:
| M | ||
| ← | R, Reply | |
| ↞ | A, Shift + Reply | |
| → | F, Fwd | |
| → | Shift + F, Shift + Fwd | |
| F1, Help |
| Inactive | |||
| 🗑 | |||
| ✔ 🔒 : |
Let your mailbox take care of routine messages, even when you’re signed out.
Loading your settings…
Keep your mailbox safe with a password you do not use anywhere else.
Loading password requirements…
You have been signed out. Sign in again with your new mailbox password, or your existing app password if you use one. Update any mail apps that use your mailbox password.
SETTINGS / MAIL
Protect your mailbox with an authenticator app and manage your Webmail sessions.
Updating security settings…
Adding or removing an authenticator, or revoking sessions, requires your mailbox password. App passwords cannot be used here. Codes are single-use; wait for a fresh code between actions.
Your organisation requires two-step verification. Authenticator removal is restricted.
No authenticator is enabled.
These are your Mailcow account authenticators, not a separate Webmail-only setting. Security keys are managed in your organisation’s account portal.
Choose “Enter a setup key” in your authenticator app. Use time-based codes (TOTP), six digits, SHA-1, 30-second intervals.
Keep this key private. Setup expires at . It is not enabled until you confirm.
These sessions cover Webmail only, with a maximum lifetime of 12 hours. Remembered sign-in is disabled. Revocation takes effect on the next request; an already running request may finish.
IMAP/SMTP mail apps and Calendar/Contacts (SOGo) sessions are separate and are not signed out here.
Get a “New mail” notification for messages delivered to your Inbox, even when this tab is closed. Sender names, subjects and message content are never included.
Notifications are tied to this signed-in browser. Signing out, revoking the session, changing account security or suspending the mailbox stops new sends. Sign in and enable again after the session expires (at most 12 hours).
Browser permission:
Notifications are enabled. Authorization expires no later than .
Delivery depends on browser and operating-system background support. A notification already accepted by the push provider can still arrive after you disable or sign out. Notifications expire after five minutes at the provider; the server retries transient failures for up to one hour.
Give yourself a moment to change your mind. MoxiMail saves a real draft, then waits before handing your message to the mail server.
How long to wait after the draft is saved.
Choose Undo send during the countdown to return to editing. A configured, working Drafts folder is required; a failed draft save prevents sending.
Keep this tab open for the countdown. Closing or reloading it cancels sending and retains the saved draft. If you leave while the initial draft save is still in progress, that save is not yet guaranteed. A paused tab may cancel the countdown instead of sending late.
Once the countdown ends and sending starts, Undo is no longer available. This cannot recall a message already handed to the mail server. With the timeout off, the normal send action runs immediately.
Choose how you appear when sending mail. Sender addresses are approved by your organization.
The default is used for new messages. Each identity has its own signature.
Use the recipient-matching identity or always reply using one identity. Existing drafts are unchanged.
Create custom colored labels to keep your email messages in order.
Labels are stored as IMAP keywords. Renaming a label keeps its existing messages. Pinned labels remain available in the application rail when the sidebar is closed.
Label searches apply to your current mail folder.
Use the native mail shortcuts below. Mail actions apply to the selected messages or open message; available actions depend on your mailbox.
Turning this off also disables application dialog, navigation and compose shortcuts. Browser typing, Tab, copy, paste and cut remain available. Mail letter shortcuts do not run while you type.
Fine-tune spam filtering for your mailbox.
Allow changes spam scoring only. Malware scanning and dangerous-attachment protections remain mandatory. Sender addresses can be forged: an exception does not authenticate a sender or guarantee delivery.
Loading sender exceptions…
Domain exceptions apply to that exact domain, not its subdomains. Enter no wildcards. Sender local parts support letters, numbers, dots, underscores and hyphens; plus addresses are not supported by Mailcow’s policy format. Use punycode for international domains.
No personal exceptions. Your organisation’s spam filtering applies.
These apply to your mailbox domain. Only your administrator can change them.
No inherited sender exceptions.
The filter checks both the envelope sender and the visible From address. Opposing exceptions can conflict; this page rejects known overlaps instead of promising a precedence. Block affects spam scoring and may reject or send mail to Junk according to your organisation’s thresholds. Changes do not move existing messages.
Bring a public calendar or official holidays into your private calendar. Subscriptions belong to your mailbox, not everyone in your organization.
Open Calendar to sign in with the same mailbox before connecting or refreshing a subscription.
No calendar subscriptions yet.
Access revoked. Remove again to finish deleting the SOGo calendar.
Connection outcome is uncertain. Before reconnecting, open Calendar and remove any calendar created by this attempt, then unsubscribe here. Automatic retries are blocked to prevent duplicates.
Sources are checked every six hours. Cached updates are imported when this settings page opens and every 15 minutes while it stays open and visible. Calendar sign-in must remain active. Updates are not imported into SOGo while you are signed out. Failed downloads keep the last valid calendar.