Mailboxes and mail apps

A mailbox is one person's address at your domain, with its own login. The person who reads it doesn't need to be in your account: Juma reads juma@duka.co.tz and never sees the wallet.

Add a mailbox

1. Open the project, then Email.

2. Under Mailboxes, choose Add mailbox.

3. Type the Address: letters, digits, dots, hyphens and underscores, up to 64.

4. Type its Password: at least 15 characters. A password known from a leak is refused.

5. Choose Add mailbox, and give the address and password to its user.

Its storage grows as it needs; you can set a limit, like 5 GB for a staff mailbox. A project can have up to 1,000 mailboxes.

Its user's own login

The mailbox's user logs in with the address and password, on the same login page as everyone. They reach only their mailbox: the webmail, its settings, and the setup of their phones. Like every login, it takes two steps: they can add an authenticator app or a passkey.

A mailbox's user can't reset their password by email: the reset would go to the mailbox they can't open. The account's Owner sets a new one instead, under the mailbox, with New password. That logs the user out everywhere, and their mailbox's log says who changed it and when.

Your own address works differently. If asha@duka.co.tz is also Asha's login, the mailbox opens with her own login and has none of its own. Before that, Asha needs a way back in that doesn't go through that mailbox: a passkey, or a recovery address somewhere else.

Phones, Outlook and Mac Mail

Mail apps never get the mailbox's real password. They use a mail app password: 16 letters we make, shown once.

1. The mailbox's user logs in and opens their mailbox's page.

2. They make a mail app password, and name it, like "Juma's phone".

3. In the mail app, they add an account with their address and that password.

Most apps find the rest by themselves. If one asks:

An iPhone or a Mac can install a setup profile from the mailbox's page instead. Making a new mail app password replaces the old one, so a lost phone stops working at once. POP3 isn't offered: IMAP keeps every device in step.

Suspend or delete

• Suspend stops its logins and its phones, while mail keeps arriving and waits. Use it when someone leaves, until you decide. Turn back on brings everything back.

• Delete removes the mailbox and all its mail at once. You type the address to confirm.

Nobody reads someone else's mail

There's no "read this mailbox" button: not for the account's Owner, not for our team, and not for Sali. Owners and staff see counts, sizes and delivery logs only. What the Owner does to a mailbox, a new password, a suspension, a change to its forwarding, is written in the mailbox's own log, which its user reads.

Example: Juma's phone

Juma joins Asha's shop. Asha adds juma@duka.co.tz with a first password and sends it to him. Juma logs in, adds his authenticator app, and makes a mail app password named "Juma's phone". On his Android phone he adds the account with his address and that password; the app finds mail.duka.co.tz by itself. When he loses the phone a month later, he makes a new mail app password, and the lost phone stops getting mail.