.*

Need help? Contact Murena Support for billing or plan questions.

Two factor Authentication is a security mechanism to give you an extra layer of security on your account. More information can be found [here](https://en.wikipedia.org/wiki/Multi-factor_authentication).

## Enable 2FA using time-based one-time passwords (TOTP):

To enable a TOTP Password you will need a compatible client. You can find some proposals [here](https://github.com/nextcloud/twofactor_totp#readme).

1. Download one [compatible TOTP client](https://github.com/nextcloud/twofactor_totp#readme)

1. Connect to your Murena Workspace account

1. Go to your [user security settings](https://murena.io/settings/user/security) and make sure "Enable TOTP" is checked 

   ![Security screen showing where is the location of "Enable TOTP"](/images/howtos/2fa/security_screen.png "Security Screen")

1. The TOTP secret and QR code will be right below it 

   ![Enabled TOTP showing the QR code and the TOTP secret](/images/howtos/2fa/enabled_TOTP.png)

1. Open the TOTP app

1. Inside your TOTP client, read the QR code shown at step 3 OR type the TOTP secret exactly as it is written.

1. To make sure everything is working, place the generated code at the verification field box and click on "Verify"

   - Remember: For security reasons those generated codes expire in about 30 seconds and will not work after that.

   - If the verification fails, a small popup will appear alerting you of that.

     ![Popup alerting of wrong code of verification](/images/howtos/2fa/popup_fail.png "Popup on the right top")

1. A new code will be calculated every 30 seconds (depending on the TOTP configuration) and will be needed every time you connect to your Murena Workspace account

🎉 2FA is now enabled on your account 🎉

## Disabling two-factor authentication (2FA) 🔓

1. Connect to your Murena Workspace account

1. Go to your [user security settings](https://murena.io/settings/user/security)

1. Make sure "Enable TOTP" is unchecked

## Manually setup Mail application

1. Go to your Mail app

1. You will be prompted to write your credentials there

   ![Add mail screen showing empty login and password fields](/images/howtos/2fa/eos_mail_empty.png "Add mail screen")

1. Using your Murena Workspace **main** password, fill in the fields. 

   ![Add mail screen showing filled login and password fields](/images/howtos/2fa/eos_mail_filled.png "Add mail screen filled")

- It may be necessary to manually setup the mail application. For this, tap on "MANUAL SETUP" and fill in the fields such as the image below and tap on next. Do not forget to change the email address! 

   ![Incoming mail settings configuration for the mail application](/images/howtos/2fa/eos_maybe_manual_settings.png "Incoming settings")

- If necessary, more information to configure your mail IMAP settings can be found [here](https://e.foundation/email-configuration/)

{% include alerts/warning.html content="The IMAP account is not protected with 2FA" %}

## Using an application password for the eOS account manager

1. Connect to your Murena Workspace account

1. Go to your [user security settings](https://murena.io/settings/user/security)

1. In the section "Devices & sessions", type the application name and click on "Create new app password"

   ![List of apps names](/images/howtos/2fa/apps_names.png "Apps name")

1. The login and password to your application will be shown as the image below. Make sure to annotate it for the next steps.

   ![Example of Login and password created](/images/howtos/2fa/login_pass.png "Login and password")

1. Now on your eOS smartphone, go to "Settings"

   ![Settings screen with all menu options](/images/howtos/2fa/eos_settings.png "Settings screen")

1. Tap on "Accounts" and then "Add account"

   ![Accounts screen](/images/howtos/2fa/eos_accounts.png "Accounts screen") ![Add new account screen](/images/howtos/2fa/eos_add_account.png "Add new account")

1. Complete the field boxes with the login and password saved before

   ![Login and password field boxes](/images/howtos/2fa/eos_apptoken.png "Login and password")

1. Tap "Login" to complete the process

## Upgrade your Murena Workspace storage

### Log into Murena Shop (Only required for some users)

If you purchased a subscription prior to October 13, 2022, you must first login to [Murena Shop](https://murena.com) with your existing account and then proceed with the steps below.

![](/images/howtos/ecloud/login-with-shop-account.png)

After you've logged in, visit [Murena Shop subscriptions page](https://murena.com/ecloud-subscriptions/). You will be prompted to link your Murena Workspace and Murena Shop accounts. To authorize this change, you must enter your Murena Workspace password.

![](/images/howtos/ecloud/connect-shop-with-cloud.png)

You can now jump straight to Step 6 below.

### Log into Murena Workspace

1. Log in to [Murena Workspace](https://murena.io).

2. You can either click **UPGRADE STORAGE** on your Dashboard or click **Increase storage size** in the Murena Workspace files app. Both options will redirect you to the subscriptions page.

![](/images/howtos/ecloud/murena-dashboard.png)

![](/images/howtos/ecloud/files-app-murena.png)

3. On the subscriptions page, scroll down and click Login with Murena ID. You may be asked to re-enter your password. This login ensures that the benefits will be applied to the account of your choice.

![](/images/howtos/ecloud/subscriptions-page-no-login.png)

4. Login with your Murena ID.

![](/images/howtos/ecloud/murena-cloud-login.png)

5. Grant access to Murena shop.

![](/images/howtos/ecloud/grant-shop-access.png)

6. After granting access, you'll be taken back to the subscriptions page to choose one of our plans.

You have the option of paying monthly or annually. 

![](/images/howtos/ecloud/subscriptions-page-login.png)

7. Enter your billing information and complete the purchase. Following a successful payment, we will automatically apply the new storage benefits to your account. Enjoy! 

![](/images/howtos/ecloud/checkout-murena.png)