<a id="ch-08"></a>

## Chapter 8 — The orders mailbox line stays no-MFA and shared

<!-- open-cyber-academy:lesson-figures:start ch-08 -->
### Lesson map

Lesson 08. Map, example, EX054.

```mermaid
flowchart TD
  A["Print: no MFA: email orders@shop - shared"] --> B["Week four: own sign-ins and an authenticator"]
  B --> C{"Did the script print that change?"}
  C -->|No| D["Keep the no-MFA shared line"]
  C -->|Yes| E["No second account run is embedded"]
```

The mailbox that receives resets is still the first gap on the week-three list.

### Logical drawing

```text
account line that stays
    no MFA: email (orders@shop) - shared
    used by all staff
checklist, different claim
    MFA on email is already in the before pair
narrative
    personal sign-ins, authenticator app, old shared password retired
```
<!-- open-cyber-academy:lesson-figures:end ch-08 -->

### Learning outcomes

After this chapter, you should be able to:

1. Quote the orders-mailbox line from the account print.
2. Keep it apart from the checklist item "MFA on email".
3. Leave the week-four authenticator story as prose.

### 8.1 The reset mailbox is one row. "MFA on email" is another sentence.

Whoever holds the shop's email can ask other services to reset their passwords. That is why chapter 3 ranks the orders mailbox first: it receives those reset links, and on the account list it is shared by all staff with the second-step flag false. The print says `no MFA: email (orders@shop) - shared`. Rosa's own mailbox is a different row, `owner@shop`, and that row's second-step flag is already true. The checklist's before pair includes the single item "MFA on email". That item does not name `orders@shop`, and it does not erase the printed gap. In week four the narrative says each staff member received a personal sign-in with access to the shared mailbox, plus an authenticator app, and that the old shared password was retired. The account script was not run again. The password itself is never written. Until a new embedded run replaces the line, the gap on this print stays a gap.

### 8.2 Worked example

Point at the address in the line before you decide what the line claims.

| Sentence | Ground | Decision |
|---|---|---|
| "`orders@shop` is printed no-MFA and shared." | The account run | May stay |
| "`owner@shop` already has a second step." | The same list | May stay |
| "MFA on email was a before-item." | The checklist source | May stay, as that item |
| "So `orders@shop` dropped off the print." | No new run | Refuse |

> **Synthetic case.** The mailbox addresses are labels in the synthetic list. No message is opened.

### Errors and limits

One true flag on Rosa's mailbox does not cover the mailbox the whole staff share. The authenticator story does not back-fill the print.

### Apply

- **EX054 — Which mailbox changed on the print?** Week four gives staff their own sign-ins and an authenticator for the orders mailbox. What does the account print still say about `orders@shop`? *Rubric:* 3 = the line stays `no MFA: email (orders@shop) - shared`; the week-four story stays prose; "MFA on email" stays a separate checklist item; do not edit the script;; 2 = the printed line stays;; 1 = the story only;; 0 = none.

<!-- open-cyber-academy:chapter-navigation:start ch-08 -->
### Continue studying — lesson 08 (chapter 08 of 20)

[← Chapter 07](#ch-07) · [Course chapter index](../SUBJECTS.md) · [Chapter 09 →](#ch-09)

Continue to the next authored lesson.
<!-- open-cyber-academy:chapter-navigation:end -->

## Worked answers

<a id="answer-ex054"></a>
**EX054.** The line stays `no MFA: email (orders@shop) - shared`. The week-four story stays prose. "MFA on email" stays a separate checklist item. Do not edit the script.
