Q: What is Forward Email's history?

You can learn more about Forward Email on our About page .

Question 1

What is Forward Email?

Accepted Answer

Note

Forward Email is perfect for individuals, small businesses, and developers who want professional email addresses without the cost and maintenance of a full email hosting solution.

Forward Email is a fully featured email service provider and email hosting provider for custom domain names.

It's the only free and open-source service, and lets you use custom domain email addresses without the complexity of setting up and maintaining your own email server.

Our service forwards emails sent to your custom domain to your existing email account – and you can even use us as your dedicated email hosting provider.

Key features of Forward Email:

Custom Domain Email: Use professional email addresses with your own domain name
Free Tier: Basic email forwarding at no cost
Enhanced Privacy: We don't read your emails or sell your data
Open Source: Our entire codebase is available on GitHub
SMTP, IMAP, and POP3 Support: Full email sending and receiving capabilities
End-to-End Encryption: Support for OpenPGP/MIME
Custom Catch-All Aliases: Create unlimited email aliases

You can compare us to 56+ other email service providers on our Email Comparison page.

Tip

Learn more about Forward Email by reading our free Technical Whitepaper and reviewing our Security Audit by Cure53.

Question 2

Who uses Forward Email?

Accepted Answer

We provide email hosting and email forwarding service to 1.6+ million domains and these notable users:

Customer Case Study U.S. Naval Academy :page_facing_up: Case Study Canonical :page_facing_up: Case Study Netflix Games The Linux Foundation :page_facing_up: Case Study The PHP Foundation Fox News Radio Disney Ad Sales jQuery :page_facing_up: Case Study LineageOS Ubuntu :page_facing_up: Case Study Kubuntu :page_facing_up: Case Study Lubuntu :page_facing_up: Case Study The University of Cambridge :page_facing_up: Case Study The University of Maryland :page_facing_up: Case Study The University of Washington :page_facing_up: Case Study Tufts University :page_facing_up: Case Study Swarthmore College :page_facing_up: Case Study Government of South Australia Government of Dominican Republic Fly.io RCD Hotels Isaac Z. Schlueter (npm) :page_facing_up: Case Study David Heinemeier Hansson (Ruby on Rails)

Question 3

What is Forward Email's history?

Accepted Answer

You can learn more about Forward Email on our About page.

Question 4

How fast is this service?

Accepted Answer

Note

Our system is designed for speed and reliability, with multiple redundant servers to ensure your emails are delivered promptly.

Forward Email delivers messages with minimal delay, typically within seconds of receipt.

Performance metrics:

Average Delivery Time: Less than 5-10 seconds from receipt to forwarding (see our Time to Inbox "TTI" monitoring page)
Uptime: 99.9%+ service availability
Global Infrastructure: Servers strategically located for optimal routing
Automatic Scaling: Our system scales during peak email periods

We operate in real-time, unlike other providers which rely upon delayed queues.

We do not write to disk or store logs – with the exception of errors and outbound SMTP (see our Privacy Policy).

Everything is done in-memory and our source code is on GitHub.

Question 5

Thunderbird

Accepted Answer

Create a new alias and generate a password in your Forward Email dashboard
Open Thunderbird and go to Edit → Account Settings → Account Actions → Add Mail Account
Enter your name, Forward Email address, and password
Click Configure manually and enter:
- Incoming: IMAP, imap.forwardemail.net, port 993, SSL/TLS
- Outgoing: SMTP, smtp.forwardemail.net, port 465, SSL/TLS (recommended; port 587 with STARTTLS is also supported)
Click Done

Question 6

Microsoft Outlook

Accepted Answer

Create a new alias and generate a password in your Forward Email dashboard
Go to File → Add Account
Enter your Forward Email address and click Connect
Choose Advanced options and select Let me set up my account manually
Select IMAP and enter:
- Incoming: imap.forwardemail.net, port 993, SSL
- Outgoing: smtp.forwardemail.net, port 465, SSL/TLS (recommended; port 587 with STARTTLS is also supported)
- Username: Your full email address
- Password: Your generated password
Click Connect

Question 7

Apple Mail

Accepted Answer

Create a new alias and generate a password in your Forward Email dashboard
Go to Mail → Preferences → Accounts → +
Select Other Mail Account
Enter your name, Forward Email address, and password
For server settings, enter:
- Incoming: imap.forwardemail.net
- Outgoing: smtp.forwardemail.net
- Username: Your full email address
- Password: Your generated password
Click Sign In

Question 8

eM Client

Accepted Answer

Create a new alias and generate a password in your Forward Email dashboard
Open eM Client and go to Menu → Accounts → + Add Account
Click on Mail and then select Other
Enter your Forward Email address and click Next
Enter the following server settings:
- Incoming server: imap.forwardemail.net
- Outgoing server: smtp.forwardemail.net
Enter your full email address as the User name and your generated password as the Password for both incoming and outgoing servers.
eM Client will test the connection. Once it passes, click Next.
Enter your name and choose an account name.
Click Finish.

Question 9

Do you offer a webmail client?

Accepted Answer

Yes. Our official, open-source webmail client is available at mail.forwardemail.net — no installation required, just log in from any browser using an alias address and its generated password (the same credentials used for IMAP, SMTP, and POP3).

It launched in February 2026 and also supports CalDAV Scheduling Extensions (RFC 6638), DANE/TLSA (RFC 6698), and Domain Connect for 1-click DNS setup, with real-time push notifications for IMAP, CalDAV, and CardDAV delivered over WebSockets.

The source code is fully open-source and available on GitHub at github.com/forwardemail/mail.forwardemail.net.

Question 10

Do you have desktop and mobile apps?

Accepted Answer

Yes. Native apps are available for desktop and mobile, built from the same open-source project as our webmail client, and can all be downloaded from our download page:

Desktop: macOS (Apple Silicon and Intel), Windows (x64 and ARM64, as either an .exe or .msi installer), and Linux (AppImage, .deb, .rpm, and Snap — each for x64 and ARM64).
Mobile: Android (APK, with an alternate F-Droid build) and iOS.

All release builds are published on GitHub at github.com/forwardemail/mail.forwardemail.net/releases, and the download page lets you verify release checksums against SHA256SUMS.txt.

Question 11

Mobile Devices

Accepted Answer

For iOS:

Go to Settings → Mail → Accounts → Add Account → Other
Tap Add Mail Account and enter your details
For server settings, use the same IMAP and SMTP settings as above

For Android:

Go to Settings → Accounts → Add Account → Personal (IMAP)
Enter your Forward Email address and password
For server settings, use the same IMAP and SMTP settings as above

Question 12

Sendmail SMTP Relay Configuration

Accepted Answer

You can configure Sendmail to relay emails through Forward Email's SMTP servers. This is a common setup for legacy systems or applications that rely on Sendmail.

Estimated Setup Time: Less than 20 minutes

Important: This requires a paid plan with SMTP access enabled.

Configuration

Edit your sendmail.mc file, typically located at /etc/mail/sendmail.mc:
sudo nano /etc/mail/sendmail.mc
Add the following lines to define the smart host and authentication:
define(`SMART_HOST', `smtp.forwardemail.net')dnl define(`RELAY_MAILER_ARGS', `TCP $h 465')dnl define(`confAUTH_MECHANISMS', `EXTERNAL GSSAPI DIGEST-MD5 CRAM-MD5 LOGIN PLAIN')dnl FEATURE(`authinfo',`hash -o /etc/mail/authinfo.db')dnl
Create the authentication file /etc/mail/authinfo:
sudo nano /etc/mail/authinfo
Add your Forward Email credentials to the authinfo file:
AuthInfo:smtp.forwardemail.net "U:your-alias@yourdomain.com" "P:your-generated-password" "M:PLAIN"
Generate the authentication database and secure the files:
sudo makemap hash /etc/mail/authinfo < /etc/mail/authinfo sudo chmod 600 /etc/mail/authinfo /etc/mail/authinfo.db
Rebuild the Sendmail configuration and restart the service:
sudo make -C /etc/mail sudo systemctl restart sendmail

Testing

Send a test email to verify the configuration:

echo "Test email from Sendmail" | mail -s "Sendmail Test" recipient@baychi.org

Question 13

Exim4 SMTP Relay Configuration

Accepted Answer

Exim4 is a popular MTA on Debian-based systems. You can configure it to use Forward Email as a smarthost.

Estimated Setup Time: Less than 15 minutes

Important: This requires a paid plan with SMTP access enabled.

Configuration

Run the Exim4 configuration tool:
sudo dpkg-reconfigure exim4-config
Select the following options:
- General type of mail configuration: mail sent by smarthost; received via SMTP or fetchmail
- System mail name: your.hostname
- IP-addresses to listen on for incoming SMTP connections: 127.0.0.1 ; ::1
- Other destinations for which mail is accepted: (leave blank)
- Domains to relay mail for: (leave blank)
- IP address or host name of the outgoing smarthost: smtp.forwardemail.net::465
- Hide local mail name in outgoing mail? No
- Keep number of DNS-queries minimal (Dial-on-Demand)? No
- Delivery method for local mail: Mbox format in /var/mail/
- Split configuration into small files? No
Edit the passwd.client file to add your credentials:
sudo nano /etc/exim4/passwd.client
Add the following line:
smtp.forwardemail.net:your-alias@yourdomain.com:your-generated-password
Update the configuration and restart Exim4:
sudo update-exim4.conf sudo systemctl restart exim4

Testing

Send a test email:

echo "Test from Exim4" | mail -s "Exim4 Test" recipient@baychi.org

Question 14

msmtp SMTP Client Configuration

Accepted Answer

msmtp is a lightweight SMTP client that's useful for sending emails from scripts or command-line applications.

Estimated Setup Time: Less than 10 minutes

Important: This requires a paid plan with SMTP access enabled.

Configuration

Create or edit the msmtp configuration file at ~/.msmtprc:
nano ~/.msmtprc
Add the following configuration:
defaults auth on tls on tls_trust_file /etc/ssl/certs/ca-certificates.crt logfile ~/.msmtp.log account forwardemail host smtp.forwardemail.net port 465 tls_starttls off from your-alias@yourdomain.com user your-alias@yourdomain.com password your-generated-password account default : forwardemail
Set the correct permissions for the configuration file:
chmod 600 ~/.msmtprc

Testing

Send a test email:

echo "This is a test email from msmtp" | msmtp -a default recipient@baychi.org

Question 15

Command-line Email Clients

Accepted Answer

Popular command-line email clients like Mutt, NeoMutt, and Alpine can be configured to use Forward Email's SMTP servers for sending mail. The configuration will be similar to the msmtp setup, where you provide the SMTP server details and your credentials in the respective configuration files (.muttrc, .neomuttrc, or .pinerc).

Question 16

Windows Email Configuration

Accepted Answer

For Windows users, you can configure popular email clients like Microsoft Outlook and eM Client using the IMAP and SMTP settings provided in your Forward Email account. For command-line or scripting use, you can use PowerShell's Send-MailMessage cmdlet (though it is considered obsolete) or a lightweight SMTP relay tool like E-MailRelay.

Question 17

Postfix SMTP Relay Configuration

Accepted Answer

You can configure Postfix to relay emails through Forward Email's SMTP servers. This is useful for server applications that need to send emails.

Estimated Setup Time: Less than 15 minutes

Important: This requires a paid plan with SMTP access enabled.

Installation

Install Postfix on your server:

# Ubuntu/Debian sudo apt update && sudo apt install postfix # CentOS/RHEL sudo yum install postfix # macOS brew install postfix

During installation, select "Internet Site" when prompted for configuration type.

Configuration

Edit the main Postfix configuration file:

sudo nano /etc/postfix/main.cf

Add or modify these settings:

# SMTP relay configuration relayhost = [smtp.forwardemail.net]:465 smtp_tls_wrappermode = yes smtp_tls_security_level = encrypt smtp_sasl_auth_enable = yes smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd smtp_sasl_security_options = noanonymous smtp_tls_CAfile = /etc/ssl/certs/ca-certificates.crt

Create the SASL password file:

sudo nano /etc/postfix/sasl_passwd

Add your Forward Email credentials:

[smtp.forwardemail.net]:465 your-alias@yourdomain.com:your-generated-password

Secure and hash the password file:

sudo chmod 600 /etc/postfix/sasl_passwd sudo postmap /etc/postfix/sasl_passwd

Restart Postfix:

sudo systemctl restart postfix

Testing

Test your configuration by sending a test email:

echo "Test email body" | mail -s "Test Subject" recipient@baychi.org

Question 18

How to Send Mail As using Gmail?

Accepted Answer

Estimated Setup Time: Less than 10 minutes

Getting Started: If you've followed the instructions above under How do I get started and set up email forwarding, then you can continue reading below.

Important: Google has deprecated this Gmail Send Mail As setup. Please review Google announcement. Use Forward Email Webmail, Forward Email apps, or another email client instead. See Forward Email FAQ for help.

Important: Please ensure you have read our Terms, Privacy Policy, and Outbound SMTP Limits – your use is considered acknowledgement and agreement.

Important: If you are a developer, then refer to our email API docs.

