Hi there, @unsecuremailkey. We understand that the Secure Mail Key is being added to your account without your permission. We can look at that together. 

Adding non-AT&T numbers to the account is a great thought, however let's explain why that we are unable to do that. 

If we were able to add a non carrier phone number, it has to be verified. To verify the number, it would send an SMS or text to that number. Normally, there will be a charge with that SMS or text. We want to avoid having that charge. 

The only time a non carrier number is added is during the account registration, but that is only for contact purposes. Since this is about a sbcglobal account, which is DSL or older, it would have been done during the installation of the service. If that was not done at that time, our current restrictions are preventing us from doing that. 

As far as the 2 Factor-Authentication goes, our information shows that only AT&T Wireless numbers and devices can use it. That is a carrier limitation. 

Now, you can remove the Secure Mail Key from the account at anytime by logging in to your account profile. Please try these steps:

1. Go to myAT&T.
2. Put in your full email address and password.
3. Click Sign in.
4. If successful, you should be on your email profile landing page.
5. Scroll to Secure mail key and select Manage secure mail key.
6. You should see a list of the Secure Mail Keys that are on the account.
7. Over to the right, there should be a remove or delete next to each Secure Mail Key. 

Try these things and please let us know if they work for you.

Matthew, AT&T Community Specialist

If we were able to add a non carrier phone number, it has to be verified. To verify the number, it would send an SMS or text to that number. Normally, there will be a charge with that SMS or text. We want to avoid having that charge. 

🤦‍♂️😱🙄🤣

Hey @ATTHelp  I'm very familiar with those steps as I just had to do it again.  Someone just created another secure mail key and added to my account.  I have no idea how they are doing this because I'm not receieving any alerts that my password was changes or anything like that.  I have to go in and reset my password to even get into my account, and then delete the secure mail key.  This happeend again today.  

We recommend reading our guide on how to Protect your computer from security threats to make your email more secure and prevent future hacking, unsecuremailkey.

We're unable to directly prevent hackers from accessing your email, so we encourage you to use our resources to prevent this type of problem going forward.

If you need help with anything else, let us know. Thanks for visiting the AT&T Community Forums.

Aminah, AT&T Community Specialist

@ATTHelp My comptuer is very secure, this is the only account I have issues with.  I believe there is a security flaw with how your secure mail keys are generated.  On the Yahoo login history page it showed it was added from a state I've never been to.  Somehow people are adding keys to accounts without anyone actually logging into my account or changing my password.  

On the Yahoo login history page it showed it was added from a state I've never been to. 

How are you getting to this "history page"?  I'm not aware that Yahoo/AT&T email accounts have this feature so I'd love to see how you get to it.

@tonydi Here is the link I use.  https://login.yahoo.com/myaccount/activity  

"Acount info" button used to go to this link for me in my sbcglobal.net email.  It doesn't always show the info I need.  
If I add a secure mail key (in the att.com profile editor myself), it doesn't show my location on this page.  But whoever is adding the key to my account it shows North Carolina sometimes on the yahoo acitivty page, but not always.  Sometimes it has useful info and sometimes not.  

Sometimes and sometimes not seems to define this feature.  I can get to that page sometimes and sometimes it just loops back to my AT&T profile page.  Tried different browsers, different Yahoo/AT&T accounts.

Looks like Yahoo tried to neuter this feature but, true to form, borked up and left enough remnants of the code so that you can get to it at times.

Thanks for the link, I'll add it to my arsenal and give it to other users trying to access that info.

Wanted to bump this post as I just had another secure mail key added to my account after 1 week.  Doesn't show any login history, so someone is doing this without logging in, or somehow bypassing the login.  Or it's someone within ATT applying the secure mail key.  

Were you ever able to resolve this issue @unsecuremailkey

i am having a similar problem.