The orders mailbox line stays no-MFA and shared

Lesson map

Lesson 08. Map, example, EX054.

flowchart TD
  A["Print: no MFA: email orders@shop - shared"] --> B["Week four: own sign-ins and an authenticator"]
  B --> C{"Did the script print that change?"}
  C -->|No| D["Keep the no-MFA shared line"]
  C -->|Yes| E["No second account run is embedded"]

The mailbox that receives resets is still the first gap on the week-three list.

Logical drawing

account line that stays
    no MFA: email (orders@shop) - shared
    used by all staff
checklist, different claim
    MFA on email is already in the before pair
narrative
    personal sign-ins, authenticator app, old shared password retired

Learning outcomes

After this chapter, you should be able to:

1. Quote the orders-mailbox line from the account print.
2. Keep it apart from the checklist item "MFA on email".
3. Leave the week-four authenticator story as prose.

8.1 The reset mailbox is one row. "MFA on email" is another sentence.

Whoever holds the shop's email can ask other services to reset their passwords. That is why chapter 3 ranks the orders mailbox first: it receives those reset links, and on the account list it is shared by all staff with the second-step flag false. The print says no MFA: email (orders@shop) - shared. Rosa's own mailbox is a different row, owner@shop, and that row's second-step flag is already true. The checklist's before pair includes the single item "MFA on email". That item does not name orders@shop, and it does not erase the printed gap. In week four the narrative says each staff member received a personal sign-in with access to the shared mailbox, plus an authenticator app, and that the old shared password was retired. The account script was not run again. The password itself is never written. Until a new embedded run replaces the line, the gap on this print stays a gap.

8.2 Worked example

Point at the address in the line before you decide what the line claims.

Lesson table; scroll horizontally to read all columns →

Synthetic case. The mailbox addresses are labels in the synthetic list. No message is opened.

Errors and limits

One true flag on Rosa's mailbox does not cover the mailbox the whole staff share. The authenticator story does not back-fill the print.

Apply

• EX054 — Which mailbox changed on the print? Week four gives staff their own sign-ins and an authenticator for the orders mailbox. What does the account print still say about orders@shop?
  Show marking criteria

  Rubric: 3 = the line stays no MFA: email (orders@shop) - shared; the week-four story stays prose; "MFA on email" stays a separate checklist item; do not edit the script;; 2 = the printed line stays;; 1 = the story only;; 0 = none.