Go to My Account Domains Settings Outbound SMTP Configuration and follow setup instructions
Create a new alias for your domain under My Account Domains Aliases (e.g. hello@baychi.org)
Click on Generate Password next to the newly created alias. Copy to your clipboard and securely store the generated password shown on the screen.
Go to Gmail and under Settings Accounts and Import Send mail as, click "Add another email address"
When prompted for "Name", enter the name that you want your email to be seen as "From" (e.g. "Linus Torvalds").
When prompted for "Email address", enter the full email address of an alias you created under My Account Domains Aliases (e.g. hello@baychi.org)
Uncheck "Treat as an alias"
Click "Next Step" to proceed
When prompted for "SMTP Server", enter smtp.forwardemail.net and change the port to 465
When prompted for "Username", enter the full email address of an alias you created under My Account Domains Aliases (e.g. hello@baychi.org)
When prompted for "Password", paste the password from Generate Password in step 3 above
Select the radio button for "Secured connection using SSL"
Click "Add Account" to proceed
Open a new tab to Gmail and wait for your verification email to arrive (you will receive a verification code that confirms you are the owner of the email address you are attempting to "Send Mail As")
Once it arrives, copy and paste the verification code at the prompt you received in the previous step
Once you've done that, go back to the email and click the link to "confirm the request". You will most likely need to do this step and the previous step for the email to be correctly configured.

Congratulations! You've successfully completed all steps.

Question 19

What is the legacy free guide for Send Mail As using Gmail?

Accepted Answer

Important: Google has deprecated this Gmail Send Mail As setup. Please review Google announcement. Use Forward Email Webmail, Forward Email apps, or another email client instead. See Forward Email FAQ for help.

Important: This legacy free guide is deprecated as of May 2023 since we now support outbound SMTP. If you use the guide below, then this will cause your outbound email to say "via forwardemail dot net" in Gmail.

Estimated Setup Time: Less than 10 minutes

Getting Started: If you've followed the instructions above under How do I get started and set up email forwarding, then you can continue reading below.

Question 20

Advanced Gmail Routing Configuration

Accepted Answer

Estimated Setup Time: 15-30 minutes

If you want to set up advanced routing in Gmail so that aliases that don't match a mailbox will forward to Forward Email's mail exchanges, follow these steps:

Log in to your Google Admin console at admin.google.com
Go to Apps → Google Workspace → Gmail → Routing
Click on Add Route and configure the following settings:

Single Recipient Settings:

Select "Change envelope recipient" and enter your primary Gmail address
Check "Add X-Gm-Original-To header with original recipient"

Envelope Recipient Patterns:

Add a pattern that matches all non-existent mailboxes (e.g., .*@yourdomain.com)

Email Server Settings:

Select "Route to host" and enter mx1.forwardemail.net as the primary server
Add mx2.forwardemail.net as the backup server
Set port to 25
Select "Require TLS" for security

Click Save to create the route

Important: This configuration will only work for Google Workspace accounts with custom domains, not for regular Gmail accounts.

Question 21

Advanced Outlook Routing Configuration

Accepted Answer

Estimated Setup Time: 15-30 minutes

For Microsoft 365 (formerly Office 365) users who want to set up advanced routing so that aliases that don't match a mailbox will forward to Forward Email's mail exchanges:

Log in to the Microsoft 365 admin center at admin.microsoft.com
Go to Exchange → Mail flow → Rules
Click Add a rule and select Create a new rule
Name your rule (e.g., "Forward non-existent mailboxes to Forward Email")
Under Apply this rule if, select:
- "The recipient address matches..."
- Enter a pattern that matches all addresses at your domain (e.g., *@yourdomain.com)
Under Do the following, select:
- "Redirect the message to..."
- Choose "The following mail server"
- Enter mx1.forwardemail.net and port 25
- Add mx2.forwardemail.net as a backup server
Under Except if, select:
- "The recipient is..."
- Add all your existing mailboxes that should not be forwarded
Set the rule priority to ensure it runs after other mail flow rules
Click Save to activate the rule

Question 22

Why am I not receiving my test emails?

Accepted Answer

If you're sending a test email to yourself, then it may not show up in your inbox because it has the same "Message-ID" header.

This is a widely known issue, and also affects services such as Gmail. Here is the official Gmail answer regarding this issue.

If you continue to have issues, then it is most likely to be an issue with DNS propagation. You will need to wait a bit longer and try again (or try setting a lower TTL value on your TXT records).

Still having issues? Please contact us so we can help investigate the issue and find a quick resolution.

Question 23

How do I configure my email client to work with Forward Email?

Accepted Answer

Our service works with popular email clients such as:

Your username is your alias' email address and password is from Generate Password ("Normal Password").

Tip: If you are using Thunderbird, then ensure "Connection security" is set to "SSL/TLS" and Authentication method is set to "Normal password".

Type Hostname Protocol Ports IMAP imap.forwardemail.net SSL/TLS Preferred 993 and 2993 (or 2143 for legacy TLS 1.0) POP3 pop3.forwardemail.net SSL/TLS Preferred 995 and 2995 (or 2110 for legacy TLS 1.0) SMTP smtp.forwardemail.net SSL/TLS Recommended 465 and 2465 for SSL/TLS (recommended) or 587, 2587, 2525, and 25 for STARTTLS

Question 24

Why are my emails landing in Spam and Junk and how can I check my domain reputation?

Accepted Answer

This section guides you if your outbound mail is using our SMTP servers (e.g. smtp.forwardemail.net) (or forwarded via mx1.forwardemail.net or mx2.forwardemail.net) and it is being delivered in the Spam or Junk folder of recipients.

We routinely monitor our IP addresses against all reputable DNS denylists, therefore it is most likely a domain-reputation specific issue.

Emails can land in spam folders for several reasons:

Missing Authentication: Set up SPF, DKIM, and DMARC records.
Domain Reputation: New domains often have neutral reputation until they establish a sending history.
Content Triggers: Certain words or phrases can trigger spam filters.
Sending Patterns: Sudden increases in email volume can look suspicious.

You can try to use one or more of these tools to check your domain's reputation and categorization:

Reputation and Blocklist Check Tools

Tool Name URL Type Cloudflare Domain Categorization Feedback https://radar.cloudflare.com/domains/feedback Categorization Spamhaus IP and Domain Reputation Checker https://check.spamhaus.org/ DNSBL Cisco Talos IP and Domain Reputation Center https://talosintelligence.com/reputation_center Reputation Barracuda IP and Domain Reputation Lookup https://www.barracudacentral.org/lookups/lookup-reputation DNSBL MX Toolbox Blacklist Check https://mxtoolbox.com/blacklists.aspx Blacklist Google Postmaster Tools https://www.gmail.com/postmaster/ Reputation Yahoo Sender Hub https://senders.yahooinc.com/ Reputation MultiRBL.valli.org Blacklist Check https://multirbl.valli.org/lookup/ DNSBL Sender Score https://senderscore.org/act/blocklist-remover/ Reputation Invaluement https://www.invaluement.com/lookup/ DNSBL SURBL https://www.surbl.org/ DNSBL SpamCop https://www.spamcop.net/bl.shtml DNSBL UCEPROTECT's Levels 1, 2, and 3 https://www.uceprotect.net/en/rblcheck.php DNSBL UCEPROTECT's backscatterer.org https://www.backscatterer.org/ Backscatter Protection UCEPROTECT's whitelisted.org https://www.whitelisted.org/ (requires a fee) DNSWL

IP Removal Request Forms by Provider

If your IP address has been blocked by a specific email provider, use the appropriate removal form or contact below:

Provider Removal Form / Contact Notes Google/Gmail https://support.google.com/mail/contact/bulk_send_new Bulk sender contact form Microsoft (Outlook/Office 365/Hotmail) https://sender.office.com Office 365 IP delist portal Yahoo/AOL/Verizon https://senders.yahooinc.com/ Yahoo Sender Hub Apple/iCloud https://ipcheck.proofpoint.com/ Apple uses Proofpoint for IP reputation Proofpoint https://ipcheck.proofpoint.com/ Proofpoint IP check and removal Barracuda Networks https://www.barracudacentral.org/lookups/lookup-reputation Barracuda reputation lookup and removal Cloudmark https://csi.cloudmark.com/en/reset/ Cloudmark CSI reset request GoDaddy/SecureServer https://unblock.secureserver.net GoDaddy IP unblock request form Comcast/Xfinity https://spa.xfinity.com/report Comcast IP removal request Charter/Spectrum https://www.spectrum.net/support/internet/understanding-email-error-codes Contact Spectrum support for removal AT&T abuse_rbl@abuse-att.net Email for removal request Cox Communications unblock.request@cox.net Email for removal request CenturyLink/Lumen abuse@centurylink.com Uses Cloudfilter Windstream abuse@windstream.net Email for removal request t-online.de (Germany) tobr@rx.t-online.de Email for removal request Orange France https://postmaster.orange.fr/ Use contact form or email abuse@orange.fr GMX https://postmaster.gmx.net/en/contact GMX postmaster contact form Mail.ru https://postmaster.mail.ru/ Mail.ru postmaster portal Yandex https://postmaster.yandex.ru/ Yandex postmaster portal QQ Mail (Tencent) https://open.mail.qq.com/ QQ Mail whitelist application (Chinese) Netease (163.com) https://mail.163.com/postmaster/ Netease postmaster portal Alibaba/Aliyun/HiChina https://www.alibabacloud.com/help/en/alibaba-mail/ Contact via Alibaba Cloud console Amazon SES https://docs.aws.amazon.com/ses/latest/dg/faqs-dnsbls.html AWS SES console > Blacklist Removal SendGrid https://support.sendgrid.com/ Contact SendGrid support Mimecast https://community.mimecast.com/ Uses third-party RBLs - contact specific RBL Fastmail https://www.fastmail.com/support/ Contact Fastmail support Zoho https://help.zoho.com/portal/en/kb/campaigns/faqs/campaign-review/articles/how-do-i-delist-my-ip-address Contact Zoho support ProtonMail https://proton.me/support/contact Contact Proton support Tutanota https://tutanota.com/support Contact Tutanota support Hushmail https://www.hushmail.com/support/ Contact Hushmail support Mailbox.org https://mailbox.org/en/support Contact Mailbox.org support Posteo https://posteo.de/en/site/contact Contact Posteo support DuckDuckGo Email https://duckduckgo.com/email/support Contact DuckDuckGo support Sonic.net https://www.sonic.com/support Contact Sonic support Telus https://www.telus.com/en/support Contact Telus support Vodafone Germany https://www.vodafone.de/hilfe/ Contact Vodafone support Xtra (Spark NZ) https://www.spark.co.nz/help/ Contact Spark NZ support UOL/BOL (Brazil) https://ajuda.uol.com.br/ Contact UOL support (Portuguese) Libero (Italy) https://aiuto.libero.it/ Contact Libero support (Italian) Telenet (Belgium) https://www2.telenet.be/en/support/ Contact Telenet support Facebook/WhatsApp https://www.facebook.com/business/help Contact Facebook business support LinkedIn https://www.linkedin.com/help/linkedin Contact LinkedIn support Groups.io https://groups.io/helpcenter Contact Groups.io support Earthlink/Vade Secure https://sendertool.vadesecure.com/en/ Vade Secure sender tool Cloudflare Email Security https://www.cloudflare.com/products/zero-trust/email-security/ Contact Cloudflare support Hornetsecurity/Expurgate https://www.hornetsecurity.com/ Contact Hornetsecurity support SpamExperts/Antispamcloud https://www.spamexperts.com/ Contact via hosting provider Mail2World https://www.mail2world.com/support/ Contact Mail2World support

Tip

Start with a low volume of high-quality emails to build a positive reputation before sending in larger volumes.

Important

If your domain is on a blacklist, each blacklist has its own removal process. Check their websites for instructions.

Tip

If you need additional help or find that we are false-positive listed as spam by a certain email service provider, then please contact us.

Question 25

What should I do if I receive spam emails?

Accepted Answer

You should unsubscribe from the emailing list (if possible) and block the sender.

Please do not report the message as spam, but instead forward it to our manually curated and privacy-focused abuse prevention system.

The email address to forward spam to is: abuse@forwardemail.net

Question 26

Why are my test emails sent to myself in Gmail showing as "suspicious"?

Accepted Answer

If you see this error message in Gmail when you send a test to yourself, or when a person you're emailing with your alias sees an email from you for the first time, then please do not worry – as this is a built-in safety feature of Gmail.

You can simply click "Looks safe". For example, if you were to send a test message using the send mail as feature (to someone else), then they will not see this message.

However if they do see this message, it's because they were normally used to seeing your emails come from john@gmail.com instead of john@customdomain.com (just an example). Gmail will alert the users just to make sure things are safe just in case, there is no workaround.

Question 27

Can I remove the via forwardemail dot net in Gmail?

Accepted Answer

This topic is related to a widely known issue in Gmail where extra info appears next to a sender's name.

As of May 2023 we support sending email with SMTP as an add-on for all paid users – which means that you can remove the via forwardemail dot net in Gmail.

Note that this FAQ topic is specific for those using the How to Send Mail As using Gmail feature.

Please see the section on Do you support sending email with SMTP for configuration instructions.

Question 28

Where are your servers located?

Accepted Answer

Tip

We may soon announce our EU datacenter location hosted under forwardemail.eu. Subscribe to the discussion at https://github.com/orgs/forwardemail/discussions/336 for updates. There is no EU-only deployment or opt-in today – see Can I keep my email processing and storage in the EU (data residency).

Our servers are located primarily in Denver, Colorado – see https://forwardemail.net/ips for our complete list of IP addresses.

You can learn about our subprocessors on our GDPR, DPA, and Privacy pages.

Question 29

How do I export and backup my mailbox?

Accepted Answer

At anytime you can export your mailboxes as EML, Mbox, or encrypted SQLite formats.

Go to My Account Domains Aliases Download Backup and select your preferred export format type.

You will be emailed a link to download the export once it has finished.

Note that this export download link expires after 4 hours for security concerns.

