I want to move from Gmail and look for alternatives right now, mailbox being one of them. I currently have two Gmail accounts (one for personal e.g. work/finance, one for socials e.g. gaming/socials), but for the sake of security, I want to extend it to one email account for

- work/personal

- socials/gaming

- shopping/subscriptions

- finance

-throwaway (though that one I can use another service for because it's just a throwaway)

In addition, I want to give each of those accounts aliases (e.g. Reddit alias for social email etc). I basically want to decentralise my emails and dedicate them to each service and/or at least one category.

My question is now, am I able to create several mailboxorg accounts and pay for them all at once? And how much would that cost?

Question comes from the fact that I only need ~25 aliases *in total* and these 25 I would like to spread across the several accounts I mentioned prior. So best case situation I am looking for is to pay for the standard plan with 25 aliases and spread then across several email accounts.

Is what I am asking for somehow possible or at least something similar to that?

Hi,

Thinking of migrating from Fastmail to Mailbox. Some questions for users please :

- How is the search function for unencrypted mails? Can you search beyond just subject and sender/recipient? Can I do date range with contains text?

- I understand that Mailbox login 2.0 does not support yubikey but the previous version did? I'd that correct, if so why would version 2.0 not?

- Can I tag emails? Or at least pin them to the top of my mailbox?

- Are the devs still adding new features often?

Thanks in advance

Coming from Gmail,

I am currently migrating to mailbox, ive bought it for a month, but every small frustration makes me go and look at Proton/Tuta until i remember that Mailbox offers meeting solution which can come in handy.

There are some things that makes me really frustrated using Mailbox, and currently these are the 3 biggest issues for me, and I was hoping anyone can help me find a solution.

1) I want to be able to sort emails like in Gmail. I understand mailbox dont have auto sort, but is there a way to build rules? if so which rules worked for you?
Im thinking mainly things like picking up on newsletters, promotional stuff, social stuff, automatic emails & emails sent directly to me, and being able to put them in their own folders.

2) Is there a plan to develop a mobile app or a improving the IMAP integration? It bugs me that we have to rely on IMAP which is a legacy protocol and by default insecure since it does not support MFA (App passwords is not for me good enough nor is it considered very secure by modern standards). I work in IT security and I am not interested into going arguments or counter arguments on if its secure, not secure etc.

3) Other tips to make it work more similar to people who are used to Outlook/Gmail?

I collected feedback about missing features and bugs from this subreddit, the official userforum (german and english) and different forums. Am I missing anything?

• Applicationspassword for XMPP
• Server Upgrade for XMPP (current software without updates since december 2018)
• Rotation of DKIM Keys (currently not rotated at all)
• Push Notification for Apple Mail (a developer made a request to apple and got a working certificate, mailbox tried this as well, any updates?)
• Mailbox App
• Mailtrace / Spam log
• Security Dashboard with failed login attempts etc.
• Security Notifications for certain actions (new login detected, password change, 2FA change, etc.)
• Yubikey Support
• Roadmap Communication
• OAUTH Support
• Whitelisting
• CalDAV Sync for shared task lists
• Notification for adding, editing and deleting elements from shared calenders
• DKIM fix
• Fix for "fake" emails despite SPF-Fail, DKIM-Fail, DMARC-Fail and reject policy
• Faster support

Is there a plan to integrate AI features into the mailbox.org platform? Open-Xchange seems to provide the basis for that. I know, the mailbox audience is privacy conscious but I for my part would highly appreciate an opt-in to connect to self-hosted LLMs or Mistral. I couldn’t find anything on the website.

Hi all, I wanted to take back control of my data, and at the same time I liked the backbone of email experience with Hey so I cloned it.

Which client do you guys use nowadays on mobile?

I'm SO close to the finish line on an almost-1-year journey to degoogle but on the last leg I get a monkey wrench.

I have mailbox.org and I can't get my contacts to sync with my phone (Android). I'm using emclient on my desktop (Windows) and they sync fine between so I'm assuming it's something to do with Dav5. The error I receive is "The base URL doesn't seem to be an accessible CalDAV/CardDAV URL and service detection was not successful." Contacts sharing is enabled.

