Q: What is Forward Email's history?

You can learn more about Forward Email on our About page .

Question 1

What is Forward Email?

Accepted Answer

Note

Forward Email is perfect for individuals, small businesses, and developers who want professional email addresses without the cost and maintenance of a full email hosting solution.

Forward Email is a fully featured email service provider and email hosting provider for custom domain names.

It's the only free and open-source service, and lets you use custom domain email addresses without the complexity of setting up and maintaining your own email server.

Our service forwards emails sent to your custom domain to your existing email account – and you can even use us as your dedicated email hosting provider.

Key features of Forward Email:

Custom Domain Email: Use professional email addresses with your own domain name
Free Tier: Basic email forwarding at no cost
Enhanced Privacy: We don't read your emails or sell your data
Open Source: Our entire codebase is available on GitHub
SMTP, IMAP, and POP3 Support: Full email sending and receiving capabilities
End-to-End Encryption: Support for OpenPGP/MIME
Custom Catch-All Aliases: Create unlimited email aliases

You can compare us to 56+ other email service providers on our Email Comparison page.

Tip

Learn more about Forward Email by reading our free Technical Whitepaper and reviewing our Security Audit by Cure53.

Question 2

Who uses Forward Email?

Accepted Answer

We provide email hosting and email forwarding service to 1.6+ million domains and these notable users:

Customer Case Study U.S. Naval Academy :page_facing_up: Case Study Canonical :page_facing_up: Case Study Netflix Games The Linux Foundation :page_facing_up: Case Study The PHP Foundation Fox News Radio Disney Ad Sales jQuery :page_facing_up: Case Study LineageOS Ubuntu :page_facing_up: Case Study Kubuntu :page_facing_up: Case Study Lubuntu :page_facing_up: Case Study The University of Cambridge :page_facing_up: Case Study The University of Maryland :page_facing_up: Case Study The University of Washington :page_facing_up: Case Study Tufts University :page_facing_up: Case Study Swarthmore College :page_facing_up: Case Study Government of South Australia Government of Dominican Republic Fly.io RCD Hotels Isaac Z. Schlueter (npm) :page_facing_up: Case Study David Heinemeier Hansson (Ruby on Rails)

Question 3

What is Forward Email's history?

Accepted Answer

You can learn more about Forward Email on our About page.

Question 4

How fast is this service?

Accepted Answer

Note

Our system is designed for speed and reliability, with multiple redundant servers to ensure your emails are delivered promptly.

Forward Email delivers messages with minimal delay, typically within seconds of receipt.

Performance metrics:

Average Delivery Time: Less than 5-10 seconds from receipt to forwarding (see our Time to Inbox "TTI" monitoring page)
Uptime: 99.9%+ service availability
Global Infrastructure: Servers strategically located for optimal routing
Automatic Scaling: Our system scales during peak email periods

We operate in real-time, unlike other providers which rely upon delayed queues.

We do not write to disk or store logs – with the exception of errors and outbound SMTP (see our Privacy Policy).

Everything is done in-memory and our source code is on GitHub.

Question 5

Thunderbird

Accepted Answer

Create a new alias and generate a password in your Forward Email dashboard
Open Thunderbird and go to Edit → Account Settings → Account Actions → Add Mail Account
Enter your name, Forward Email address, and password
Click Configure manually and enter:
- Incoming: IMAP, imap.forwardemail.net, port 993, SSL/TLS
- Outgoing: SMTP, smtp.forwardemail.net, port 465, SSL/TLS (recommended; port 587 with STARTTLS is also supported)
Click Done

Question 6

Microsoft Outlook

Accepted Answer

Create a new alias and generate a password in your Forward Email dashboard
Go to File → Add Account
Enter your Forward Email address and click Connect
Choose Advanced options and select Let me set up my account manually
Select IMAP and enter:
- Incoming: imap.forwardemail.net, port 993, SSL
- Outgoing: smtp.forwardemail.net, port 465, SSL/TLS (recommended; port 587 with STARTTLS is also supported)
- Username: Your full email address
- Password: Your generated password
Click Connect

Question 7

Apple Mail

Accepted Answer

Create a new alias and generate a password in your Forward Email dashboard
Go to Mail → Preferences → Accounts → +
Select Other Mail Account
Enter your name, Forward Email address, and password
For server settings, enter:
- Incoming: imap.forwardemail.net
- Outgoing: smtp.forwardemail.net
- Username: Your full email address
- Password: Your generated password
Click Sign In

Question 8

eM Client

Accepted Answer

Create a new alias and generate a password in your Forward Email dashboard
Open eM Client and go to Menu → Accounts → + Add Account
Click on Mail and then select Other
Enter your Forward Email address and click Next
Enter the following server settings:
- Incoming server: imap.forwardemail.net
- Outgoing server: smtp.forwardemail.net
Enter your full email address as the User name and your generated password as the Password for both incoming and outgoing servers.
eM Client will test the connection. Once it passes, click Next.
Enter your name and choose an account name.
Click Finish.

Question 9

Do you offer a webmail client?

Accepted Answer

Yes. Our official, open-source webmail client is available at mail.forwardemail.net — no installation required, just log in from any browser using an alias address and its generated password (the same credentials used for IMAP, SMTP, and POP3).

It launched in February 2026 and also supports CalDAV Scheduling Extensions (RFC 6638), DANE/TLSA (RFC 6698), and Domain Connect for 1-click DNS setup, with real-time push notifications for IMAP, CalDAV, and CardDAV delivered over WebSockets.

The source code is fully open-source and available on GitHub at github.com/forwardemail/mail.forwardemail.net.

Question 10

Do you have desktop and mobile apps?

Accepted Answer

Yes. Native apps are available for desktop and mobile, built from the same open-source project as our webmail client, and can all be downloaded from our download page:

Desktop: macOS (Apple Silicon and Intel), Windows (x64 and ARM64, as either an .exe or .msi installer), and Linux (AppImage, .deb, .rpm, and Snap — each for x64 and ARM64).
Mobile: Android (APK, with an alternate F-Droid build) and iOS.

All release builds are published on GitHub at github.com/forwardemail/mail.forwardemail.net/releases, and the download page lets you verify release checksums against SHA256SUMS.txt.

Question 11

Mobile Devices

Accepted Answer

For iOS:

Go to Settings → Mail → Accounts → Add Account → Other
Tap Add Mail Account and enter your details
For server settings, use the same IMAP and SMTP settings as above

For Android:

Go to Settings → Accounts → Add Account → Personal (IMAP)
Enter your Forward Email address and password
For server settings, use the same IMAP and SMTP settings as above

Question 12

Sendmail SMTP Relay Configuration

Accepted Answer

You can configure Sendmail to relay emails through Forward Email's SMTP servers. This is a common setup for legacy systems or applications that rely on Sendmail.

Estimated Setup Time: Less than 20 minutes

Important: This requires a paid plan with SMTP access enabled.