If you need to inspect your exported EML or Mbox formats, then these open-soruce tools may be useful:

Name Format Platform GitHub URL MBox Viewer Mbox Windows https://github.com/eneam/mboxviewer mbox-web-viewer Mbox All platforms https://github.com/PHMRanger/mbox-web-viewer EmlReader EML Windows https://github.com/ayamadori/EmlReader Email viewer EML VSCode https://github.com/joelharkes/vscode_email_viewer eml-reader EML All platforms https://github.com/s0ph1e/eml-reader

Additionally if you need to convert a Mbox file to EML file, then you can use https://github.com/noelmartinon/mboxzilla.

Question 30

How do I import and migrate my existing mailbox?

Accepted Answer

You can easily import your email to Forward Email (e.g. using Thunderbird) with the instructions below:

Important: You must follow all of the following steps in order to import your existing email.

Export your email from your existing email provider:
Email Provider Export Format Export Instructions Gmail MBOX https://takeout.google.com/settings/takeout/custom/gmail Outlook PST
Tip: If you are using Outlook (PST export format), then you could simply follow the instructions under "Other" below. However we have provided links below to convert PST to MBOX/EML format based off your operating system:
Apple Mail MBOX https://support.apple.com/guide/mail/import-or-export-mailboxes-mlhlp1030/mac#apd37a3190755974 Fastmail EML https://www.fastmail.help/hc/en-us/articles/360060590573-Download-all-your-data#downloadmail Proton Mail MBOX/EML https://proton.me/support/export-emails-import-export-app Tutanota EML https://github.com/crepererum-oss/tatutanatata Gandi EML https://docs.gandi.net/en/gandimail/common_operations/backup_email.html#contents Zoho EML https://www.zoho.com/mail/help/import-export-emails.html#alink2 Other Use Thunderbird Set up your existing email account in Thunderbird and then use the ImportExportTools NG plugin to export and import your email. You may also be able to simply copy/paste or drag/drop emails between one account to another.
Download, install, and open Thunderbird.
Create a new account using your alias' full email address (e.g. you@yourdomain.com) and your generated password. If you do not yet have a generated password, then refer to our setup instructions.
Download and install the ImportExportTools NG Thunderbird plugin.
Create a new local folder in Thunderbird, and then right click on it → select the ImportExportTools NG option → choose Import mbox file (for MBOX export format) – or – Import messages / Import all messages from a directory (for EML export format).
Drag/drop from the local folder to a new (or existing) IMAP folder in Thunderbird you wish to upload messages to in IMAP storage with our service. This will ensure they are backed up online with our SQLite encrypted storage.

Tip: If you are confused as to how to import into Thunderbird, then you can refer to official instructions at https://kb.mozillazine.org/Importing_folders and https://github.com/thunderbird/import-export-tools-ng/wiki.

Important: Once you have completed the export and import process, then you may also want to enable forwarding on your existing email account and set up an auto-responder to notify senders that you have a new email address (e.g. if you were previously using Gmail and are now using an email with your custom domain name).

Congratulations! You've successfully completed all steps.

Question 31

How do I use my own S3-compatible storage for backups?

Accepted Answer

Paid plan users can configure their own S3-compatible storage provider on a per-domain basis for IMAP/SQLite backups. This means your encrypted mailbox backups can be stored on your own infrastructure instead of (or in addition to) our default storage.

Supported providers include Amazon S3, Cloudflare R2, MinIO, Backblaze B2, DigitalOcean Spaces, and any other S3-compatible service.

Setup

Create a private bucket with your S3-compatible provider. The bucket must not be publicly accessible.
Create access credentials (access key ID and secret access key) with read/write permissions to the bucket.
Go to My Account Domains Advanced Settings Custom S3-Compatible Storage.
Check "Enable custom S3-compatible storage" and fill in your endpoint URL, access key ID, secret access key, region, and bucket name.
Click "Test Connection" to verify your credentials, bucket access, and write permissions.
Click "Save" to apply the settings.

How Backups Work

Backups are triggered automatically for every connected IMAP alias. The IMAP server checks all active connections once per hour and dispatches a backup for each connected alias. A Redis-based lock prevents duplicate backups from running within 30 minutes of each other, and the actual backup is skipped if a successful backup was already completed within the last 24 hours (unless the backup was explicitly requested by a user for download).

Backups can also be triggered manually by clicking "Download Backup" for any alias in the dashboard. Manual backups always run regardless of the 24-hour window.

The backup process works as follows:

The SQLite database is copied using VACUUM INTO, which creates a consistent snapshot without interrupting active connections and preserves the database encryption.
The backup file is verified by opening it to confirm encryption is still valid.
A SHA-256 hash is computed and compared against the existing backup in storage. If the hash matches, the upload is skipped (no changes since last backup).
The backup is uploaded to S3 using multipart upload via the @aws-sdk/lib-storage library.
A signed download URL (valid for 4 hours) is generated and emailed to the user.

Backup Formats

Three backup formats are supported:

Format Extension Description sqlite .sqlite Raw encrypted SQLite snapshot containing mailbox, contact, calendar, and calendar-event records (default for automatic IMAP backups) mbox .zip Password-protected ZIP containing mailbox MBOX files plus Contacts VCF and Calendars ICS folders eml .zip Password-protected ZIP containing individual .eml files plus Contacts VCF and Calendars ICS folders

All export formats preserve contacts, calendars, and calendar events. The portable EML and MBOX ZIP archives organize VCF files by address book under Contacts and ICS event or task resources by calendar under Calendars. Raw SQLite backups retain the same records in their native tables.

Tip: If you have .sqlite backup files and want to convert them to .eml files locally, use our standalone CLI tool convert-sqlite-to-eml. It works on Windows, Linux, and macOS and does not require a network connection.

File Naming and Key Structure

When using custom S3 storage, backup files are stored with an ISO 8601 timestamp prefix so that each backup is preserved as a separate object. This gives you a full backup history in your own bucket.

The key format is:

{ISO 8601 timestamp}-{alias_id}.{extension}

For example:

2025-03-01T12:00:00.000Z-65a31c53c36b75ed685f3fda.sqlite 2025-03-01T12:00:00.000Z-65a31c53c36b75ed685f3fda.zip 2025-03-02T12:00:00.000Z-65a31c53c36b75ed685f3fda.sqlite

The alias_id is the MongoDB ObjectId of the alias. You can find it in the alias settings page or via the API.

When using the default (system) storage, the key is flat (e.g. 65a31c53c36b75ed685f3fda.sqlite) and each backup overwrites the previous one.

Note: Since custom S3 storage retains all backup versions, storage usage will grow over time. We recommend configuring lifecycle rules on your bucket to automatically expire old backups (e.g. delete objects older than 30 or 90 days).

Data Ownership and Deletion Policy

Your custom S3 bucket is entirely under your control. We never delete or modify files in your custom S3 bucket — not when an alias is deleted, not when a domain is removed, and not during any cleanup operations. We only write new backup files to your bucket.

This means:

Alias deletion — When you delete an alias, we remove the backup from our default system storage only. Any backups previously written to your custom S3 bucket remain untouched.
Domain removal — Removing a domain does not affect files in your custom bucket.
Retention management — You are responsible for managing storage in your own bucket, including configuring lifecycle rules to expire old backups.

If you disable custom S3 storage or switch back to our default storage, existing files in your bucket are preserved. Future backups will simply be written to our default storage instead.

Security

Your access key ID and secret access key are encrypted at rest using AES-256-GCM before being stored in our database. They are only decrypted at runtime when performing backup operations.
We automatically validate that your bucket is not publicly accessible. If a public bucket is detected, the configuration will be rejected on save. If public access is detected at backup time, we fall back to our default storage and notify all domain administrators by email.
Credentials are validated on save via a HeadBucket call to ensure the bucket exists and credentials are correct. If validation fails, custom S3 storage is automatically disabled.
Each backup file includes a SHA-256 hash in its S3 metadata, which is used to detect unchanged databases and skip redundant uploads.

Error Notifications

If a backup fails when using your custom S3 storage (e.g. due to expired credentials or a connectivity issue), all domain administrators will be notified by email. These notifications are rate-limited to once every 6 hours to prevent duplicate alerts. If your bucket is detected as publicly accessible at backup time, administrators will be notified once daily.

API

You can also configure custom S3 storage via the API:

curl -X PUT https://api.forwardemail.net/v1/domains/baychi.org \ -u API_TOKEN: \ -d has_custom_s3=true \ -d s3_endpoint=https://s3.us-east-1.amazonaws.com \ -d s3_access_key_id=YOUR_ACCESS_KEY_ID \ -d s3_secret_access_key=YOUR_SECRET_ACCESS_KEY \ -d s3_region=us-east-1 \ -d s3_bucket=my-email-backups

To test the connection via the API:

curl -X POST https://api.forwardemail.net/v1/domains/baychi.org/test-s3-connection \ -u API_TOKEN:

Question 32

How do I convert SQLite backups to EML files?

Accepted Answer

If you download or store SQLite backups (either from our default storage or your own custom S3 bucket), you can convert them to standard .eml files using our standalone CLI tool convert-sqlite-to-eml. The password-protected ZIP also contains VCF contacts organized by address book under Contacts and ICS calendar events or tasks organized by calendar under Calendars. EML files can be opened with any email client (Thunderbird, Outlook, Apple Mail, etc.) or imported into other mail servers.

Installation

You can either download a pre-built binary (no Node.js required) or run it directly with Node.js:

Pre-built binaries — Download the latest release for your platform from GitHub Releases:

Platform Architecture File Linux x64 convert-sqlite-to-eml-linux-x64 Linux arm64 convert-sqlite-to-eml-linux-arm64 macOS Apple Silicon convert-sqlite-to-eml-darwin-arm64 Windows x64 convert-sqlite-to-eml-win-x64.exe

macOS users: After downloading, you may need to remove the quarantine attribute before running the binary:

sudo xattr -rd com.apple.quarantine ./convert-sqlite-to-eml-darwin-arm64

(Replace ./convert-sqlite-to-eml-darwin-arm64 with the actual path to the downloaded file.)

Linux users: After downloading, you may need to make the binary executable:

chmod +x ./convert-sqlite-to-eml-linux-x64

(Replace ./convert-sqlite-to-eml-linux-x64 with the actual path to the downloaded file.)

From source (requires Node.js >= 18):

cd tools/convert-sqlite-to-eml npm install node index.js

Usage

The tool supports both interactive and non-interactive modes.

Interactive mode — run without arguments and you will be prompted for all inputs:

./convert-sqlite-to-eml Forward Email - Convert SQLite Backup to EML ============================================= Path to SQLite backup file: /path/to/backup.sqlite IMAP/alias password: ******** Output ZIP path [/path/to/backup-2025-03-01T12-00-00-000Z.zip]:

Non-interactive mode — pass arguments via command-line flags for scripting and automation:

./convert-sqlite-to-eml \ --path /path/to/backup.sqlite \ --password "your-imap-password" \ --output /path/to/output.zip Flag Description --path Path to the encrypted SQLite backup file --password IMAP/alias password for decryption --output Output path for the ZIP file (default: auto-generated with ISO 8601 timestamp) --help Show help message

Output Format

The tool produces a password-protected ZIP archive (AES-256 encrypted) containing:

README.txt INBOX/ .eml .eml Sent/ .eml Drafts/ .eml

EML files are organized by mailbox folder. The ZIP password is the same as your IMAP/alias password. Each .eml file is a standard RFC 5322 email message with full headers, body text, and attachments reconstructed from the SQLite database.

How It Works

Question 33

Do you support self-hosting?

Accepted Answer

Yes, as of March 2025, we support a self-hosted option. Read the blog here. Checkout the self-hosted guide to get started. And for those interested in a more broken down step-by-step version see our Ubuntu or Debian based guides.

Question 34

How do I get started and set up email forwarding?

Accepted Answer

Estimated Setup Time: Less than 10 minutes

Getting Started: Carefully read and follow steps one through eight listed below. Be sure to replace the email address of user@gmail.com with the email address you want to forward emails to (if it isn't already accurate). Similarly be sure to replace baychi.org with your custom domain name (if it isn't already accurate).