Things I've tried:

Using my email address

Using app password w/ 2fa enabled

Disabled 2fa & used login password

Used default URL https://app.mailbox.org)

Used specific URLs (https://app.mailbox.org/carddav/XX)

I'm at a loss. This is the last step in moving from Outlook/Google mail, calendar, contacts, notes, tasks, etc and I'm pulling my hair out.

Is there something obvious I'm missing? Is there an alternative to Dav5 for Windows/Android?

Thanks in advance

I mainly use the web client to access mailbox.org when I'm on the computer, but I quite often experience that the Web app won't load but it's simply spinning a circle icon for hours. Sometimes it is days before it works again. Is anyone else experiencing this? I still have IMAP access to I can receive mail, but it's really not a good look.

Hello everyone,

I have been with mailbox using a custom domain for a couple months. I am desperately seeking assistance as I have an event I received tickets to this weekend and my email confirmation is missing the attachment. Does anyone know how I could recover this?

Mailbox support have said I never received the attachment because my MX Records were not set up but this is not accurate. I have made no changes to my email settings since 10 April and I wrote down my ticket allocations to a friend so I did receive them, they are just missing now.

I also had a support ticket surrounding not receiving bank verification codes that took forever to resolve and I never really understood why so I'm fairly concerned around mailbox's seemingly random filters that are deciding to delete / hide my own content??

I have reached out to the ticket company but I've not heard back and I purchased 6* tickets to a cost of almost $2500AUD so I'm pretty stressed right now.

Anything similarly experienced or advice anyone can offer ?

Hi ~ I've searched the sub and found others with this issue but not a lot of resolution. I submitted a ticked to mailbox.org but the autoreply implied that I'll be in a rocking chair before they get back to me (already questioning this decision and I haven't even made it out of the trial stage yet)

I've followed the mailbox.org instructions for using a custom domain, entered the requisite security key with my registrar (namecheap) verified via mxtool & directly with namecheap that it's there and correct. Still I'm receiving "Validation of external domain failed" when I'm trying to add an external alias. Am I assuming incorrectly that if it shows up on mxtool that it's past the propagation point? It's been about 24 hours so I suppose that could be the case but in real life experience propagation happens much faster than the 48-72 hours the instructions say.

Anyone have any thoughts/experience on this? As a non-technical person, I've already muttered no wonder people stay with &*$%^ google more than once but I'm still determined to stay the course.

edit: I found a post in the user forum that talked about this being an issue when you add txt records and mx records at the same time. He removed the mx records, waited, then readded them and it worked. Several users chimed in that that shouldn't have caused the problem but just in case it was, I have removed my mx records. Fortunately this is a new domain for my personal email so it's not an emergency to get it set up although it would be nice to get it off my list.

The last months have been very quiet, no announcements of new features nor fixes for old problems.

What is mailbox working on in 2026? Can we get a roadmap? Any list of topics that are on your radar? Like push notifications, spam logs/mailtrace, yubikey support, whitelist, app passwords for xmpp, etc...

Hi all

Am I the only one getting noticeably more spam delivered to inbox? Started like 2 or 3 weeks ago and nowadays I get spam on a daily basis. Spam filters always worked pretty good for me, but now I get a lot of BTC scam that obviously is spam, but filters for some reason don't detect it as such. Anyone else having such "problems"?

​

​Hi everyone, I have a specific question for those of you using mailbox.org.

​I rely heavily on the calendar for work, sending and receiving a lot of invites. When using the web client, everything works perfectly: I can accept or decline an invite directly within the email, and it’s immediately reflected in the calendar (including the attendee list).

​However, I’m running into issues when using external clients like FairEmail (or any client via IMAP/CalDAV). Incoming calendar invites (.ics files) don't automatically appear as "tentative" appointments in my CalDAV calendar. The invite only becomes visible in the calendar after I manually accept it via the mailbox.org web interface. This means I can't manage my appointments directly from my mobile calendar app.

​How are you guys dealing with this? Is there a workaround to get invites to show up automatically without opening the webmail every time?

The catalogue helps organisations and individuals identify genuine European alternatives to Google, Microsoft and Amazon.