Configuration

Edit your sendmail.mc file, typically located at /etc/mail/sendmail.mc:
sudo nano /etc/mail/sendmail.mc
Add the following lines to define the smart host and authentication:
define(`SMART_HOST', `smtp.forwardemail.net')dnl define(`RELAY_MAILER_ARGS', `TCP $h 465')dnl define(`confAUTH_MECHANISMS', `EXTERNAL GSSAPI DIGEST-MD5 CRAM-MD5 LOGIN PLAIN')dnl FEATURE(`authinfo',`hash -o /etc/mail/authinfo.db')dnl
Create the authentication file /etc/mail/authinfo:
sudo nano /etc/mail/authinfo
Add your Forward Email credentials to the authinfo file:
AuthInfo:smtp.forwardemail.net "U:your-alias@yourdomain.com" "P:your-generated-password" "M:PLAIN"
Generate the authentication database and secure the files:
sudo makemap hash /etc/mail/authinfo < /etc/mail/authinfo sudo chmod 600 /etc/mail/authinfo /etc/mail/authinfo.db
Rebuild the Sendmail configuration and restart the service:
sudo make -C /etc/mail sudo systemctl restart sendmail

Testing

Send a test email to verify the configuration:

echo "Test email from Sendmail" | mail -s "Sendmail Test" recipient@example.com

Question 13

Exim4 SMTP Relay Configuration

Accepted Answer

Exim4 is a popular MTA on Debian-based systems. You can configure it to use Forward Email as a smarthost.

Estimated Setup Time: Less than 15 minutes

Important: This requires a paid plan with SMTP access enabled.

Configuration

Run the Exim4 configuration tool:
sudo dpkg-reconfigure exim4-config
Select the following options:
- General type of mail configuration: mail sent by smarthost; received via SMTP or fetchmail
- System mail name: your.hostname
- IP-addresses to listen on for incoming SMTP connections: 127.0.0.1 ; ::1
- Other destinations for which mail is accepted: (leave blank)
- Domains to relay mail for: (leave blank)
- IP address or host name of the outgoing smarthost: smtp.forwardemail.net::465
- Hide local mail name in outgoing mail? No
- Keep number of DNS-queries minimal (Dial-on-Demand)? No
- Delivery method for local mail: Mbox format in /var/mail/
- Split configuration into small files? No
Edit the passwd.client file to add your credentials:
sudo nano /etc/exim4/passwd.client
Add the following line:
smtp.forwardemail.net:your-alias@yourdomain.com:your-generated-password
Update the configuration and restart Exim4:
sudo update-exim4.conf sudo systemctl restart exim4

Testing

Send a test email:

echo "Test from Exim4" | mail -s "Exim4 Test" recipient@example.com

Question 14

msmtp SMTP Client Configuration

Accepted Answer

msmtp is a lightweight SMTP client that's useful for sending emails from scripts or command-line applications.

Estimated Setup Time: Less than 10 minutes

Important: This requires a paid plan with SMTP access enabled.

Configuration

Create or edit the msmtp configuration file at ~/.msmtprc:
nano ~/.msmtprc
Add the following configuration:
defaults auth on tls on tls_trust_file /etc/ssl/certs/ca-certificates.crt logfile ~/.msmtp.log account forwardemail host smtp.forwardemail.net port 465 tls_starttls off from your-alias@yourdomain.com user your-alias@yourdomain.com password your-generated-password account default : forwardemail
Set the correct permissions for the configuration file:
chmod 600 ~/.msmtprc

Testing

Send a test email:

echo "This is a test email from msmtp" | msmtp -a default recipient@example.com

Question 15

Command-line Email Clients

Accepted Answer

Popular command-line email clients like Mutt, NeoMutt, and Alpine can be configured to use Forward Email's SMTP servers for sending mail. The configuration will be similar to the msmtp setup, where you provide the SMTP server details and your credentials in the respective configuration files (.muttrc, .neomuttrc, or .pinerc).

Question 16

Windows Email Configuration

Accepted Answer

For Windows users, you can configure popular email clients like Microsoft Outlook and eM Client using the IMAP and SMTP settings provided in your Forward Email account. For command-line or scripting use, you can use PowerShell's Send-MailMessage cmdlet (though it is considered obsolete) or a lightweight SMTP relay tool like E-MailRelay.

Question 17

Postfix SMTP Relay Configuration

Accepted Answer

You can configure Postfix to relay emails through Forward Email's SMTP servers. This is useful for server applications that need to send emails.

Estimated Setup Time: Less than 15 minutes

Important: This requires a paid plan with SMTP access enabled.

Installation

Install Postfix on your server:

# Ubuntu/Debian sudo apt update && sudo apt install postfix # CentOS/RHEL sudo yum install postfix # macOS brew install postfix

During installation, select "Internet Site" when prompted for configuration type.

Configuration

Edit the main Postfix configuration file:

sudo nano /etc/postfix/main.cf

Add or modify these settings:

# SMTP relay configuration relayhost = [smtp.forwardemail.net]:465 smtp_tls_wrappermode = yes smtp_tls_security_level = encrypt smtp_sasl_auth_enable = yes smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd smtp_sasl_security_options = noanonymous smtp_tls_CAfile = /etc/ssl/certs/ca-certificates.crt

Create the SASL password file:

sudo nano /etc/postfix/sasl_passwd

Add your Forward Email credentials:

[smtp.forwardemail.net]:465 your-alias@yourdomain.com:your-generated-password

Secure and hash the password file:

sudo chmod 600 /etc/postfix/sasl_passwd sudo postmap /etc/postfix/sasl_passwd

Restart Postfix:

sudo systemctl restart postfix

Testing

Test your configuration by sending a test email:

echo "Test email body" | mail -s "Test Subject" recipient@example.com

Question 18

How to Send Mail As using Gmail?

Accepted Answer

Estimated Setup Time: Less than 10 minutes

Getting Started: If you've followed the instructions above under How do I get started and set up email forwarding, then you can continue reading below.

Important: Google has deprecated this Gmail Send Mail As setup. Please review Google announcement. Use Forward Email Webmail, Forward Email apps, or another email client instead. See Forward Email FAQ for help.

Important: Please ensure you have read our Terms, Privacy Policy, and Outbound SMTP Limits – your use is considered acknowledgement and agreement.

Important: If you are a developer, then refer to our email API docs.

Go to My Account Domains Settings Outbound SMTP Configuration and follow setup instructions
Create a new alias for your domain under My Account Domains Aliases (e.g. hello@example.com)
Click on Generate Password next to the newly created alias. Copy to your clipboard and securely store the generated password shown on the screen.
Go to Gmail and under Settings Accounts and Import Send mail as, click "Add another email address"
When prompted for "Name", enter the name that you want your email to be seen as "From" (e.g. "Linus Torvalds").
When prompted for "Email address", enter the full email address of an alias you created under My Account Domains Aliases (e.g. hello@example.com)
Uncheck "Treat as an alias"
Click "Next Step" to proceed
When prompted for "SMTP Server", enter smtp.forwardemail.net and change the port to 465
When prompted for "Username", enter the full email address of an alias you created under My Account Domains Aliases (e.g. hello@example.com)
When prompted for "Password", paste the password from Generate Password in step 3 above
Select the radio button for "Secured connection using SSL"
Click "Add Account" to proceed
Open a new tab to Gmail and wait for your verification email to arrive (you will receive a verification code that confirms you are the owner of the email address you are attempting to "Send Mail As")
Once it arrives, copy and paste the verification code at the prompt you received in the previous step
Once you've done that, go back to the email and click the link to "confirm the request". You will most likely need to do this step and the previous step for the email to be correctly configured.