If you have already registered your domain name somewhere, then you must completely skip this step and go to step two! Otherwise you can click here to register your domain name.
Do you remember where you registered your domain? Once you remember this, then follow the instructions below:
Important: You must open a new tab and sign in to your domain registrar. You can easily click on your "Registrar" below to automatically do this. In this new tab, you must navigate to the DNS management page at your registrar – and we have provided the step by step navigation steps below under the "Steps to Configure" column. Once you've navigated to this page in the new tab, you can return to this tab and proceed to step three below. Do not close the opened tab yet; you will need it for future steps!
Registrar Steps to Configure 1&1 Log in Domain Center (Select your domain) Edit DNS Settings Amazon Route 53 Log in Hosted Zones (Select your domain) Aplus.net Log in My Servers Domain Management DNS Manager Bluehost FOR ROCK: Log in Domains (Click the ▼ icon next to manage) DNS
FOR LEGACY: Log in Domains Zone editor (Select your domain) Cloudflare Log in DNS DNS Made Easy Log in DNS (Select your domain) DNSimple Log in (Select your domain) DNS Manage Digital Ocean Log in Networking Domains (Select your domain) More Manage Domain Domain.com Log in In card view, click manage on your domain In list view, click the gear icon DNS & Nameservers DNS Records Domains.com
Watch Log in (Select your domain) Manage (click gear icon) Click on DNS & Nameservers in left-hand menu DreamHost Log in Panel Domains Manage Domains DNS Dyn Log in Overview Manage Simple Editor Records Gandi Log in (Select your domain) Management Edit the zone GoDaddy
Watch Log in Manage My Domains (Select your domain) Manage DNS Google Domains
Watch Log in (Select your domain) Configure DNS Namecheap
Watch Log in Domain List (Select your domain) Manage Advanced DNS Netlify Log in (Select your domain) Setup Netlify DNS Network Solutions Log in Account Manager My Domain Names (Select your domain) Manage Change Where Domain Points Advanced DNS Shopify
Watch Log in Managed Domains (Select your domain) DNS Settings Squarespace Log in Home menu Settings Domains (Select your domain) Advanced settings Custom Records Vercel's Now Using "now" CLI now dns add [domain] '@' MX [record-value] [priority] Weebly Log in Domains page (Select your domain) DNS Wix Log in Domains page (Click icon) Select Manage DNS Records eNom Log in Domains My Domains Other
Important: Don't see your registrar name listed here? Simply search on the Internet for "how to change DNS records on $REGISTRAR" (replacing $REGISTRAR with the name of your registrar – e.g. "how to change DNS records on GoDaddy" if you're using GoDaddy).
Using your registrar's DNS management page (the other tab you have opened), set the following "MX" records:
Important: Note that there should be NO other MX records set. Both records shown below MUST exist. Be sure there are no typos; and you have both mx1 and mx2 spelled correctly. If there were already MX records that existed, please delete them completely. The "TTL" value does not need to be 3600, it could be a lower or higher value if necessary.
Name/Host/Alias TTL Type Priority Answer/Value "@", ".", or blank 3600 MX 0 mx1.forwardemail.net "@", ".", or blank 3600 MX 0 mx2.forwardemail.net
Using your registrar's DNS management page (the other tab you have opened), set the following TXT record(s):
Important: If you are on a paid plan, then you must completely skip this step and go to step five! If you are not on a paid plan, then your forwarded addresses will be publicly searchable – go to My Account Domains and upgrade your domain to a paid plan if desired. If you would like to learn more about paid plans see our Pricing page. Otherwise you can continue to choose one or more combinations from Option A to Option F listed below.

Option A: If you are forwarding all emails from your domain, (e.g. "all@baychi.org", "hello@baychi.org", etc) to a specific address "user@gmail.com":
Name/Host/Alias TTL Type Answer/Value "@", ".", or blank 3600 TXT forward-email=user@gmail.com
Tip: Make sure to replace the values above in the "Value" column with your own email address. The "TTL" value does not need to be 3600, it could be a lower or higher value if necessary. A lower time to live ("TTL") value will ensure any future changes made to your DNS records are propagated throughout the Internet quicker – think of this as how long it will be cached in-memory (in seconds). You can learn more about TTL on Wikipedia.

Option B: If you just need to forward a single email address (e.g. hello@baychi.org to user@gmail.com; this will also forward "hello+test@baychi.org" to "user+test@gmail.com" automatically):
Name/Host/Alias TTL Type Answer/Value "@", ".", or blank 3600 TXT forward-email=hello:user@gmail.com
Option C: If you are forwarding multiple emails, then you'll want to separate them with a comma:
Name/Host/Alias TTL Type Answer/Value "@", ".", or blank 3600 TXT forward-email=hello:user@gmail.com,support:user@gmail.com
Option D: You can have an infinite amount of forwarding emails setup – just make sure to not wrap over 255 characters in a single-line and start each line with "forward-email=". An example is provided below:
Name/Host/Alias TTL Type Answer/Value "@", ".", or blank 3600 TXT forward-email=hello:user@gmail.com,support:user@gmail.com "@", ".", or blank 3600 TXT forward-email=help:user@gmail.com,foo:user@gmail.com "@", ".", or blank 3600 TXT forward-email=orders:user@gmail.com,baz:user@gmail.com "@", ".", or blank 3600 TXT forward-email=info:user@gmail.com,beep:user@gmail.com "@", ".", or blank 3600 TXT forward-email=errors:user@gmail.com,boop:user@gmail.com
Option E: You can also specify a domain name in your TXT record to have global alias forwarding (e.g. "user@baychi.org" will get forwarded to "user@example.net"):
Name/Host/Alias TTL Type Answer/Value "@", ".", or blank 3600 TXT forward-email=example.net
Option F: You can even use webhooks as a global or individual alias to forward emails to. See the example and full section on webhooks titled Do you support webhooks below.
Name/Host/Alias TTL Type Answer/Value "@", ".", or blank 3600 TXT forward-email=alias:https://requestbin.com/r/en8pfhdgcculn
Option G: You can even use regular expressions ("regex") for matching aliases and for handling substitutions to forward emails to. See the examples and full section on regex titled Do you support regular expressions or regex below.

Need advanced regex with substitution? See the examples and full section on regex titled Do you support regular expressions or regex below.

Simple Example: If I want all emails that go to `linus@baychi.org` or `torvalds@baychi.org` to forward to `user@gmail.com`:
Name/Host/Alias TTL Type Answer/Value "@", ".", or blank 3600 TXT forward-email=/^(linus|torvalds)$/:user@gmail.com
Important: Catch-all forwarding rules could also be described as "fall-through". This means that incoming emails which match at least one specific forwarding rule will be used instead of the catch-all. Specific rules include email addresses and regular expressions.

For example:
forward-email=hello:first@gmail.com,second@gmail.com
Emails sent to hello@baychi.org will **not** be forwarded to second@gmail.com (catch-all) with this configuration, and instead only be delivered to first@gmail.com.
Using your registrar's DNS management page (the other tab you have opened), additionally set the following TXT record: Name/Host/Alias TTL Type Answer/Value "@", ".", or blank 3600 TXT v=spf1 a include:spf.forwardemail.net -all
Important: If you are using Gmail (e.g. Send Mail As) or G Suite, then you'll need to append include:_spf.google.com to the value above, for example:

v=spf1 a include:spf.forwardemail.net include:_spf.google.com -all

Tip: If you already have a similar line with "v=spf1", then you'll need to append include:spf.forwardemail.net right before any existing "include:host.com" records and before the "-all" in the same line, for example:

v=spf1 a include:spf.forwardemail.net include:host.com -all

Note that there is a difference between "-all" and "~all". The "-" indicates that the SPF check should FAIL if it does not match, and "~" indicates that the SPF check should SOFTFAIL. We recommend to use the "-all" approach to prevent domain forgery.

You may also need to include the SPF record for whichever host you are sending mail from (e.g. Outlook).
Verify your DNS records using our "Verify Records" tool available at My Account Domains Setup.
Send a test email to confirm it works. Note that it might take some time for your DNS records to propagate.
Tip: If you are not receiving test emails, or receive a test email that says "Be careful with this message", then see the answers for Why am I not receiving my test emails and Why are my test emails sent to myself in Gmail showing as "suspicious" respectively.
If you wish to "Send Mail As" from Gmail, then you will need to watch this video, or follow the steps under How to Send Mail As Using Gmail below.

Congratulations! You've successfully completed all steps.

Tip: Optional add-ons are listed below. Note that these add-ons are completely optional and may not be necessary. We wanted to at least provide you with additional information if necessary.

Optional Add-on: If you're using the How to Send Mail As using Gmail feature, then you may want to add yourself to an allowlist. See these instructions by Gmail on this topic.

Question 35

Can I use multiple MX exchanges and servers for advanced forwarding?

Accepted Answer

Yes, but you should only have one MX exchange listed in your DNS records.

Do not attempt to use "Priority" as a way to configure multiple MX exchanges.

Instead, you need to configure your existing MX exchange to forward mail for all non-matching aliases to our service's exchanges (mx1.forwardemail.net and/or mx2.forwardemail.net).

If you are using Google Workspace and you want to forward all non-matching aliases to our service, then see https://support.google.com/a/answer/6297084.

If you are using Microsoft 365 (Outlook) and you want to forward all non-matching aliases to our service, then see https://learn.microsoft.com/en-us/exchange/mail-flow-best-practices/use-connectors-to-configure-mail-flow/set-up-connectors-to-route-mail and https://learn.microsoft.com/en-us/exchange/mail-flow-best-practices/manage-mail-flow-for-multiple-locations.

Question 36

How do I set up a vacation responder (out of office auto-responder)?

Accepted Answer

Go to My Account Domains Aliases and either create or edit the alias you would like to configure a vacation autoresponder for.

You have the ability to configure a start date, end date, subject, and message, and enable or disable it at anytime:

Plaintext subject and message are currently supported (we use striptags package internally to remove any HTML).
Subject is limited to 100 characters.
Message is limited to 1000 characters.
Setup requires Outbound SMTP configuration (e.g. you will need to setup DKIM, DMARC, and Return-Path DNS records).
- Go to My Account Domains Settings Outbound SMTP Configuration and follow setup instructions.
Vacation responder cannot be enabled on global vanity domain names (e.g. disposable addresses are not supported).
Vacation responder cannot be enabled for aliases with wildcard/catch-all (*) nor regular expressions.

Unlike mail systems such as postfix (e.g. that use the sieve vacation filter extension) – Forward Email automatically adds your DKIM signature, dummy-proofs connection issues when sending vacation responses (e.g. due to common SSL/TLS connection issues and legacy maintained servers), and even supports Open WKD and PGP encryption for vacation responses.

Question 37

How do I set up SPF for Forward Email?

Accepted Answer

Using your registrar's DNS management page, set the following TXT record:

Name/Host/Alias TTL Type Answer/Value "@", ".", or blank 3600 TXT v=spf1 a include:spf.forwardemail.net -all

Important: If you are using Gmail (e.g. Send Mail As) or G Suite, then you'll need to append include:_spf.google.com to the value above, for example:

v=spf1 a include:spf.forwardemail.net include:_spf.google.com -all

Important: If you are using Microsoft Outlook or Live.com, you'll need to append include:spf.protection.outlook.com to your SPF TXT record, for example:

v=spf1 a include:spf.forwardemail.net include:spf.protection.outlook.com -all

Tip: If you already have a similar line with "v=spf1", then you'll need to append include:spf.forwardemail.net right before any existing "include:host.com" records and before the "-all" in the same line, for example:

v=spf1 a include:spf.forwardemail.net include:host.com -all

Note that there is a difference between "-all" and "~all". The "-" indicates that the SPF check should FAIL if it does not match, and "~" indicates that the SPF check should SOFTFAIL. We recommend to use the "-all" approach to prevent domain forgery.

You may also need to include the SPF record for whichever host you are sending mail from (e.g. Outlook).

Question 38

How do I set up DKIM for Forward Email?

Accepted Answer

Go to My Account Domains Settings Outbound SMTP Configuration and follow setup instructions.

Question 39

How do I set up DMARC for Forward Email?

Accepted Answer

Go to My Account Domains Settings Outbound SMTP Configuration and follow setup instructions.

Question 40

How do I view DMARC Reports?

Accepted Answer

Forward Email provides a comprehensive DMARC Reports dashboard that allows you to monitor your email authentication performance across all your domains from a single interface.

What are DMARC Reports?

DMARC (Domain-based Message Authentication, Reporting, and Conformance) reports are XML files sent by receiving mail servers that tell you how your emails are being authenticated. These reports help you understand:

How many emails are being sent from your domain
Whether those emails are passing SPF and DKIM authentication
What actions receiving servers are taking (accept, quarantine, or reject)
Which IP addresses are sending email on behalf of your domain

How to Access DMARC Reports

Go to My Account DMARC Reports to view your dashboard. You can also access domain-specific reports from My Account Domains by clicking the "DMARC" button next to any domain.

Dashboard Features

The DMARC Reports dashboard provides:

Summary Metrics: Total reports received, total messages analyzed, SPF alignment rate, DKIM alignment rate, and overall pass rate
Messages Over Time Chart: Visual trend of email volume and authentication rates over the past 30 days
Alignment Summary: Donut chart showing SPF vs DKIM alignment distribution
Message Disposition: Stacked bar chart showing how receiving servers handled your emails (accepted, quarantined, or rejected)
Recent Reports Table: Detailed list of individual DMARC reports with filtering and pagination
Domain Filtering: Filter reports by specific domain when managing multiple domains

Why This Matters

For organizations managing multiple domains (like enterprises, non-profits, or agencies), DMARC reports are essential for:

Identifying unauthorized senders: Detect if someone is spoofing your domain
Improving deliverability: Ensure your legitimate emails pass authentication
Monitoring email infrastructure: Track which services and IPs are sending on your behalf
Compliance: Maintain visibility into email authentication for security audits

Unlike other services that require separate DMARC monitoring tools, Forward Email includes DMARC report processing and visualization as part of your account at no additional cost.

Requirements

DMARC Reports are available for paid plans only
Your domain must have DMARC configured (see How do I set up DMARC for Forward Email)
Reports are automatically collected when receiving mail servers send them to your configured DMARC reporting address

Weekly Email Reports

Paid plan users automatically receive weekly DMARC report summaries via email. These emails include:

Summary statistics for all your domains
SPF and DKIM alignment rates
Message disposition breakdown (accepted, quarantined, rejected)
Top reporting organizations (Google, Microsoft, Yahoo, etc.)
IP addresses with alignment issues that may need attention
Direct links to your DMARC Reports dashboard

Weekly reports are sent automatically and cannot be disabled separately from other email notifications.

Question 41

Why do my DMARC reports show failures from unknown IP addresses?

Accepted Answer

If your DMARC reports contain unfamiliar IP addresses failing SPF and DKIM, please do not worry – this is normal and actually means your setup is working correctly.