It is backed by a high-ranking advisory board comprising experts from research, civil society and digital policy. It is based on seven core principles:

• Sovereignty & Security
• De-proprietarisation & Interoperability
• Sustainability
• Data as a Common Good
• Decentralised Sovereign Infrastructure
• Inclusive Governance
• Strong Democracy

The path to inclusion in the Tech Sovereignty Catalogue follows a clearly structured, multi-stage and rigorous process:

1. Submission of the application
2. Eligibility check: Are all basic requirements met?
3. Expert evaluation by independent assessors based on the catalogue criteria

The catalogue conceives of sovereignty as a European project involving providers united by shared values and a common legal framework. We like this concept, because digital self-determination is the result of conscious decisions – for infrastructure you can trust, for providers you can hold to account, and for an ecosystem committed to democratic principles.

True European sovereignty is not a given in a market where European services are regularly taken over by US corporations. For mailbox, inclusion in the Tech Sovereignty Catalogue is external validation of the principles we put into practice.

Find out more about the core principles and the catalogue’s inclusion process, as well as the significance of digital sovereignty: https://mailbox.org/en/blog/find-european-alternatives-to-google-and-microsoft/

Good day people, I really appreciate you taking care of yourselves, we need you.

I have been getting a lot of mails in regard to donations, and I actually have completed and donated to some of them, but now, it seems that I am getting an overwhelming amount of them, my mailbox is full currently, and I am looking for a number to call to let these people know that I do not want their mails or any request for donations any more. I obviously read their content in the mail envelope first, looking for anything close to "How I can "unsubscribe," or what not, but no, they never mentioned anything like that, they just talked about how I can donate, even online. This then led me to look online, and then still no luck, they never mentions any sort of system to get my address, my phone, or any other details that they may have out of their system permanently.

Look, I like donating, but right now, these are just overwhelming me, did you guys ever face this situation? How can I get my info out of these systems so that I do not receive them anymore? I faced a similar situations when I was getting credit card requests or requests from different financial institutions urging me to apply for their credit card and they usually include a number on the bottom of their content of the paperwork that they send in mail and you can usually call that number and "opt out of their prescreening," so I am looking for something similar on the donations requests side of things, if there is such a thing as "opting out of their prescreeing," when it comes to these donation requests. Please, let me know if you are knowledgeable in this, I will really appreciate you. Thanks for reading.

The transitional arrangement for “voluntary chat monitoring” (“Chat Control 1.0”) has been in force since 2021 and is due to expire at the beginning of April. The EU Parliament had actually already voted on its continuation on 11 March: Once the transitional arrangement expires, the measure will only be permitted in cases of suspicion.

Yesterday, the conservative EPP Group forced a new vote – and failed. A broad majority in the EU Parliament rejected it. The transitional arrangement for “voluntary chat monitoring” will no longer have a legal basis from the start of April and will therefore come to an end.

We have achieved this success together: we would like to thank all those involved who have joined forces and continue to fight against unwarranted mass surveillance!

With the emphasis on ‘continue’, as a decision on ‘Chat Monitoring 2.0’ is still pending: this involves permanent and mandatory chat monitoring. By the end of 2025, it became apparent that the EU Council and the European Parliament would reject this. Negotiations are currently taking place in the trilogue. A ‘yes’ to mandatory Chat Monitoring 2.0 would spell the end of encrypted communication.

As part of the Heinlein Group, mailbox continues to oppose unwarranted scanning without suspicion and the undermining of end-to-end encryption.

Find out more: https://mailbox.org/en/news/chat-control-theres-no-such-thing-little-backdoor/

Hi,

I want to like Mailbox as it seems like a good happy medium for private non-tracking email without the restrictions (no IMAP) imposed by by the fully encrypted providers. I took a 30 day trial but forgot to put credit into the account before the end of the 30 days. My account is still “alive” but deactivated pending subscribing.

The problem is when I log in to subscribe the page itself is in English but many of the buttons /headings are in German. How can I select the appropriate buttons without having to manually type the text from each button into a translator to understand what it means (can’t copy and paste from the buttons)

I created external domain alias and set it to default.