Congratulations! You've successfully completed all steps.

Question 19

What is the legacy free guide for Send Mail As using Gmail?

Accepted Answer

Important: Google has deprecated this Gmail Send Mail As setup. Please review Google announcement. Use Forward Email Webmail, Forward Email apps, or another email client instead. See Forward Email FAQ for help.

Important: This legacy free guide is deprecated as of May 2023 since we now support outbound SMTP. If you use the guide below, then this will cause your outbound email to say "via forwardemail dot net" in Gmail.

Estimated Setup Time: Less than 10 minutes

Getting Started: If you've followed the instructions above under How do I get started and set up email forwarding, then you can continue reading below.

Question 20

Advanced Gmail Routing Configuration

Accepted Answer

Estimated Setup Time: 15-30 minutes

If you want to set up advanced routing in Gmail so that aliases that don't match a mailbox will forward to Forward Email's mail exchanges, follow these steps:

Log in to your Google Admin console at admin.google.com
Go to Apps → Google Workspace → Gmail → Routing
Click on Add Route and configure the following settings:

Single Recipient Settings:

Select "Change envelope recipient" and enter your primary Gmail address
Check "Add X-Gm-Original-To header with original recipient"

Envelope Recipient Patterns:

Add a pattern that matches all non-existent mailboxes (e.g., .*@yourdomain.com)

Email Server Settings:

Select "Route to host" and enter mx1.forwardemail.net as the primary server
Add mx2.forwardemail.net as the backup server
Set port to 25
Select "Require TLS" for security

Click Save to create the route

Important: This configuration will only work for Google Workspace accounts with custom domains, not for regular Gmail accounts.

Question 21

Advanced Outlook Routing Configuration

Accepted Answer

Estimated Setup Time: 15-30 minutes

For Microsoft 365 (formerly Office 365) users who want to set up advanced routing so that aliases that don't match a mailbox will forward to Forward Email's mail exchanges:

Log in to the Microsoft 365 admin center at admin.microsoft.com
Go to Exchange → Mail flow → Rules
Click Add a rule and select Create a new rule
Name your rule (e.g., "Forward non-existent mailboxes to Forward Email")
Under Apply this rule if, select:
- "The recipient address matches..."
- Enter a pattern that matches all addresses at your domain (e.g., *@yourdomain.com)
Under Do the following, select:
- "Redirect the message to..."
- Choose "The following mail server"
- Enter mx1.forwardemail.net and port 25
- Add mx2.forwardemail.net as a backup server
Under Except if, select:
- "The recipient is..."
- Add all your existing mailboxes that should not be forwarded
Set the rule priority to ensure it runs after other mail flow rules
Click Save to activate the rule

Question 22

Why am I not receiving my test emails?

Accepted Answer

If you're sending a test email to yourself, then it may not show up in your inbox because it has the same "Message-ID" header.

This is a widely known issue, and also affects services such as Gmail. Here is the official Gmail answer regarding this issue.

If you continue to have issues, then it is most likely to be an issue with DNS propagation. You will need to wait a bit longer and try again (or try setting a lower TTL value on your TXT records).

Still having issues? Please contact us so we can help investigate the issue and find a quick resolution.

Question 23

How do I configure my email client to work with Forward Email?

Accepted Answer

Our service works with popular email clients such as:

Your username is your alias' email address and password is from Generate Password ("Normal Password").

Tip: If you are using Thunderbird, then ensure "Connection security" is set to "SSL/TLS" and Authentication method is set to "Normal password".

Type Hostname Protocol Ports IMAP imap.forwardemail.net SSL/TLS Preferred 993 and 2993 (or 2143 for legacy TLS 1.0) POP3 pop3.forwardemail.net SSL/TLS Preferred 995 and 2995 (or 2110 for legacy TLS 1.0) SMTP smtp.forwardemail.net SSL/TLS Recommended 465 and 2465 for SSL/TLS (recommended) or 587, 2587, 2525, and 25 for STARTTLS

Question 24

Why are my emails landing in Spam and Junk and how can I check my domain reputation?

Accepted Answer

This section guides you if your outbound mail is using our SMTP servers (e.g. smtp.forwardemail.net) (or forwarded via mx1.forwardemail.net or mx2.forwardemail.net) and it is being delivered in the Spam or Junk folder of recipients.

We routinely monitor our IP addresses against all reputable DNS denylists, therefore it is most likely a domain-reputation specific issue.

Emails can land in spam folders for several reasons:

Missing Authentication: Set up SPF, DKIM, and DMARC records.
Domain Reputation: New domains often have neutral reputation until they establish a sending history.
Content Triggers: Certain words or phrases can trigger spam filters.
Sending Patterns: Sudden increases in email volume can look suspicious.

You can try to use one or more of these tools to check your domain's reputation and categorization:

Reputation and Blocklist Check Tools

Tool Name URL Type Cloudflare Domain Categorization Feedback https://radar.cloudflare.com/domains/feedback Categorization Spamhaus IP and Domain Reputation Checker https://check.spamhaus.org/ DNSBL Cisco Talos IP and Domain Reputation Center https://talosintelligence.com/reputation_center Reputation Barracuda IP and Domain Reputation Lookup https://www.barracudacentral.org/lookups/lookup-reputation DNSBL MX Toolbox Blacklist Check https://mxtoolbox.com/blacklists.aspx Blacklist Google Postmaster Tools https://www.gmail.com/postmaster/ Reputation Yahoo Sender Hub https://senders.yahooinc.com/ Reputation MultiRBL.valli.org Blacklist Check https://multirbl.valli.org/lookup/ DNSBL Sender Score https://senderscore.org/act/blocklist-remover/ Reputation Invaluement https://www.invaluement.com/lookup/ DNSBL SURBL https://www.surbl.org/ DNSBL SpamCop https://www.spamcop.net/bl.shtml DNSBL UCEPROTECT's Levels 1, 2, and 3 https://www.uceprotect.net/en/rblcheck.php DNSBL UCEPROTECT's backscatterer.org https://www.backscatterer.org/ Backscatter Protection UCEPROTECT's whitelisted.org https://www.whitelisted.org/ (requires a fee) DNSWL

IP Removal Request Forms by Provider

If your IP address has been blocked by a specific email provider, use the appropriate removal form or contact below:

Provider Removal Form / Contact Notes Google/Gmail https://support.google.com/mail/contact/bulk_send_new Bulk sender contact form Microsoft (Outlook/Office 365/Hotmail) https://sender.office.com Office 365 IP delist portal Yahoo/AOL/Verizon https://senders.yahooinc.com/ Yahoo Sender Hub Apple/iCloud https://ipcheck.proofpoint.com/ Apple uses Proofpoint for IP reputation Proofpoint https://ipcheck.proofpoint.com/ Proofpoint IP check and removal Barracuda Networks https://www.barracudacentral.org/lookups/lookup-reputation Barracuda reputation lookup and removal Cloudmark https://csi.cloudmark.com/en/reset/ Cloudmark CSI reset request GoDaddy/SecureServer https://unblock.secureserver.net GoDaddy IP unblock request form Comcast/Xfinity https://spa.xfinity.com/report Comcast IP removal request Charter/Spectrum https://www.spectrum.net/support/internet/understanding-email-error-codes Contact Spectrum support for removal AT&T abuse_rbl@abuse-att.net Email for removal request Cox Communications unblock.request@cox.net Email for removal request CenturyLink/Lumen abuse@centurylink.com Uses Cloudfilter Windstream abuse@windstream.net Email for removal request t-online.de (Germany) tobr@rx.t-online.de Email for removal request Orange France https://postmaster.orange.fr/ Use contact form or email abuse@orange.fr GMX https://postmaster.gmx.net/en/contact GMX postmaster contact form Mail.ru https://postmaster.mail.ru/ Mail.ru postmaster portal Yandex https://postmaster.yandex.ru/ Yandex postmaster portal QQ Mail (Tencent) https://open.mail.qq.com/ QQ Mail whitelist application (Chinese) Netease (163.com) https://mail.163.com/postmaster/ Netease postmaster portal Alibaba/Aliyun/HiChina https://www.alibabacloud.com/help/en/alibaba-mail/ Contact via Alibaba Cloud console Amazon SES https://docs.aws.amazon.com/ses/latest/dg/faqs-dnsbls.html AWS SES console > Blacklist Removal SendGrid https://support.sendgrid.com/ Contact SendGrid support Mimecast https://community.mimecast.com/ Uses third-party RBLs - contact specific RBL Fastmail https://www.fastmail.com/support/ Contact Fastmail support Zoho https://help.zoho.com/portal/en/kb/campaigns/faqs/campaign-review/articles/how-do-i-delist-my-ip-address Contact Zoho support ProtonMail https://proton.me/support/contact Contact Proton support Tutanota https://tutanota.com/support Contact Tutanota support Hushmail https://www.hushmail.com/support/ Contact Hushmail support Mailbox.org https://mailbox.org/en/support Contact Mailbox.org support Posteo https://posteo.de/en/site/contact Contact Posteo support DuckDuckGo Email https://duckduckgo.com/email/support Contact DuckDuckGo support Sonic.net https://www.sonic.com/support Contact Sonic support Telus https://www.telus.com/en/support Contact Telus support Vodafone Germany https://www.vodafone.de/hilfe/ Contact Vodafone support Xtra (Spark NZ) https://www.spark.co.nz/help/ Contact Spark NZ support UOL/BOL (Brazil) https://ajuda.uol.com.br/ Contact UOL support (Portuguese) Libero (Italy) https://aiuto.libero.it/ Contact Libero support (Italian) Telenet (Belgium) https://www2.telenet.be/en/support/ Contact Telenet support Facebook/WhatsApp https://www.facebook.com/business/help Contact Facebook business support LinkedIn https://www.linkedin.com/help/linkedin Contact LinkedIn support Groups.io https://groups.io/helpcenter Contact Groups.io support Earthlink/Vade Secure https://sendertool.vadesecure.com/en/ Vade Secure sender tool Cloudflare Email Security https://www.cloudflare.com/products/zero-trust/email-security/ Contact Cloudflare support Hornetsecurity/Expurgate https://www.hornetsecurity.com/ Contact Hornetsecurity support SpamExperts/Antispamcloud https://www.spamexperts.com/ Contact via hosting provider Mail2World https://www.mail2world.com/support/ Contact Mail2World support

Tip

Start with a low volume of high-quality emails to build a positive reputation before sending in larger volumes.

Important

If your domain is on a blacklist, each blacklist has its own removal process. Check their websites for instructions.

Tip

If you need additional help or find that we are false-positive listed as spam by a certain email service provider, then please contact us.

Question 25

What should I do if I receive spam emails?

Accepted Answer

You should unsubscribe from the emailing list (if possible) and block the sender.

Please do not report the message as spam, but instead forward it to our manually curated and privacy-focused abuse prevention system.

The email address to forward spam to is: abuse@forwardemail.net

Question 26

Why are my test emails sent to myself in Gmail showing as "suspicious"?

Accepted Answer

If you see this error message in Gmail when you send a test to yourself, or when a person you're emailing with your alias sees an email from you for the first time, then please do not worry – as this is a built-in safety feature of Gmail.

You can simply click "Looks safe". For example, if you were to send a test message using the send mail as feature (to someone else), then they will not see this message.

However if they do see this message, it's because they were normally used to seeing your emails come from john@gmail.com instead of john@customdomain.com (just an example). Gmail will alert the users just to make sure things are safe just in case, there is no workaround.

Question 27

Can I remove the via forwardemail dot net in Gmail?

Accepted Answer

This topic is related to a widely known issue in Gmail where extra info appears next to a sender's name.

As of May 2023 we support sending email with SMTP as an add-on for all paid users – which means that you can remove the via forwardemail dot net in Gmail.

Note that this FAQ topic is specific for those using the How to Send Mail As using Gmail feature.

Please see the section on Do you support sending email with SMTP for configuration instructions.

Question 28

Where are your servers located?

Accepted Answer

Tip

We may soon announce our EU datacenter location hosted under forwardemail.eu. Subscribe to the discussion at https://github.com/orgs/forwardemail/discussions/336 for updates. There is no EU-only deployment or opt-in today – see Can I keep my email processing and storage in the EU (data residency).

Our servers are located primarily in Denver, Colorado – see https://forwardemail.net/ips for our complete list of IP addresses.

You can learn about our subprocessors on our GDPR, DPA, and Privacy pages.

Question 29

How do I export and backup my mailbox?

Accepted Answer

At anytime you can export your mailboxes as EML, Mbox, or encrypted SQLite formats.

Go to My Account Domains Aliases Download Backup and select your preferred export format type.

You will be emailed a link to download the export once it has finished.

Note that this export download link expires after 4 hours for security concerns.

If you need to inspect your exported EML or Mbox formats, then these open-soruce tools may be useful:

Name Format Platform GitHub URL MBox Viewer Mbox Windows https://github.com/eneam/mboxviewer mbox-web-viewer Mbox All platforms https://github.com/PHMRanger/mbox-web-viewer EmlReader EML Windows https://github.com/ayamadori/EmlReader Email viewer EML VSCode https://github.com/joelharkes/vscode_email_viewer eml-reader EML All platforms https://github.com/s0ph1e/eml-reader

Additionally if you need to convert a Mbox file to EML file, then you can use https://github.com/noelmartinon/mboxzilla.

Question 30

How do I import and migrate my existing mailbox?