DMARC reports list every server that attempted to send mail claiming to be from your domain, including unauthorized ones. In nearly all cases these unknown IPs are simply spammers or bots trying to impersonate your domain. Here is what happens when they try:

SPF fails because the sending IP is not listed in your SPF record.
DKIM fails because they cannot produce a valid signature for your domain.
With a DMARC policy of p=reject, the message is rejected outright and never reaches anyone's inbox.

In other words, these failures are proof that DMARC is doing its job – blocking impersonation attempts before they cause harm. No action is required on your part.

How to tell legitimate senders from impersonators

If you also use other services to send mail on your domain's behalf (marketing tools, CRMs, etc.), make sure those services have a valid DKIM signature configured – otherwise their messages will also appear as failures in your reports.

Important

Make sure your domain publishes a DMARC policy of p=reject so that impersonation attempts are rejected rather than delivered. See How do I set up DMARC for Forward Email.

Question 42

How do I connect and configure my contacts?

Accepted Answer

To configure your contacts, use the CardDAV URL of: https://carddav.forwardemail.net (or simply carddav.forwardemail.net if your client allows it)

Question 43

How do I connect and configure my calendars?

Accepted Answer

To configure your calendar, use the CalDAV URL of: https://caldav.forwardemail.net (or simply caldav.forwardemail.net if your client allows it)

Question 44

How do I add more calendars and manage existing calendars?

Accepted Answer

If you'd like to add additional calendars, then just add a new calendar URL of: https://caldav.forwardemail.net/dav/principals/calendar-name (be sure to replace calendar-name with your desired calendar name)

You can change a calendar's name and color after creation – just use your preferred calendar application (e.g. Apple Mail or Thunderbird).

Question 45

How do I connect and configure tasks and reminders?

Accepted Answer

To configure tasks and reminders, use the same CalDAV URL as calendars: https://caldav.forwardemail.net (or simply caldav.forwardemail.net if your client allows it)

Tasks and reminders will automatically be separated from calendar events into their own "Reminders" or "Tasks" calendar collection.

Setup instructions by platform:

macOS/iOS:

Add a new CalDAV account in System Preferences > Internet Accounts (or Settings > Accounts on iOS)
Use caldav.forwardemail.net as the server
Enter your Forward Email alias and generated password
After setup, you'll see both "Calendar" and "Reminders" collections
Use the Reminders app to create and manage tasks

Android with Tasks.org:

Install Tasks.org from Google Play Store or F-Droid
Go to Settings > Synchronization > Add Account > CalDAV
Enter server: https://caldav.forwardemail.net
Enter your Forward Email alias and generated password
Tasks.org will automatically discover your task calendars

Thunderbird:

Install the Lightning add-on if not already installed
Create a new calendar with type "CalDAV"
Use URL: https://caldav.forwardemail.net
Enter your Forward Email credentials
Both events and tasks will be available in the calendar interface

Question 46

Why can't I create tasks in macOS Reminders?

Accepted Answer

If you're having trouble creating tasks in macOS Reminders, try these troubleshooting steps:

Check account setup: Ensure your CalDAV account is properly configured with caldav.forwardemail.net
Verify separate calendars: You should see both "Calendar" and "Reminders" in your account. If you only see "Calendar", the task support may not be fully activated yet.
Refresh account: Try removing and re-adding your CalDAV account in System Preferences > Internet Accounts
Check server connectivity: Test that you can access https://caldav.forwardemail.net in your browser
Verify credentials: Ensure you're using the correct alias email and generated password (not your account password)
Force sync: In Reminders app, try creating a task and then manually refreshing the sync

Common issues:

"Reminders calendar not found": The server may need a moment to create the Reminders collection on first access
Tasks not syncing: Check that both devices are using the same CalDAV account credentials
Mixed content: Ensure tasks are being created in the "Reminders" calendar, not the general "Calendar"

Question 47

How do I set up Tasks.org on Android?

Accepted Answer

Tasks.org is a popular open-source task manager that works excellently with Forward Email's CalDAV task support.

Installation and Setup:

Install Tasks.org:
- From Google Play Store: Tasks.org
- From F-Droid: Tasks.org on F-Droid
Configure CalDAV sync:
- Open Tasks.org
- Go to ☰ Menu > Settings > Synchronization
- Tap "Add Account"
- Select "CalDAV"
Enter Forward Email settings:
- Server URL: https://caldav.forwardemail.net
- Username: Your Forward Email alias (e.g., you@yourdomain.com)
- Password: Your alias-specific generated password
- Tap "Add Account"
Account discovery:
- Tasks.org will automatically discover your task calendars
- You should see your "Reminders" collection appear
- Tap "Subscribe" to enable sync for the task calendar
Test sync:
- Create a test task in Tasks.org
- Check that it appears in other CalDAV clients (like macOS Reminders)
- Verify changes sync both ways

Features available:

✅ Task creation and editing
✅ Due dates and reminders
✅ Task completion and status
✅ Priority levels
✅ Subtasks and task hierarchy
✅ Tags and categories
✅ Two-way sync with other CalDAV clients

Troubleshooting:

If no task calendars appear, try manually refreshing in Tasks.org settings
Ensure you have at least one task created on the server (you can create one in macOS Reminders first)
Check network connectivity to caldav.forwardemail.net

Question 48

How do I set up SRS for Forward Email?

Accepted Answer

We automatically configure Sender Rewriting Scheme ("SRS") – you do not need to do this yourself.

Question 49

How do I set up MTA-STS for Forward Email?

Accepted Answer

Please refer to our section on MTA-STS for more insight.

Question 50

How do I add a profile picture to my email address?

Accepted Answer

If you're using Gmail, then follow these steps below:

Go to https://google.com and sign out of all email accounts
Click "Sign In" and on the drop-down click on "other account"
Select "Use another account"
Select "Create account"
Select "Use my current email address instead"
Enter your custom domain name email address
Retrieve the verification email sent to your email address
Enter the verification code from this email
Complete profile information for your new Google account
Agree to all Privacy and Terms of Use policies
Go to https://google.com and in the top right corner, click on your profile icon, and click on the "change" button
Upload a new photo or avatar for your account
Changes will take approximately 1-2 hours to propagate, but sometimes may be very quick.
Send a test email and the profile photo should appear.

Question 51

Do you support newsletters or mailing lists for marketing related email?

Accepted Answer

Yes, you can read more at https://forwardemail.net/guides/newsletter-with-listmonk.

Please note that in order to maintain IP reputation and ensure deliverability, Forward Email has a manual review process on a per-domain basis for newsletter approval. Email support@forwardemail.net or open a help request for approval. This typically takes less than 24 hours, with most requests being honored within 1-2 hours. In the near future we aim to make this process instant with additional spam controls and alerting. This process ensures that your emails reach the inbox and your messages don't get marked as spam.

Question 52

Do you support sending email with API?

Accepted Answer

Yes, as of May 2023 we support sending email with API as an add-on for all paid users.

Important: Please ensure you have read our Terms, Privacy Policy, and Outbound SMTP Limits – your use is considered acknowledgement and agreement.

Please view our section on Emails in our API documentation for options, examples, and more insight.

In order to send outbound email with our API, you must use your API token available under My Security.

If you no longer need API access, you can disable your token with DELETE /v1/account/api-token. A disabled token cannot authenticate API or WebSocket requests. To enable API access again, sign in to My Security and reset your token, which generates a replacement. Alias-password authentication is unchanged.

Question 53

Do you support receiving email with IMAP?

Accepted Answer

Yes, as of October 16, 2023 we support receiving email over IMAP as an add-on for all paid users. Please read our deep-dive article on how our encrypted SQLite mailbox storage feature works.

Important: Please ensure you have read our Terms and Privacy Policy – your use is considered acknowledgement and agreement.

Create a new alias for your domain under My Account Domains Aliases (e.g. hello@baychi.org)
Click on Generate Password next to the newly created alias. Copy to your clipboard and securely store the generated password shown on the screen.
Using your preferred email application, add or configure an account with your newly created alias (e.g. hello@baychi.org)

Tip: We recommend our official Forward Email apps for macOS, Windows, Linux, Android, and iOS — they come pre-configured for your encrypted mailboxes, calendars, and contacts. You can also use Thunderbird, Thunderbird Mobile, Apple Mail, or an open-source and privacy-focused alternative.
When prompted for IMAP server name, enter imap.forwardemail.net
When prompted for IMAP server port, enter 993 (SSL/TLS) – see alternate IMAP ports if necessary

Tip: If you are using Thunderbird, then ensure "Connection security" is set to "SSL/TLS" and Authentication method is set to "Normal password".
When prompted for IMAP server password, paste the password from Generate Password in step 2 above
Save your settings – if you are having issues, then please contact us

Congratulations! You've successfully completed all steps.

Question 54

Do you support POP3?

Accepted Answer

Yes, as of December 4, 2023 we support POP3 as an add-on for all paid users. Please read our deep-dive article on how our encrypted SQLite mailbox storage feature works.

Important: Please ensure you have read our Terms and Privacy Policy – your use is considered acknowledgement and agreement.

Create a new alias for your domain under My Account Domains Aliases (e.g. hello@baychi.org)
Click on Generate Password next to the newly created alias. Copy to your clipboard and securely store the generated password shown on the screen.
Using your preferred email application, add or configure an account with your newly created alias (e.g. hello@baychi.org)

Tip: We recommend our official Forward Email apps for macOS, Windows, Linux, Android, and iOS — they come pre-configured for your encrypted mailboxes, calendars, and contacts. You can also use Thunderbird, Thunderbird Mobile, Apple Mail, or an open-source and privacy-focused alternative.
When prompted for POP3 server name, enter pop3.forwardemail.net
When prompted for POP3 server port, enter 995 (SSL/TLS) – see alternate POP3 ports if necessary

Tip: If you are using Thunderbird, then ensure "Connection security" is set to "SSL/TLS" and Authentication method is set to "Normal password".
When prompted for POP3 server password, paste the password from Generate Password in step 2 above
Save your settings – if you are having issues, then please contact us

Congratulations! You've successfully completed all steps.

Question 55

Do you support calendars (CalDAV)?

Accepted Answer

Yes, as of February 5, 2024 we have added this feature. Our server is caldav.forwardemail.net and is also monitored on our status page.

It supports both IPv4 and IPv6 and is available over port 443 (HTTPS).

Login Example Description Username user@baychi.org Email address of an alias that exists for the domain at My Account Domains. Password ************************ Alias-specific generated password.

In order to use calendar support, the user must be the email address of an alias that exists for the domain at My Account Domains – and the password must be an alias-specific generated password.

Question 56

Do you support tasks and reminders (CalDAV VTODO)?

Accepted Answer

Yes, as of October 14, 2025 we have added CalDAV VTODO support for tasks and reminders. This uses the same server as our calendar support: caldav.forwardemail.net.

Our CalDAV server supports both calendar events (VEVENT) and tasks (VTODO) components using unified calendars. This means each calendar can contain both events and tasks, providing maximum flexibility and compatibility across all CalDAV clients.

How calendars and lists work:

Each calendar supports both events and tasks - You can add events, tasks, or both to any calendar
Apple Reminders lists - Each list you create in Apple Reminders becomes a separate calendar on the server
Multiple calendars - You can create as many calendars as you need, each with its own name, color, and organization
Cross-client sync - Tasks and events sync seamlessly between all compatible clients

Supported task clients:

Task features supported:

Task creation, editing, and deletion
Due dates and start dates
Task completion status (NEEDS-ACTION, IN-PROCESS, COMPLETED, CANCELLED)
Task priority levels
Recurring tasks
Task descriptions and notes
Multi-device synchronization
Subtasks with RELATED-TO property
Task reminders with VALARM

The login credentials are the same as for calendar support:

Login Example Description Username user@baychi.org Email address of an alias that exists for the domain at My Account Domains. Password ************************ Alias-specific generated password.

Important notes:

Each Reminders list is a separate calendar - When you create a new list in Apple Reminders, it creates a new calendar on the CalDAV server
Thunderbird users - You'll need to manually subscribe to each calendar/list you want to sync, or use the calendar home URL: https://caldav.forwardemail.net/dav/your-email@domain.com/
Apple users - Calendar discovery happens automatically, so all your calendars and lists will appear in Calendar.app and Reminders.app
Unified calendars - All calendars support both events and tasks, giving you flexibility in how you organize your data

Question 57

Do you support contacts (CardDAV)?

Accepted Answer

Yes, as of June 12, 2025 we have added this feature. Our server is carddav.forwardemail.net and is also monitored on our status page.

It supports both IPv4 and IPv6 and is available over port 443 (HTTPS).

Login Example Description Username user@baychi.org Email address of an alias that exists for the domain at My Account Domains. Password ************************ Alias-specific generated password.

In order to use contacts support, the user must be the email address of an alias that exists for the domain at My Account Domains – and the password must be an alias-specific generated password.

Question 58

Do you support sending email with SMTP?

Accepted Answer

Yes, as of May 2023 we support sending email with SMTP as an add-on for all paid users.

Important: Please ensure you have read our Terms, Privacy Policy, and Outbound SMTP Limits – your use is considered acknowledgement and agreement.

Important: If you are using Gmail, then refer to our Send Mail As with Gmail guide. If you are a developer, then refer to our email API docs.