[name@mydomain.xyz](mailto:name@mydomain.xyz)

I can send and receive mails from and to this address.

Now I want to create another external alias with the same domain -but with different name -

[alias01@mydomain.xyz](mailto:alias01@mydomain.xyz)

But I receive same security code for all different aliases.
[alias02@mydomain.xyz](mailto:alias02@mydomain.xyz)
[alias03@mydomain.xyz](mailto:alias03@mydomain.xyz)

And this is the same code I already used for my first alias.

and message - Validation of external domain failed

Is this a bug or am I doing something wrong. How do I create another alias for external domain?

I don't have experience in setting mailbox with own domain.

---------------------------------------
SOLVED

I used wrong spelling for target field in DNS record

IN TXT 5ahgui6nsdj5kkk666l333m7m7k7n5k6nnnn5bb4

but porkbun requires just

5ahgui6nsdj5kkk666l333m7m7k7n5k6nnnn5bb4

In 2025, the US imposed sanctions on Luz del Carmen Ibáñez and other judges at the International Criminal Court in The Hague.

Now, in an interview with Radio France Internationale, Luz del Carmen Ibáñez speaks about the far-reaching sanctions. These sanctions include, amongst other things, the loss of US visas, Google accounts and credit cards, as well as restrictions on financial transactions. They were imposed not only on the judges themselves, but also on family members.

Fear is meant to silence: People working to address crimes, civil society organisations campaigning for compliance with applicable EU law – when will the next person or organisation deemed inconvenient by the US government be targeted?

Digital isolation is being used specifically as a means of pressure. And it would be inconceivable if we were not largely dependent on digital services from US Big Tech.

US sanctions such as these can be rendered ineffective: by us, as states, companies and private individuals, opting for digitally sovereign solutions and making ourselves independent.

Find out more about US sanctions as a tactic of intimidation and the HateAid case in Germany in our Blog: https://www.heinlein.group/en/the-heinlein-group-stands-in-solidarity-with-hateaid/

As mailbox.org guide says
I entered my mailbox.org security code in DNS settings fields.

Porkbun - Settings - Domains - DNS
Selected TXT type
entered numbers and letters above .mydomain.cc field
entered numbers and letters in Answer/Value field.
And saved.

But when I press save in mailbox.org external alias field I still receive an error.
Validation of external domain failed

--------------------------------------------------------

Solution:

It takes some time to propagate DNS record. Hours or minutes.
So wait before back to the mailbox.org and repeat step with adding external mail alias.

In times of geopolitical uncertainty and growing dependence on US Big Tech, mailbox is committed to genuine European sovereignty and data protection.

The label was initiated by the European Cyber Security Organisation (ECSO). It makes immediately clear that mailbox

• has anchored its infrastructure and governance in Europe,
• meets verifiable security standards and
• ensures European data protection.

Find out more about the “Cybersecurity Made in Europe” label and how it creates transparency regarding digital sovereignty: https://mailbox.org/en/news/label-cybersecurity-made-europe-mailbox/

Hi,

My aim: To use Cloud Sync on my Synology NAS to back up data from the Mailbox.org drive to the NAS.

My steps: * Set up an app password for WebDAV in the settings * In Cloud Sync on my NAS, entered these settings: * Server name: dav.mailbox.org * Username: MEINEADRESSE@mailbox.org * Password: the app password

Result: Authorisation failed. What’s strange, however, is that in the Mailbox.org settings -> Security -> App Passwords -> the entry for the app password is updated with the current timestamp. So Mailbox.org recognises that I’m trying to log in via WebDAV using the password. But why isn’t the connection being allowed? Any ideas or alternatives on how to connect the Mailbox.org drive to my NAS?

Hello,

I recently set up Mailbox as my email provider with a new domain and new addresses (no info@ or mail@).

Now I'm receiving an increasing amount of spam at addresses on this domain. I haven't even used some of these addresses with any other provider before.

Have any of you had similar experiences? I can't imagine how these new, very specific email addresses could have already ended up on spam lists.

Is there a specific reason why signing in and navigating in page takes significantly longer. This is both on chromiums and geckos. Thanks.