Accepted Answer

You can easily import your email to Forward Email (e.g. using Thunderbird) with the instructions below:

Important: You must follow all of the following steps in order to import your existing email.

Export your email from your existing email provider:
Email Provider Export Format Export Instructions Gmail MBOX https://takeout.google.com/settings/takeout/custom/gmail Outlook PST
Tip: If you are using Outlook (PST export format), then you could simply follow the instructions under "Other" below. However we have provided links below to convert PST to MBOX/EML format based off your operating system:
Apple Mail MBOX https://support.apple.com/guide/mail/import-or-export-mailboxes-mlhlp1030/mac#apd37a3190755974 Fastmail EML https://www.fastmail.help/hc/en-us/articles/360060590573-Download-all-your-data#downloadmail Proton Mail MBOX/EML https://proton.me/support/export-emails-import-export-app Tutanota EML https://github.com/crepererum-oss/tatutanatata Gandi EML https://docs.gandi.net/en/gandimail/common_operations/backup_email.html#contents Zoho EML https://www.zoho.com/mail/help/import-export-emails.html#alink2 Other Use Thunderbird Set up your existing email account in Thunderbird and then use the ImportExportTools NG plugin to export and import your email. You may also be able to simply copy/paste or drag/drop emails between one account to another.
Download, install, and open Thunderbird.
Create a new account using your alias' full email address (e.g. you@yourdomain.com) and your generated password. If you do not yet have a generated password, then refer to our setup instructions.
Download and install the ImportExportTools NG Thunderbird plugin.
Create a new local folder in Thunderbird, and then right click on it → select the ImportExportTools NG option → choose Import mbox file (for MBOX export format) – or – Import messages / Import all messages from a directory (for EML export format).
Drag/drop from the local folder to a new (or existing) IMAP folder in Thunderbird you wish to upload messages to in IMAP storage with our service. This will ensure they are backed up online with our SQLite encrypted storage.

Tip: If you are confused as to how to import into Thunderbird, then you can refer to official instructions at https://kb.mozillazine.org/Importing_folders and https://github.com/thunderbird/import-export-tools-ng/wiki.

Important: Once you have completed the export and import process, then you may also want to enable forwarding on your existing email account and set up an auto-responder to notify senders that you have a new email address (e.g. if you were previously using Gmail and are now using an email with your custom domain name).

Congratulations! You've successfully completed all steps.

Question 31

How do I use my own S3-compatible storage for backups?

Accepted Answer

Paid plan users can configure their own S3-compatible storage provider on a per-domain basis for IMAP/SQLite backups. This means your encrypted mailbox backups can be stored on your own infrastructure instead of (or in addition to) our default storage.

Supported providers include Amazon S3, Cloudflare R2, MinIO, Backblaze B2, DigitalOcean Spaces, and any other S3-compatible service.

Setup

Create a private bucket with your S3-compatible provider. The bucket must not be publicly accessible.
Create access credentials (access key ID and secret access key) with read/write permissions to the bucket.
Go to My Account Domains Advanced Settings Custom S3-Compatible Storage.
Check "Enable custom S3-compatible storage" and fill in your endpoint URL, access key ID, secret access key, region, and bucket name.
Click "Test Connection" to verify your credentials, bucket access, and write permissions.
Click "Save" to apply the settings.

How Backups Work

Backups are triggered automatically for every connected IMAP alias. The IMAP server checks all active connections once per hour and dispatches a backup for each connected alias. A Redis-based lock prevents duplicate backups from running within 30 minutes of each other, and the actual backup is skipped if a successful backup was already completed within the last 24 hours (unless the backup was explicitly requested by a user for download).

Backups can also be triggered manually by clicking "Download Backup" for any alias in the dashboard. Manual backups always run regardless of the 24-hour window.

The backup process works as follows:

The SQLite database is copied using VACUUM INTO, which creates a consistent snapshot without interrupting active connections and preserves the database encryption.
The backup file is verified by opening it to confirm encryption is still valid.
A SHA-256 hash is computed and compared against the existing backup in storage. If the hash matches, the upload is skipped (no changes since last backup).
The backup is uploaded to S3 using multipart upload via the @aws-sdk/lib-storage library.
A signed download URL (valid for 4 hours) is generated and emailed to the user.

Backup Formats

Three backup formats are supported:

Format Extension Description sqlite .sqlite Raw encrypted SQLite snapshot containing mailbox, contact, calendar, and calendar-event records (default for automatic IMAP backups) mbox .zip Password-protected ZIP containing mailbox MBOX files plus Contacts VCF and Calendars ICS folders eml .zip Password-protected ZIP containing individual .eml files plus Contacts VCF and Calendars ICS folders

All export formats preserve contacts, calendars, and calendar events. The portable EML and MBOX ZIP archives organize VCF files by address book under Contacts and ICS event or task resources by calendar under Calendars. Raw SQLite backups retain the same records in their native tables.

Tip: If you have .sqlite backup files and want to convert them to .eml files locally, use our standalone CLI tool convert-sqlite-to-eml. It works on Windows, Linux, and macOS and does not require a network connection.

File Naming and Key Structure

When using custom S3 storage, backup files are stored with an ISO 8601 timestamp prefix so that each backup is preserved as a separate object. This gives you a full backup history in your own bucket.

The key format is:

{ISO 8601 timestamp}-{alias_id}.{extension}

For example:

2025-03-01T12:00:00.000Z-65a31c53c36b75ed685f3fda.sqlite 2025-03-01T12:00:00.000Z-65a31c53c36b75ed685f3fda.zip 2025-03-02T12:00:00.000Z-65a31c53c36b75ed685f3fda.sqlite

The alias_id is the MongoDB ObjectId of the alias. You can find it in the alias settings page or via the API.

When using the default (system) storage, the key is flat (e.g. 65a31c53c36b75ed685f3fda.sqlite) and each backup overwrites the previous one.

Note: Since custom S3 storage retains all backup versions, storage usage will grow over time. We recommend configuring lifecycle rules on your bucket to automatically expire old backups (e.g. delete objects older than 30 or 90 days).

Data Ownership and Deletion Policy

Your custom S3 bucket is entirely under your control. We never delete or modify files in your custom S3 bucket — not when an alias is deleted, not when a domain is removed, and not during any cleanup operations. We only write new backup files to your bucket.

This means:

Alias deletion — When you delete an alias, we remove the backup from our default system storage only. Any backups previously written to your custom S3 bucket remain untouched.
Domain removal — Removing a domain does not affect files in your custom bucket.
Retention management — You are responsible for managing storage in your own bucket, including configuring lifecycle rules to expire old backups.

If you disable custom S3 storage or switch back to our default storage, existing files in your bucket are preserved. Future backups will simply be written to our default storage instead.

Security

Your access key ID and secret access key are encrypted at rest using AES-256-GCM before being stored in our database. They are only decrypted at runtime when performing backup operations.
We automatically validate that your bucket is not publicly accessible. If a public bucket is detected, the configuration will be rejected on save. If public access is detected at backup time, we fall back to our default storage and notify all domain administrators by email.
Credentials are validated on save via a HeadBucket call to ensure the bucket exists and credentials are correct. If validation fails, custom S3 storage is automatically disabled.
Each backup file includes a SHA-256 hash in its S3 metadata, which is used to detect unchanged databases and skip redundant uploads.