Go to My Account Domains Settings Outbound SMTP Configuration and follow setup instructions
Create a new alias for your domain under My Account Domains Aliases (e.g. hello@baychi.org)
Click on Generate Password next to the newly created alias. Copy to your clipboard and securely store the generated password shown on the screen.
Using your preferred email application, add or configure an account with your newly created alias (e.g. hello@baychi.org)

Tip: We recommend our official Forward Email apps for macOS, Windows, Linux, Android, and iOS — they come pre-configured for your encrypted mailboxes, calendars, and contacts. You can also use Thunderbird, Thunderbird Mobile, Apple Mail, or an open-source and privacy-focused alternative.
When prompted for SMTP server name, enter smtp.forwardemail.net
When prompted for SMTP server port, enter 465 (SSL/TLS) – see alternate SMTP ports if necessary

Tip: If you are using Thunderbird, then ensure "Connection security" is set to "SSL/TLS" and Authentication method is set to "Normal password".
When prompted for SMTP server password, paste the password from Generate Password in step 3 above
Save your settings and send your first test email – if you are having issues, then please contact us

Important: Please note that in order to maintain IP reputation and ensure deliverability, we have a manual review process on a per-domain basis for outbound SMTP approval. This typically takes less than 24 hours, with most requests being honored within 1-2 hours. In the near future we aim to make this process instant with additional spam controls and alerting. This process ensures that your emails reach the inbox and your messages don't get marked as spam.

Congratulations! You've successfully completed all steps.

Question 59

Do you support OpenPGP/MIME, end-to-end encryption ("E2EE"), and Web Key Directory ("WKD")?

Accepted Answer

Yes, we support OpenPGP, end-to-end encryption ("E2EE"), and the discovery of public keys using Web Key Directory ("WKD"). You can configure OpenPGP using keys.openpgp.org or self-host your own keys (refer to this gist for WKD server setup).

WKD lookups are cached for 1 hour to ensure timely email delivery → therefore if you add, change, or remove your WKD key, then please email us at support@forwardemail.net with your email address in order for us to manually purge the cache.
We support PGP encryption for messages that are forwarded via WKD lookup or using an uploaded PGP key on our interface.
Uploaded keys take prevalance as long as the PGP checkbox is enabled/checked.
Messages sent to webhooks are not currently encrypted with PGP.
If you have multiple aliases that match for a given forwarding address (e.g. regex/wildcard/exact combo) and if more than one of these contains an uploaded PGP key and has PGP checked → then we will send you an error alert email and will not encrypt the message with your uploaded PGP key. This is very rare and usually only applies to advanced users with complex alias rules.
PGP encryption will not be applied to email forwarding through our MX servers if the sender had a DMARC policy of reject. If you require PGP encryption on all mail then we suggest to use our IMAP service and configure your PGP key for your alias for inbound mail.
On our paid plans (Enhanced Protection and Team), you can disable WKD lookup on a per-alias basis. Navigate to your alias settings and check the "Disable WKD Lookup" option. When disabled, inbound emails forwarded to that alias will not be encrypted via WKD even if a public key is published for the recipient. This is also available via the API using the has_wkd_disabled field.

You can validate your Web Key Directory setup at https://wkd.chimbosonic.com/ (open-source) or https://www.webkeydirectory.com/ (proprietary).

Automatic Encryption: If you are using our outbound SMTP service and sending unencrypted messages, then we will automatically attempt to encrypt messages on a per-recipient basis using Web Key Directory ("WKD").

Important: You must follow all of the following steps in order to enable OpenPGP for your custom domain name.

Congratulations! You've successfully completed all steps.

Question 60

Do you support S/MIME encryption?

Accepted Answer

Yes, we support S/MIME (Secure/Multipurpose Internet Mail Extensions) encryption as defined in RFC 8551. S/MIME provides end-to-end encryption using X.509 certificates, which is widely supported by enterprise email clients.

We support both RSA and ECC (Elliptic Curve Cryptography) certificates:

RSA certificates: 2048-bit minimum, 4096-bit recommended
ECC certificates: P-256, P-384, and P-521 NIST curves

To configure S/MIME encryption for your alias:

Obtain an S/MIME certificate from a trusted Certificate Authority (CA) or generate a self-signed certificate for testing.

Tip: Free S/MIME certificates are available from providers like Actalis or Actalis Free S/MIME.
Export your certificate in PEM format (the public certificate only, not the private key).
Go to My Account Domains Aliases (e.g. hello@baychi.org) Edit S/MIME and upload your public certificate.
Once configured, all incoming emails to your alias will be encrypted using your S/MIME certificate before being stored or forwarded.

Note: S/MIME encryption is applied to incoming messages that are not already encrypted. If a message is already encrypted with OpenPGP or S/MIME, it will not be re-encrypted.

Important: S/MIME encryption will not be applied to email forwarding through our MX servers if the sender had a DMARC policy of reject. If you require S/MIME encryption on all mail then we suggest to use our IMAP service and configure your S/MIME certificate for your alias for inbound mail.

The following email clients have built-in S/MIME support:

Email Client Platform Notes Apple Mail macOS Built-in S/MIME support. Go to Mail > Preferences > Accounts > your account > Trust to configure certificates. Apple Mail iOS Built-in S/MIME support. Go to Settings > Mail > Accounts > your account > Advanced > S/MIME to configure. Microsoft Outlook Windows Built-in S/MIME support. Go to File > Options > Trust Center > Trust Center Settings > Email Security to configure. Microsoft Outlook macOS Built-in S/MIME support. Go to Tools > Accounts > Advanced > Security to configure. Thunderbird Desktop Built-in S/MIME support. Go to Account Settings > End-To-End Encryption > S/MIME to configure. GNOME Evolution Desktop Built-in S/MIME support. Go to Edit > Preferences > Mail Accounts > your account > Security to configure. KMail Desktop Built-in S/MIME support. Go to Settings > Configure KMail > Identities > your identity > Cryptography to configure.

Congratulations! You've successfully configured S/MIME encryption for your alias.

Question 61

Do you support Sieve email filtering?

Accepted Answer

Yes. Forward Email supports server-side Sieve filtering based on RFC 5228. Scripts filter incoming messages before mailbox delivery. A script is rejected if it requests an unavailable capability or uses an extension without declaring it in require.

The complete, implementation-backed capability list and RFC notes are available in the Sieve protocol documentation.

Available Sieve capabilities

Category Capabilities and behavior Core language keep, discard, stop, conditional blocks, and the base address, header, exists, size, and boolean tests. Delivery fileinto, copy, redirect, mailbox for fileinto :create, and special-use for standard-folder :specialuse mapping and specialuse_exists. Tests and comparisons envelope, body, date, index, regex, subaddress, relational, i;ascii-casemap, and i;octet. State and variables variables, imap4flags, duplicate, and ihave. Actions and responses reject, ereject, vacation, vacation-seconds, and enotify using mailto:. The legacy declaration require "notify" is accepted as an input alias for enotify, but enotify is the advertised capability. Message processing editheader, environment, and mime, including foreverypart, break, extracttext, and replace.

redirect is delivered through the normal outbound queue. It is subject to the configured redirect-domain policy, denylist checks, and rate limits. editheader cannot modify protected authentication or delivery-routing headers.

Features not supported

Feature Reason enclose Creating a new message that encloses the original message is not implemented. mailboxexists Forward Email does not make live IMAP mailbox-state queries. fileinto :create remains available through mailbox. include Global and included script storage is not available. mboxmetadata / servermetadata IMAP METADATA integration is not available. fcc Sent-mail filing integration is not available. encoded-character The ${hex:...} syntax is not implemented. External lists valid_ext_list and other external-list operations are not available.

Example Sieve scripts

File newsletters into a folder:

require ["fileinto"]; if header :contains "List-Id" "newsletter" { fileinto "Newsletters"; }

Auto-reply when on vacation:

require ["vacation", "vacation-seconds"]; vacation :seconds 604800 :subject "Out of Office" "I am currently out of the office and will respond when I return.";

Create a folder when filing a message:

require ["fileinto", "imap4flags", "mailbox"]; if address :is "from" "boss@baychi.org" { fileinto :create :flags ["\Flagged"] "Important"; }

Redirect a message:

require ["redirect"]; if header :contains "Subject" "invoice" { redirect "recipient@baychi.org"; }

Managing Sieve scripts

You can manage Sieve scripts in several ways:

Note: Sieve filtering is applied to incoming messages before mailbox delivery. Scripts are executed in priority order, and the first matching action determines how the message is handled.

Security: Redirects are checked against configured policy and rate limits. Vacation responses and notifications are rate-limited to prevent abuse.

Question 62

Do you support MTA-STS?

Accepted Answer

Yes, as of March 2, 2023 we support MTA-STS. You can use this template if you wish to enable it on your domain.

Our configuration can be found publicly on GitHub at https://github.com/forwardemail/mta-sts.forwardemail.net.

Question 63

Do you support passkeys and WebAuthn?

Accepted Answer

Yes! As of December 13, 2023 we have added support for passkeys due to high demand.

Passkeys allow you to securely log in without requiring a password and two-factor authentication.

You can validate your identity with touch, facial recognition, device-based password, or PIN.

We allow you to manage up to 30 passkeys at once, so that you can log in with all of your devices with ease.

Learn more about passkeys at the following links:

Question 64

Is two-factor authentication (2FA) supported?

Accepted Answer

Yes, for logging into your account — including webmail — via one-time passcodes, backed by recovery keys.

2FA applies to your account login itself, not to IMAP, SMTP, POP3, CalDAV, or CardDAV connections from third-party clients (Thunderbird, Apple Mail, etc.) — those authenticate with an alias-specific generated password instead, so there isn't currently a 2FA-equivalent standard for that class of client. If you'd like to see that change, a GitHub feature request is the best way to make the case for it.

Cliente	Estudo de Caso
Academia Naval dos EUA	📄 Estudo de Caso
Canonical	📄 Estudo de Caso
Netflix Games
The Linux Foundation	📄 Estudo de Caso
The PHP Foundation
Fox News Radio
Disney Ad Sales
jQuery	📄 Estudo de Caso
LineageOS
Ubuntu	📄 Estudo de Caso
Kubuntu	📄 Estudo de Caso
Lubuntu	📄 Estudo de Caso
Universidade de Cambridge	📄 Estudo de Caso
Universidade de Maryland	📄 Estudo de Caso
Universidade de Washington	📄 Estudo de Caso
Universidade Tufts	📄 Estudo de Caso
Swarthmore College	📄 Estudo de Caso
Governo da Austrália do Sul
Governo da República Dominicana
Fly.io
RCD Hotels
Isaac Z. Schlueter (npm)	📄 Estudo de Caso
David Heinemeier Hansson (Ruby on Rails)

Tipo	Nome do Host	Protocolo	Portas
IMAP	`imap.forwardemail.net`	SSL/TLS Preferido	`993` e `2993`
SMTP	`smtp.forwardemail.net`	SSL/TLS Recomendado	`465` e `2465` para SSL/TLS (recomendado) ou `587`, `2587`, `2525` e `25` para STARTTLS

Formato	Extensão	Descrição
`sqlite`	`.sqlite`	Snapshot `sqlite` bruto criptografado (`.sqlite`) contendo registros de caixa de correio, contatos, calendários e eventos de calendário; backup automático IMAP padrão.
`mbox`	`.zip`	Arquivo `.zip` protegido por senha contendo arquivos `mbox` de caixa de correio, além de pastas VCF em `Contacts` e ICS em `Calendars`.
`eml`	`.zip`	Arquivo `.zip` protegido por senha contendo arquivos `.eml` individuais (`eml`), além de pastas VCF em `Contacts` e ICS em `Calendars`.

Flag	Descrição
`--path <path>`	Caminho para o arquivo de backup SQLite criptografado
`--password <pass>`	Senha IMAP/alias para descriptografia
`--output <path>`	Caminho de saída para o arquivo ZIP (padrão: gerado automaticamente com timestamp ISO 8601)
`--help`	Exibe mensagem de ajuda

Registrador	Passos para Configurar
1&1	Faça login Centro de Domínios (Selecione seu domínio) Editar Configurações de DNS
Amazon Route 53	Faça login Zonas Hospedadas (Selecione seu domínio)
Aplus.net	Faça login Meus Servidores Gerenciamento de Domínios Gerenciador de DNS
Bluehost	PARA ROCK: Faça login Domínios (Clique no ícone ▼ ao lado de gerenciar) DNS PARA LEGADO: Faça login Domínios Editor de Zona (Selecione seu domínio)
Cloudflare	Faça login DNS
DNS Made Easy	Faça login DNS (Selecione seu domínio)
DNSimple	Faça login (Selecione seu domínio) DNS Gerenciar
Digital Ocean	Faça login Rede Domínios (Selecione seu domínio) Mais Gerenciar Domínio
Domain.com	Faça login Na visualização em cartão, clique em gerenciar seu domínio Na visualização em lista, clique no ícone de engrenagem DNS & Nameservers Registros DNS
Domains.com Assistir	Faça login (Selecione seu domínio) Gerenciar (clique no ícone de engrenagem) Clique em DNS & Nameservers no menu à esquerda
DreamHost	Faça login Painel Domínios Gerenciar Domínios DNS
Dyn	Faça login Visão Geral Gerenciar Editor Simples Registros
Gandi	Faça login (Selecione seu domínio) Gerenciamento Editar a zona
GoDaddy Assistir	Faça login Gerenciar Meus Domínios (Selecione seu domínio) Gerenciar DNS
Google Domains Assistir	Faça login (Selecione seu domínio) Configurar DNS
Namecheap Assistir	Faça login Lista de Domínios (Selecione seu domínio) Gerenciar DNS Avançado
Netlify	Faça login (Selecione seu domínio) Configurar DNS Netlify
Network Solutions	Faça login Gerenciador de Conta Meus Nomes de Domínio (Selecione seu domínio) Gerenciar Alterar para onde o domínio aponta DNS Avançado
Shopify Assistir	Faça login Domínios Gerenciados (Selecione seu domínio) Configurações de DNS
Squarespace	Faça login Menu inicial Configurações Domínios (Selecione seu domínio) Configurações avançadas Registros personalizados
Now da Vercel	Usando o CLI "now" `now dns add [domain] '@' MX [record-value] [priority]`
Weebly	Faça login Página de Domínios (Selecione seu domínio) DNS
Wix	Faça login Página de Domínios (Clique no ícone ) Selecione Gerenciar Registros DNS
eNom	Faça login Domínios Meus Domínios
Outro	Importante: Não vê o nome do seu registrador listado aqui? Simplesmente pesquise na Internet por "como alterar registros DNS no $REGISTRADOR" (substituindo $REGISTRADOR pelo nome do seu registrador – por exemplo, "como alterar registros DNS no GoDaddy" se você usa GoDaddy).

