## Step 5: Secure the Webadmin and @Mail

To prevent unauthorized access to @Mail's WebAdmin and temporary files, htaccess support via the Webserver must be enabled and a password set for Webadmin access. The authentication process requires that your Apache configuration file (httpd.conf) has the following lines:

> `AccessFileName .htaccess`
> `<Directory "$var['installDir']/">
> AllowOverride All
> </Directory>`

The directory syntax is required for Apache to recognize the password security on the Webadmin directory. This must be implemented in your Webserver configuration file, then restart Apache for changes to take effect.

### Error

Please perform the following actions and re-submit

To prevent unauthorized access to @Mail's WebAdmin and temporary files, please specify a master username and password for authentication.

### Error

Please perform the following actions and re-submit

Username |
Password |
Confirm Password |