Error Notifications

If a backup fails when using your custom S3 storage (e.g. due to expired credentials or a connectivity issue), all domain administrators will be notified by email. These notifications are rate-limited to once every 6 hours to prevent duplicate alerts. If your bucket is detected as publicly accessible at backup time, administrators will be notified once daily.

API

You can also configure custom S3 storage via the API:

curl -X PUT https://api.forwardemail.net/v1/domains/example.com \ -u API_TOKEN: \ -d has_custom_s3=true \ -d s3_endpoint=https://s3.us-east-1.amazonaws.com \ -d s3_access_key_id=YOUR_ACCESS_KEY_ID \ -d s3_secret_access_key=YOUR_SECRET_ACCESS_KEY \ -d s3_region=us-east-1 \ -d s3_bucket=my-email-backups

To test the connection via the API:

curl -X POST https://api.forwardemail.net/v1/domains/example.com/test-s3-connection \ -u API_TOKEN:

Question 32

How do I convert SQLite backups to EML files?

Accepted Answer

If you download or store SQLite backups (either from our default storage or your own custom S3 bucket), you can convert them to standard .eml files using our standalone CLI tool convert-sqlite-to-eml. The password-protected ZIP also contains VCF contacts organized by address book under Contacts and ICS calendar events or tasks organized by calendar under Calendars. EML files can be opened with any email client (Thunderbird, Outlook, Apple Mail, etc.) or imported into other mail servers.

Installation

You can either download a pre-built binary (no Node.js required) or run it directly with Node.js:

Pre-built binaries — Download the latest release for your platform from GitHub Releases:

Platform Architecture File Linux x64 convert-sqlite-to-eml-linux-x64 Linux arm64 convert-sqlite-to-eml-linux-arm64 macOS Apple Silicon convert-sqlite-to-eml-darwin-arm64 Windows x64 convert-sqlite-to-eml-win-x64.exe

macOS users: After downloading, you may need to remove the quarantine attribute before running the binary:

sudo xattr -rd com.apple.quarantine ./convert-sqlite-to-eml-darwin-arm64

(Replace ./convert-sqlite-to-eml-darwin-arm64 with the actual path to the downloaded file.)

Linux users: After downloading, you may need to make the binary executable:

chmod +x ./convert-sqlite-to-eml-linux-x64

(Replace ./convert-sqlite-to-eml-linux-x64 with the actual path to the downloaded file.)

From source (requires Node.js >= 18):

cd tools/convert-sqlite-to-eml npm install node index.js

Usage

The tool supports both interactive and non-interactive modes.

Interactive mode — run without arguments and you will be prompted for all inputs:

./convert-sqlite-to-eml Forward Email - Convert SQLite Backup to EML ============================================= Path to SQLite backup file: /path/to/backup.sqlite IMAP/alias password: ******** Output ZIP path [/path/to/backup-2025-03-01T12-00-00-000Z.zip]:

Non-interactive mode — pass arguments via command-line flags for scripting and automation:

./convert-sqlite-to-eml \ --path /path/to/backup.sqlite \ --password "your-imap-password" \ --output /path/to/output.zip Flag Description --path Path to the encrypted SQLite backup file --password IMAP/alias password for decryption --output Output path for the ZIP file (default: auto-generated with ISO 8601 timestamp) --help Show help message

Output Format

The tool produces a password-protected ZIP archive (AES-256 encrypted) containing:

README.txt INBOX/ .eml .eml Sent/ .eml Drafts/ .eml

EML files are organized by mailbox folder. The ZIP password is the same as your IMAP/alias password. Each .eml file is a standard RFC 5322 email message with full headers, body text, and attachments reconstructed from the SQLite database.

How It Works

Question 33

Do you support self-hosting?

Accepted Answer

Yes, as of March 2025, we support a self-hosted option. Read the blog here. Checkout the self-hosted guide to get started. And for those interested in a more broken down step-by-step version see our Ubuntu or Debian based guides.

Question 34

How do I get started and set up email forwarding?

Accepted Answer

Estimated Setup Time: Less than 10 minutes

Getting Started: Carefully read and follow steps one through eight listed below. Be sure to replace the email address of user@gmail.com with the email address you want to forward emails to (if it isn't already accurate). Similarly be sure to replace example.com with your custom domain name (if it isn't already accurate).

If you have already registered your domain name somewhere, then you must completely skip this step and go to step two! Otherwise you can click here to register your domain name.
Do you remember where you registered your domain? Once you remember this, then follow the instructions below:
Important: You must open a new tab and sign in to your domain registrar. You can easily click on your "Registrar" below to automatically do this. In this new tab, you must navigate to the DNS management page at your registrar – and we have provided the step by step navigation steps below under the "Steps to Configure" column. Once you've navigated to this page in the new tab, you can return to this tab and proceed to step three below. Do not close the opened tab yet; you will need it for future steps!
Registrar Steps to Configure 1&1 Log in Domain Center (Select your domain) Edit DNS Settings Amazon Route 53 Log in Hosted Zones (Select your domain) Aplus.net Log in My Servers Domain Management DNS Manager Bluehost FOR ROCK: Log in Domains (Click the ▼ icon next to manage) DNS
FOR LEGACY: Log in Domains Zone editor (Select your domain) Cloudflare Log in DNS DNS Made Easy Log in DNS (Select your domain) DNSimple Log in (Select your domain) DNS Manage Digital Ocean Log in Networking Domains (Select your domain) More Manage Domain Domain.com Log in In card view, click manage on your domain In list view, click the gear icon DNS & Nameservers DNS Records Domains.com
Watch Log in (Select your domain) Manage (click gear icon) Click on DNS & Nameservers in left-hand menu DreamHost Log in Panel Domains Manage Domains DNS Dyn Log in Overview Manage Simple Editor Records Gandi Log in (Select your domain) Management Edit the zone GoDaddy
Watch Log in Manage My Domains (Select your domain) Manage DNS Google Domains
Watch Log in (Select your domain) Configure DNS Namecheap
Watch Log in Domain List (Select your domain) Manage Advanced DNS Netlify Log in (Select your domain) Setup Netlify DNS Network Solutions Log in Account Manager My Domain Names (Select your domain) Manage Change Where Domain Points Advanced DNS Shopify
Watch Log in Managed Domains (Select your domain) DNS Settings Squarespace Log in Home menu Settings Domains (Select your domain) Advanced settings Custom Records Vercel's Now Using "now" CLI now dns add [domain] '@' MX [record-value] [priority] Weebly Log in Domains page (Select your domain) DNS Wix Log in Domains page (Click icon) Select Manage DNS Records eNom Log in Domains My Domains Other
Important: Don't see your registrar name listed here? Simply search on the Internet for "how to change DNS records on $REGISTRAR" (replacing $REGISTRAR with the name of your registrar – e.g. "how to change DNS records on GoDaddy" if you're using GoDaddy).
Using your registrar's DNS management page (the other tab you have opened), set the following "MX" records:
Important: Note that there should be NO other MX records set. Both records shown below MUST exist. Be sure there are no typos; and you have both mx1 and mx2 spelled correctly. If there were already MX records that existed, please delete them completely. The "TTL" value does not need to be 3600, it could be a lower or higher value if necessary.
Name/Host/Alias TTL Type Priority Answer/Value "@", ".", or blank 3600 MX 0 mx1.forwardemail.net "@", ".", or blank 3600 MX 0 mx2.forwardemail.net
Using your registrar's DNS management page (the other tab you have opened), set the following TXT record(s):
Important: If you are on a paid plan, then you must completely skip this step and go to step five! If you are not on a paid plan, then your forwarded addresses will be publicly searchable – go to My Account Domains and upgrade your domain to a paid plan if desired. If you would like to learn more about paid plans see our Pricing page. Otherwise you can continue to choose one or more combinations from Option A to Option F listed below.