Nome da Ferramenta	URL	Tipo
Feedback de Categorização de Domínio Cloudflare	https://radar.cloudflare.com/domains/feedback	Categorização
Verificador de Reputação de IP e Domínio Spamhaus	https://check.spamhaus.org/	DNSBL
Centro de Reputação de IP e Domínio Cisco Talos	https://talosintelligence.com/reputation_center	Reputação
Consulta de Reputação de IP e Domínio Barracuda	https://www.barracudacentral.org/lookups/lookup-reputation	DNSBL
Verificação de Lista Negra MX Toolbox	https://mxtoolbox.com/blacklists.aspx	Lista Negra
Ferramentas do Postmaster do Google	https://www.gmail.com/postmaster/	Reputação
Hub de Remetentes do Yahoo	https://senders.yahooinc.com/	Reputação
Verificação de Lista Negra MultiRBL.valli.org	https://multirbl.valli.org/lookup/	DNSBL
Sender Score	https://senderscore.org/act/blocklist-remover/	Reputação
Invaluement	https://www.invaluement.com/lookup/	DNSBL
SURBL	https://www.surbl.org/	DNSBL
SpamCop	https://www.spamcop.net/bl.shtml	DNSBL
Níveis 1, 2 e 3 do UCEPROTECT	https://www.uceprotect.net/en/rblcheck.php	DNSBL
backscatterer.org do UCEPROTECT	https://www.backscatterer.org/	Proteção contra Backscatter
whitelisted.org do UCEPROTECT	https://www.whitelisted.org/ (requer taxa)	DNSWL

Provedor	Formulário de Remoção / Contato	Notas
Google/Gmail	https://support.google.com/mail/contact/bulk_send_new	Formulário de contato para remetentes em massa
Microsoft (Outlook/Office 365/Hotmail)	https://sender.office.com	Portal de delistagem de IP do Office 365
Yahoo/AOL/Verizon	https://senders.yahooinc.com/	Hub de Remetentes do Yahoo
Apple/iCloud	https://ipcheck.proofpoint.com/	Apple usa Proofpoint para reputação de IP
Proofpoint	https://ipcheck.proofpoint.com/	Verificação e remoção de IP no Proofpoint
Barracuda Networks	https://www.barracudacentral.org/lookups/lookup-reputation	Consulta e remoção de reputação Barracuda
Cloudmark	https://csi.cloudmark.com/en/reset/	Solicitação de reset Cloudmark CSI
GoDaddy/SecureServer	https://unblock.secureserver.net	Formulário de desbloqueio de IP GoDaddy
Comcast/Xfinity	https://spa.xfinity.com/report	Solicitação de remoção de IP Comcast
Charter/Spectrum	https://www.spectrum.net/support/internet/understanding-email-error-codes	Contate o suporte Spectrum para remoção
AT&T	`abuse_rbl@abuse-att.net`	E-mail para solicitação de remoção
Cox Communications	`unblock.request@cox.net`	E-mail para solicitação de remoção
CenturyLink/Lumen	`abuse@centurylink.com`	Usa Cloudfilter
Windstream	`abuse@windstream.net`	E-mail para solicitação de remoção
t-online.de (Alemanha)	`tobr@rx.t-online.de`	E-mail para solicitação de remoção
Orange France	https://postmaster.orange.fr/	Use formulário de contato ou e-mail `abuse@orange.fr`
GMX	https://postmaster.gmx.net/en/contact	Formulário de contato do postmaster GMX
Mail.ru	https://postmaster.mail.ru/	Portal do postmaster Mail.ru
Yandex	https://postmaster.yandex.ru/	Portal do postmaster Yandex
QQ Mail (Tencent)	https://open.mail.qq.com/	Aplicação para whitelist do QQ Mail (Chinês)
Netease (163.com)	https://mail.163.com/postmaster/	Portal do postmaster Netease
Alibaba/Aliyun/HiChina	https://www.alibabacloud.com/help/en/alibaba-mail/	Contato via console Alibaba Cloud
Amazon SES	https://docs.aws.amazon.com/ses/latest/dg/faqs-dnsbls.html	Console AWS SES > Remoção de Lista Negra
SendGrid	https://support.sendgrid.com/	Contato com suporte SendGrid
Mimecast	https://community.mimecast.com/	Usa RBLs de terceiros - contate RBL específico
Fastmail	https://www.fastmail.com/support/	Contato com suporte Fastmail
Zoho	https://help.zoho.com/portal/en/kb/campaigns/faqs/campaign-review/articles/how-do-i-delist-my-ip-address	Contato com suporte Zoho
ProtonMail	https://proton.me/support/contact	Contato com suporte Proton
Tutanota	https://tutanota.com/support	Contato com suporte Tutanota
Hushmail	https://www.hushmail.com/support/	Contato com suporte Hushmail
Mailbox.org	https://mailbox.org/en/support	Contato com suporte Mailbox.org
Posteo	https://posteo.de/en/site/contact	Contato com suporte Posteo
DuckDuckGo Email	https://duckduckgo.com/email/support	Contato com suporte DuckDuckGo
Sonic.net	https://www.sonic.com/support	Contato com suporte Sonic
Telus	https://www.telus.com/en/support	Contato com suporte Telus
Vodafone Germany	https://www.vodafone.de/hilfe/	Contato com suporte Vodafone
Xtra (Spark NZ)	https://www.spark.co.nz/help/	Contato com suporte Spark NZ
UOL/BOL (Brasil)	https://ajuda.uol.com.br/	Contato com suporte UOL (Português)
Libero (Itália)	https://aiuto.libero.it/	Contato com suporte Libero (Italiano)
Telenet (Bélgica)	https://www2.telenet.be/en/support/	Contato com suporte Telenet
Facebook/WhatsApp	https://www.facebook.com/business/help	Contato com suporte comercial Facebook
LinkedIn	https://www.linkedin.com/help/linkedin	Contato com suporte LinkedIn
Groups.io	https://groups.io/helpcenter	Contato com suporte Groups.io
Earthlink/Vade Secure	https://sendertool.vadesecure.com/en/	Ferramenta de remetente Vade Secure
Cloudflare Email Security	https://www.cloudflare.com/products/zero-trust/email-security/	Contato com suporte Cloudflare
Hornetsecurity/Expurgate	https://www.hornetsecurity.com/	Contato com suporte Hornetsecurity
SpamExperts/Antispamcloud	https://www.spamexperts.com/	Contato via provedor de hospedagem
Mail2World	https://www.mail2world.com/support/	Contato com suporte Mail2World

Nome	Formato	Plataforma	URL do GitHub
MBox Viewer	Mbox	Windows	https://github.com/eneam/mboxviewer
mbox-web-viewer	Mbox	Todas	https://github.com/PHMRanger/mbox-web-viewer
EmlReader	EML	Windows	https://github.com/ayamadori/EmlReader
Email viewer	EML	VSCode	https://github.com/joelharkes/vscode_email_viewer
eml-reader	EML	Todas	https://github.com/s0ph1e/eml-reader
Additionally if you need to convert a Mbox file to EML file, then you can use https://github.com/noelmartinon/mboxzilla.

Provedor de E-mail	Formato de Exportação	Instruções de Exportação
Gmail	MBOX	https://takeout.google.com/settings/takeout/custom/gmail
Outlook	PST	Dica: Se você usa Outlook (formato de exportação PST), então você pode simplesmente seguir as instruções em "Outros" abaixo. No entanto, fornecemos links abaixo para converter PST para formato MBOX/EML conforme seu sistema operacional: Zinkuba para Windows (GitHub) readpst para Windows cygwin – (ex: `readpst -u -o $OUT_DIR $IN_DIR` substituindo `$OUT_DIR` e `$IN_DIR` pelos caminhos do diretório de saída e entrada, respectivamente). readpst para Ubuntu/Linux – (ex: `sudo apt-get install readpst` e depois `readpst -u -o $OUT_DIR $IN_DIR`, substituindo `$OUT_DIR` e `$IN_DIR` pelos caminhos do diretório de saída e entrada, respectivamente). readpst para macOS (via brew) – (ex: `brew install libpst` e depois `readpst -u -o $OUT_DIR $IN_DIR`, substituindo `$OUT_DIR` e `$IN_DIR` pelos caminhos do diretório de saída e entrada, respectivamente). Conversor PST para Windows (GitHub)
Apple Mail	MBOX	https://support.apple.com/guide/mail/import-or-export-mailboxes-mlhlp1030/mac#apd37a3190755974
Fastmail	EML	https://www.fastmail.help/hc/en-us/articles/360060590573-Download-all-your-data#downloadmail
Proton Mail	MBOX/EML	https://proton.me/support/export-emails-import-export-app
Tutanota	EML	https://github.com/crepererum-oss/tatutanatata
Gandi	EML	https://docs.gandi.net/en/gandimail/common_operations/backup_email.html#contents
Zoho	EML	https://www.zoho.com/mail/help/import-export-emails.html#alink2
Outros	Use Thunderbird	Configure sua conta de e-mail existente no Thunderbird e então use o plugin ImportExportTools NG para exportar e importar seu e-mail. Você também pode simplesmente copiar/colar ou arrastar/soltar e-mails entre uma conta e outra.

Plataforma	Arquitetura	Arquivo
Linux	x64	`convert-sqlite-to-eml-linux-x64`
Linux	arm64	`convert-sqlite-to-eml-linux-arm64`
macOS	Apple Silicon	`convert-sqlite-to-eml-darwin-arm64`
Windows	x64	`convert-sqlite-to-eml-win-x64.exe`

Nome/Host/Alias	TTL	Tipo	Prioridade	Resposta/Valor
"@", ".", ou vazio	3600	MX	0	`mx1.forwardemail.net`
"@", ".", ou vazio	3600	MX	0	`mx2.forwardemail.net`

Nome/Host/Alias	TTL	Tipo	Resposta/Valor
"@", ".", ou em branco	3600	TXT	`forward-email=hello:user@gmail.com,support:user@gmail.com`
"@", ".", ou em branco	3600	TXT	`forward-email=help:user@gmail.com,foo:user@gmail.com`
"@", ".", ou em branco	3600	TXT	`forward-email=orders:user@gmail.com,baz:user@gmail.com`
"@", ".", ou em branco	3600	TXT	`forward-email=info:user@gmail.com,beep:user@gmail.com`
"@", ".", ou em branco	3600	TXT	`forward-email=errors:user@gmail.com,boop:user@gmail.com`

Login	Exemplo	Descrição
Nome de usuário	`user@baychi.org`	Endereço de e-mail de um alias que existe para o domínio em Minha Conta Domínios.
Senha	`************************`	Senha gerada específica para o alias.

Login	Exemplo	Descrição
Nome de usuário	`user@baychi.org`	Endereço de email de um alias que existe para o domínio em Minha Conta Domínios.
Senha	`************************`	Senha gerada específica para o alias.

Cliente de Email	Plataforma	Plugin Recomendado	Notas
Thunderbird	Desktop	Configurar OpenPGP no Thunderbird	Thunderbird tem suporte nativo para OpenPGP.
Gmail	Navegador	Mailvelope ou FlowCrypt (licença proprietária)	O Gmail não suporta OpenPGP, porém você pode baixar o plugin open-source Mailvelope ou FlowCrypt.
Apple Mail	macOS	Free-GPGMail	O Apple Mail não suporta OpenPGP, porém você pode baixar o plugin open-source Free-GPGMail.
Apple Mail	iOS	PGPro ou FlowCrypt (licença proprietária)	O Apple Mail não suporta OpenPGP, porém você pode baixar o plugin open-source PGPro ou FlowCrypt.
Outlook	Windows	gpg4win	O cliente de email desktop do Outlook não suporta OpenPGP, porém você pode baixar o plugin open-source gpg4win.
Outlook	Navegador	Mailvelope ou FlowCrypt (licença proprietária)	O cliente de email web do Outlook não suporta OpenPGP, porém você pode baixar o plugin open-source Mailvelope ou FlowCrypt.
Android	Mobile	OpenKeychain ou FlowCrypt	Clientes de email Android como Thunderbird Mobile e FairEmail suportam o plugin open-source OpenKeychain. Você pode alternativamente usar o plugin open-source (licenciamento proprietário) FlowCrypt.
Google Chrome	Navegador	Mailvelope ou FlowCrypt (licença proprietária)	Você pode baixar a extensão open-source para navegador Mailvelope ou FlowCrypt.
Mozilla Firefox	Navegador	Mailvelope ou FlowCrypt (licença proprietária)	Você pode baixar a extensão open-source para navegador Mailvelope ou FlowCrypt.
Microsoft Edge	Navegador	Mailvelope	Você pode baixar a extensão open-source para navegador Mailvelope.
Brave	Navegador	Mailvelope ou FlowCrypt (licença proprietária)	Você pode baixar a extensão open-source para navegador Mailvelope ou FlowCrypt.
Balsa	Desktop	Configurar OpenPGP no Balsa	Balsa tem suporte nativo para OpenPGP.
KMail	Desktop	Configurar OpenPGP no KMail	KMail tem suporte nativo para OpenPGP.
GNOME Evolution	Desktop	Configurar OpenPGP no Evolution	GNOME Evolution tem suporte nativo para OpenPGP.
Terminal	Desktop	Configurar gpg no Terminal	Você pode usar a ferramenta open-source de linha de comando gpg para gerar uma nova chave via linha de comando.

Categoria	Capacidades e comportamento
Linguagem principal	`keep`, `discard`, `stop`, blocos condicionais, e os testes básicos `address`, `header`, `exists`, `size`, e testes booleanos.
Entrega	`fileinto`, `copy`, `redirect`, `mailbox` para `fileinto :create`, e `special-use` para mapeamento de pasta padrão `:specialuse` e `specialuse_exists`.
Testes e comparações	`envelope`, `body`, `date`, `index`, `regex`, `subaddress`, `relational`, `i;ascii-casemap`, e `i;octet`.
Estado e variáveis	`variables`, `imap4flags`, `duplicate`, e `ihave`.
Ações e respostas	`reject`, `ereject`, `vacation`, `vacation-seconds`, e `enotify` usando `mailto:`. A declaração legada `require "notify"` é aceita como um alias de entrada para `enotify`, mas `enotify` é a capacidade anunciada.
Processamento de mensagens	`editheader`, `environment`, e `mime`, incluindo `foreverypart`, `break`, `extracttext`, e `replace`.

Recurso	Motivo
`enclose`	A criação de uma nova mensagem que inclua a mensagem original não está implementada.
`mailboxexists`	O Forward Email não realiza consultas ao estado de caixas IMAP em tempo real. `fileinto :create` permanece disponível por meio de `mailbox`.
`include`	Armazenamento de scripts globais e incluídos não está disponível.
`mboxmetadata` / `servermetadata`	Integração IMAP METADATA não está disponível.
`fcc`	Integração de arquivamento de e-mails enviados não está disponível.
`encoded-character`	A sintaxe `${hex:...}` não está implementada.
External lists	`valid_ext_list` e outras operações com listas externas não estão disponíveis.

Nome do Alias	Efeito	Teste
`/^(linus\|torvalds)$/`	E-mails para `linus@baychi.org` ou `torvalds@baychi.org`	(ver teste no RegExr)
`/^24highst(reet)$/`	E-mails para `24highst@baychi.org` ou `24highstreet@baychi.org`	(ver teste no RegExr)

Cliente de E-mail	Plataforma	Notas
Apple Mail	macOS	Suporte nativo a S/MIME. Vá em Mail > Preferences > Accounts > sua conta > Trust para configurar certificados.
Apple Mail	iOS	Suporte nativo a S/MIME. Vá em Settings > Mail > Accounts > sua conta > Advanced > S/MIME para configurar.
Microsoft Outlook	Windows	Suporte nativo a S/MIME. Vá em File > Options > Trust Center > Trust Center Settings > Email Security para configurar.
Microsoft Outlook	macOS	Suporte nativo a S/MIME. Vá em Tools > Accounts > Advanced > Security para configurar.
Thunderbird	Desktop	Suporte nativo a S/MIME. Vá em Account Settings > End-To-End Encryption > S/MIME para configurar.
GNOME Evolution	Desktop	Suporte nativo a S/MIME. Vá em Edit > Preferences > Mail Accounts > sua conta > Security para configurar.
KMail	Desktop	Suporte nativo a S/MIME. Vá em Settings > Configure KMail > Identities > sua identidade > Cryptography para configurar.

Token	Descrição
`%SUBDOMAIN%`	O(s) rótulo(s) de subdomínio abaixo do domínio raiz do destinatário de entrada. Por exemplo, para `team@sales.baychi.org` (raiz `baychi.org`) isso é `sales`, e para `x@a.b.baychi.org` isso é `a.b`. Para o domínio raiz/ápice, é uma string vazia.
`%HOST%`	O host completo (domínio) do destinatário de entrada. Por exemplo, para `team@sales.baychi.org` isso é `sales.baychi.org`.

Nível	Escopo	Limite Padrão	Descrição
Per-alias	Alias individual	None (uses domain limit)	Opcional. Se um alias tiver um `smtp_limit` personalizado definido, ele será verificado primeiro.
Per-domain	Todos os e-mails enviados de um domínio em um dia	300/dia	Conta todos os e-mails de saída em todos os alias do domínio.
Per-user	Todos os e-mails enviados por uma conta de usuário em um dia	300/dia	Impede a evasão ao excluir e recriar aliases ou domínios.

Protocolo	Nome do Host	Portas	IPv4	IPv6	Notas
`SSL/TLS` Preferido	`smtp.forwardemail.net`	`465`, `2465`	✅	✅	TLS 1.2+ moderno (Recomendado)
`TLS` (STARTTLS)	`smtp.forwardemail.net`	`587`, `2587`, `2525`, `25`	✅	✅	Suportado (prefira a porta SSL/TLS `465`)
`SSL/TLS` Apenas Legado	`smtp.forwardemail.net`	`2455`	✅	✅	⚠️ TLS 1.0 apenas para dispositivos antigos
`TLS` (STARTTLS) Apenas Legado	`smtp.forwardemail.net`	`2555`	✅	✅	⚠️ TLS 1.0 apenas para dispositivos antigos
Login	Exemplo	Descrição
--------	-------------------------	-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Username	`user@baychi.org`	Endereço de email de um alias que existe para o domínio em Minha Conta Domínios.
Password	`************************`	Alias

Protocolo	Nome do Host	Portas	IPv4	IPv6
`SSL/TLS` Preferido	`pop3.forwardemail.net`	`995`, `2995`	✅	✅
Login	Exemplo	Descrição
--------	-------------------------	-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Username	`user@baychi.org`	Endereço de email de um alias que existe para o domínio em Minha Conta Domínios.
Password	`************************`	Senha gerada específica para o alias.

Tipo	Nome/Host	Destino/Valor
CNAME	`autoconfig`	`autoconfig.forwardemail.net`
CNAME	`autodiscover`	`autodiscover.forwardemail.net`

Tipo	Nome/Host	Prioridade	Peso	Porta	Destino/Valor	Propósito
SRV	`_imaps._tcp`	0	1	993	`imap.forwardemail.net`	IMAP sobre SSL/TLS (preferido)
SRV	`_imap._tcp`	0	0	0	`.`	IMAP em texto simples desativado
SRV	`_submissions._tcp`	0	1	465	`smtp.forwardemail.net`	Envio SMTP (SSL/TLS, recomendado)
SRV	`_submission._tcp`	5	1	587	`smtp.forwardemail.net`	Envio SMTP (STARTTLS)
SRV	`_pop3s._tcp`	10	1	995	`pop3.forwardemail.net`	POP3 sobre SSL/TLS
SRV	`_pop3._tcp`	0	0	0	`.`	POP3 em texto simples desativado
SRV	`_caldavs._tcp`	0	1	443	`caldav.forwardemail.net`	CalDAV sobre TLS (calendários)
SRV	`_caldav._tcp`	0	0	0	`.`	CalDAV em texto simples desativado
SRV	`_carddavs._tcp`	0	1	443	`carddav.forwardemail.net`	CardDAV sobre TLS (contatos)
SRV	`_carddav._tcp`	0	0	0	`.`	CardDAV em texto simples desativado

Cliente	Email	CalDAV/CardDAV
Thunderbird	registros CNAME ou SRV `autoconfig`	registros XML ou SRV `autoconfig` (RFC 6764)
Apple Mail (macOS)	registros SRV (RFC 6186)	registros SRV (RFC 6764)
Apple Mail (iOS)	registros SRV (RFC 6186)	registros SRV (RFC 6764)
Microsoft Outlook	CNAME `autodiscover` ou SRV `_autodiscover._tcp`	Não suportado
GNOME (Evolution)	registros SRV (RFC 6186)	registros SRV (RFC 6764)
KDE (KMail)	registros SRV (RFC 6186)	registros SRV (RFC 6764)
eM Client	`autoconfig` ou `autodiscover`	registros SRV (RFC 6764)

Provedor	Certificado no Framework de Privacidade de Dados	Página de Conformidade com GDPR
Cloudflare	✅ Sim	https://www.cloudflare.com/trust-hub/gdpr/
DataPacket	❌ Não	https://www.datapacket.com/privacy-policy
DigitalOcean	❌ Não	https://www.digitalocean.com/legal/gdpr
GitHub	✅ Sim	https://docs.github.com/en/site-policy/privacy-policies/github-data-protection-agreement
Vultr	❌ Não	https://www.vultr.com/legal/eea-gdpr-privacy/

Funcionalidade	O que é mantido	Retenção
Reencaminhamento de email (um alias que reencaminha para outro endereço ou webhook)	Nada. A mensagem é processada inteiramente em memória e encaminhada para o destino; nunca é escrita em disco nem numa base de dados.	Nenhuma – a mensagem é descartada assim que a entrega é tentada
Registos de erro SMTP (`4xx`/`5xx` responses)	O erro SMTP, o envelope e os cabeçalhos do email. Não o corpo da mensagem nem os anexos.	7 dias (ver Guardam registos de erro)
Caches antiabuso (lista cinzenta, lista de bloqueio, limitação de taxa)	Chaves derivadas dos dados do remetente e do destinatário (endereços, domínios, hashes), sem conteúdo de mensagem.	Até 30 dias (ver Têm uma lista cinzenta e Têm uma lista de bloqueio)
Armazenamento da caixa de correio (IMAP/POP3/CalDAV/CardDAV, quando ativado num alias)	Mensagens, contactos e calendários, numa caixa de correio SQLite individualmente cifrada que só a sua palavra-passe pode abrir.	Até que apague a mensagem, o alias, o domínio ou a conta (ver Como exporto e faço backup da minha caixa de correio)
SMTP de saída	Registos de fila para entrega e relatório de erros. Os corpos das mensagens são retidos por 0 dias por predefinição após entrega bem-sucedida ou um erro permanente; pode aumentar isto para, no máximo, 30 dias por domínio.	~30 dias para registos de fila (ver a nossa Política de Privacidade)

Como podemos ajudar?

Início Rápido

Introdução

Clientes de Email

Configuração

Testando

Configuração

Testando

Configuração

Testando

Instalação

Configuração

Testando

Solução de Problemas

Ferramentas de Verificação de Reputação e Listas de Bloqueio

Formulários de Solicitação de Remoção de IP por Provedor

Gerenciamento de Dados

Configuração

Como os Backups Funcionam

Backup Formats

File Naming and Key Structure

Data Ownership and Deletion Policy

Security

Notificações de Erro

API

Instalação

Uso

Formato de Saída

Como Funciona

Configuração de Email

Recursos Avançados

Capacidades Sieve disponíveis

Recursos não suportados

Exemplos de scripts Sieve

Gerenciamento de scripts Sieve

Exemplos para Proteção Avançada de Privacidade

Exemplos para o plano gratuito

Registros DNS necessários para subdomínios curinga

Tokens de substituição de subdomínio

Opção A: registros CNAME (mais simples)

Opção B: registros SRV (direto)

Quais clientes de email suportam autodiscovery?

Segurança

Detalhes do Sistema e Técnicos

Conta e Faturamento

Recursos Adicionais

Ainda com dificuldades?

Campo	Valor
Subcontratante	Forward Email LLC
Registado em	Estado de Delaware, United States
Serviço	Reencaminhamento de email (MX de entrada) e, quando ativado, armazenamento de caixa de correio cifrado (IMAP/POP3/CalDAV/CardDAV) e SMTP de saída
Dados pessoais tratados	Endereços de email, metadados do envelope e dos cabeçalhos, e conteúdo de mensagens em trânsito (apenas em memória para reencaminhamento; cifrado em repouso para armazenamento de caixa de correio)
Local de tratamento	United States (Denver, Colorado)
Retenção	Ver Onde é processado e armazenado o email de entrada do meu domínio e por quanto tempo
Mecanismo de transferência	Conforme estabelecido nas nossas páginas Acordo de Tratamento de Dados e GDPR
Os nossos subcontratantes	Listados na nossa página GDPR e no DPA (atualmente Cloudflare, DataPacket, DigitalOcean, GitHub, Vultr, Stripe e PayPal)
Representante na UE (Art. 27)	Osano International Compliance Services Limited, Dublin, Irlanda – morada completa na nossa página GDPR
Representante no Reino Unido	Osano UK Compliance LTD, Belfast – morada completa na nossa página GDPR
Acordo de tratamento de dados	https://forwardemail.net/dpa (aceite com os nossos Termos; uma cópia coassinada é fornecida ao abrigo da Enterprise License)
Contacto de segurança	security@forwardemail.net

Limite	Escopo	Quantidade
Total diário	Todos os serviços combinados (IMAP, POP3, SMTP, CalDAV, CardDAV)	50 GB
Por hora por serviço	Por serviço individual (ex. download IMAP, upload SMTP)	10 GB

Nome/Host/Alias	TTL	Tipo	Resposta/Valor
"@", ".", ou em branco	3600	TXT	`forward-email=hello:user+a@gmail.com`
"@", ".", ou em branco	3600	TXT	`forward-email=hello:user+b@gmail.com`

Nome/Host/Alias	TTL	Tipo	Resposta/Valor
"@", ".", ou em branco	3600	TXT	`forward-email=user+a@gmail.com`
@, ".", ou em branco	3600	TXT	`forward-email=user+b@gmail.com`