Option A: If you are forwarding all emails from your domain, (e.g. "all@example.com", "hello@example.com", etc) to a specific address "user@gmail.com":
Name/Host/Alias TTL Type Answer/Value "@", ".", or blank 3600 TXT forward-email=user@gmail.com
Tip: Make sure to replace the values above in the "Value" column with your own email address. The "TTL" value does not need to be 3600, it could be a lower or higher value if necessary. A lower time to live ("TTL") value will ensure any future changes made to your DNS records are propagated throughout the Internet quicker – think of this as how long it will be cached in-memory (in seconds). You can learn more about TTL on Wikipedia.

Option B: If you just need to forward a single email address (e.g. hello@example.com to user@gmail.com; this will also forward "hello+test@example.com" to "user+test@gmail.com" automatically):
Name/Host/Alias TTL Type Answer/Value "@", ".", or blank 3600 TXT forward-email=hello:user@gmail.com
Option C: If you are forwarding multiple emails, then you'll want to separate them with a comma:
Name/Host/Alias TTL Type Answer/Value "@", ".", or blank 3600 TXT forward-email=hello:user@gmail.com,support:user@gmail.com
Option D: You can have an infinite amount of forwarding emails setup – just make sure to not wrap over 255 characters in a single-line and start each line with "forward-email=". An example is provided below:
Name/Host/Alias TTL Type Answer/Value "@", ".", or blank 3600 TXT forward-email=hello:user@gmail.com,support:user@gmail.com "@", ".", or blank 3600 TXT forward-email=help:user@gmail.com,foo:user@gmail.com "@", ".", or blank 3600 TXT forward-email=orders:user@gmail.com,baz:user@gmail.com "@", ".", or blank 3600 TXT forward-email=info:user@gmail.com,beep:user@gmail.com "@", ".", or blank 3600 TXT forward-email=errors:user@gmail.com,boop:user@gmail.com
Option E: You can also specify a domain name in your TXT record to have global alias forwarding (e.g. "user@example.com" will get forwarded to "user@example.net"):
Name/Host/Alias TTL Type Answer/Value "@", ".", or blank 3600 TXT forward-email=example.net
Option F: You can even use webhooks as a global or individual alias to forward emails to. See the example and full section on webhooks titled Do you support webhooks below.
Name/Host/Alias TTL Type Answer/Value "@", ".", or blank 3600 TXT forward-email=alias:https://requestbin.com/r/en8pfhdgcculn
Option G: You can even use regular expressions ("regex") for matching aliases and for handling substitutions to forward emails to. See the examples and full section on regex titled Do you support regular expressions or regex below.

Need advanced regex with substitution? See the examples and full section on regex titled Do you support regular expressions or regex below.

Simple Example: If I want all emails that go to `linus@example.com` or `torvalds@example.com` to forward to `user@gmail.com`:
Name/Host/Alias TTL Type Answer/Value "@", ".", or blank 3600 TXT forward-email=/^(linus|torvalds)$/:user@gmail.com
Important: Catch-all forwarding rules could also be described as "fall-through". This means that incoming emails which match at least one specific forwarding rule will be used instead of the catch-all. Specific rules include email addresses and regular expressions.

For example:
forward-email=hello:first@gmail.com,second@gmail.com
Emails sent to hello@example.com will **not** be forwarded to second@gmail.com (catch-all) with this configuration, and instead only be delivered to first@gmail.com.
Using your registrar's DNS management page (the other tab you have opened), additionally set the following TXT record: Name/Host/Alias TTL Type Answer/Value "@", ".", or blank 3600 TXT v=spf1 a include:spf.forwardemail.net -all
Important: If you are using Gmail (e.g. Send Mail As) or G Suite, then you'll need to append include:_spf.google.com to the value above, for example:

v=spf1 a include:spf.forwardemail.net include:_spf.google.com -all

Tip: If you already have a similar line with "v=spf1", then you'll need to append include:spf.forwardemail.net right before any existing "include:host.com" records and before the "-all" in the same line, for example:

v=spf1 a include:spf.forwardemail.net include:host.com -all

Note that there is a difference between "-all" and "~all". The "-" indicates that the SPF check should FAIL if it does not match, and "~" indicates that the SPF check should SOFTFAIL. We recommend to use the "-all" approach to prevent domain forgery.

You may also need to include the SPF record for whichever host you are sending mail from (e.g. Outlook).
Verify your DNS records using our "Verify Records" tool available at My Account Domains Setup.
Send a test email to confirm it works. Note that it might take some time for your DNS records to propagate.
Tip: If you are not receiving test emails, or receive a test email that says "Be careful with this message", then see the answers for Why am I not receiving my test emails and Why are my test emails sent to myself in Gmail showing as "suspicious" respectively.
If you wish to "Send Mail As" from Gmail, then you will need to watch this video, or follow the steps under How to Send Mail As Using Gmail below.

Congratulations! You've successfully completed all steps.

Tip: Optional add-ons are listed below. Note that these add-ons are completely optional and may not be necessary. We wanted to at least provide you with additional information if necessary.

Optional Add-on: If you're using the How to Send Mail As using Gmail feature, then you may want to add yourself to an allowlist. See these instructions by Gmail on this topic.

Question 35

Can I use multiple MX exchanges and servers for advanced forwarding?

Accepted Answer

Yes, but you should only have one MX exchange listed in your DNS records.

Do not attempt to use "Priority" as a way to configure multiple MX exchanges.

Instead, you need to configure your existing MX exchange to forward mail for all non-matching aliases to our service's exchanges (mx1.forwardemail.net and/or mx2.forwardemail.net).

If you are using Google Workspace and you want to forward all non-matching aliases to our service, then see https://support.google.com/a/answer/6297084.

If you are using Microsoft 365 (Outlook) and you want to forward all non-matching aliases to our service, then see https://learn.microsoft.com/en-us/exchange/mail-flow-best-practices/use-connectors-to-configure-mail-flow/set-up-connectors-to-route-mail and https://learn.microsoft.com/en-us/exchange/mail-flow-best-practices/manage-mail-flow-for-multiple-locations.

Question 36

How do I set up a vacation responder (out of office auto-responder)?

Accepted Answer

Go to My Account Domains Aliases and either create or edit the alias you would like to configure a vacation autoresponder for.

You have the ability to configure a start date, end date, subject, and message, and enable or disable it at anytime:

Plaintext subject and message are currently supported (we use striptags package internally to remove any HTML).
Subject is limited to 100 characters.
Message is limited to 1000 characters.
Setup requires Outbound SMTP configuration (e.g. you will need to setup DKIM, DMARC, and Return-Path DNS records).
- Go to My Account Domains Settings Outbound SMTP Configuration and follow setup instructions.
Vacation responder cannot be enabled on global vanity domain names (e.g. disposable addresses are not supported).
Vacation responder cannot be enabled for aliases with wildcard/catch-all (*) nor regular expressions.

Unlike mail systems such as postfix (e.g. that use the sieve vacation filter extension) – Forward Email automatically adds your DKIM signature, dummy-proofs connection issues when sending vacation responses (e.g. due to common SSL/TLS connection issues and legacy maintained servers), and even supports Open WKD and PGP encryption for vacation responses.

Question 37

How do I set up SPF for Forward Email?

Accepted Answer

Using your registrar's DNS management page, set the following TXT record:

Name/Host/Alias TTL Type Answer/Value "@", ".", or blank 3600 TXT v=spf1 a include:spf.forwardemail.net -all

Important: If you are using Gmail (e.g. Send Mail As) or G Suite, then you'll need to append include:_spf.google.com to the value above, for example:

v=spf1 a include:spf.forwardemail.net include:_spf.google.com -all

Important: If you are using Microsoft Outlook or Live.com, you'll need to append include:spf.protection.outlook.com to your SPF TXT record, for example:

v=spf1 a include:spf.forwardemail.net include:spf.protection.outlook.com -all

Tip: If you already have a similar line with "v=spf1", then you'll need to append include:spf.forwardemail.net right before any existing "include:host.com" records and before the "-all" in the same line, for example:

v=spf1 a include:spf.forwardemail.net include:host.com -all

Note that there is a difference between "-all" and "~all". The "-" indicates that the SPF check should FAIL if it does not match, and "~" indicates that the SPF check should SOFTFAIL. We recommend to use the "-all" approach to prevent domain forgery.

You may also need to include the SPF record for whichever host you are sending mail from (e.g. Outlook).

Question 38

How do I set up DKIM for Forward Email?

Accepted Answer

Go to My Account Domains Settings Outbound SMTP Configuration and follow setup instructions.

Question 39

How do I set up DMARC for Forward Email?

Accepted Answer

Go to My Account Domains Settings Outbound SMTP Configuration and follow setup instructions.

Question 40

How do I view DMARC Reports?

Accepted Answer

Forward Email provides a comprehensive DMARC Reports dashboard that allows you to monitor your email authentication performance across all your domains from a single interface.

What are DMARC Reports?

DMARC (Domain-based Message Authentication, Reporting, and Conformance) reports are XML files sent by receiving mail servers that tell you how your emails are being authenticated. These reports help you understand:

How many emails are being sent from your domain
Whether those emails are passing SPF and DKIM authentication
What actions receiving servers are taking (accept, quarantine, or reject)
Which IP addresses are sending email on behalf of your domain

How to Access DMARC Reports

Go to My Account DMARC Reports to view your dashboard. You can also access domain-specific reports from My Account Domains by clicking the "DMARC" button next to any domain.

Dashboard Features

The DMARC Reports dashboard provides:

Summary Metrics: Total reports received, total messages analyzed, SPF alignment rate, DKIM alignment rate, and overall pass rate
Messages Over Time Chart: Visual trend of email volume and authentication rates over the past 30 days
Alignment Summary: Donut chart showing SPF vs DKIM alignment distribution
Message Disposition: Stacked bar chart showing how receiving servers handled your emails (accepted, quarantined, or rejected)
Recent Reports Table: Detailed list of individual DMARC reports with filtering and pagination
Domain Filtering: Filter reports by specific domain when managing multiple domains

Why This Matters

For organizations managing multiple domains (like enterprises, non-profits, or agencies), DMARC reports are essential for:

Identifying unauthorized senders: Detect if someone is spoofing your domain
Improving deliverability: Ensure your legitimate emails pass authentication
Monitoring email infrastructure: Track which services and IPs are sending on your behalf
Compliance: Maintain visibility into email authentication for security audits

Unlike other services that require separate DMARC monitoring tools, Forward Email includes DMARC report processing and visualization as part of your account at no additional cost.

Requirements

DMARC Reports are available for paid plans only
Your domain must have DMARC configured (see How do I set up DMARC for Forward Email)
Reports are automatically collected when receiving mail servers send them to your configured DMARC reporting address

Weekly Email Reports

Paid plan users automatically receive weekly DMARC report summaries via email. These emails include:

Summary statistics for all your domains
SPF and DKIM alignment rates
Message disposition breakdown (accepted, quarantined, rejected)
Top reporting organizations (Google, Microsoft, Yahoo, etc.)
IP addresses with alignment issues that may need attention
Direct links to your DMARC Reports dashboard

Weekly reports are sent automatically and cannot be disabled separately from other email notifications.

Question 41

Why do my DMARC reports show failures from unknown IP addresses?

Accepted Answer

If your DMARC reports contain unfamiliar IP addresses failing SPF and DKIM, please do not worry – this is normal and actually means your setup is working correctly.

DMARC reports list every server that attempted to send mail claiming to be from your domain, including unauthorized ones. In nearly all cases these unknown IPs are simply spammers or bots trying to impersonate your domain. Here is what happens when they try:

SPF fails because the sending IP is not listed in your SPF record.
DKIM fails because they cannot produce a valid signature for your domain.
With a DMARC policy of p=reject, the message is rejected outright and never reaches anyone's inbox.

In other words, these failures are proof that DMARC is doing its job – blocking impersonation attempts before they cause harm. No action is required on your part.

How to tell legitimate senders from impersonators

If you also use other services to send mail on your domain's behalf (marketing tools, CRMs, etc.), make sure those services have a valid DKIM signature configured – otherwise their messages will also appear as failures in your reports.

Important

Make sure your domain publishes a DMARC policy of p=reject so that impersonation attempts are rejected rather than delivered. See How do I set up DMARC for Forward Email.

Question 42

How do I connect and configure my contacts?

Accepted Answer

To configure your contacts, use the CardDAV URL of: https://carddav.forwardemail.net (or simply carddav.forwardemail.net if your client allows it)

Question 43

How do I connect and configure my calendars?

Accepted Answer

To configure your calendar, use the CalDAV URL of: https://caldav.forwardemail.net (or simply caldav.forwardemail.net if your client allows it)

Question 44

How do I add more calendars and manage existing calendars?

Accepted Answer

If you'd like to add additional calendars, then just add a new calendar URL of: https://caldav.forwardemail.net/dav/principals/calendar-name (be sure to replace calendar-name with your desired calendar name)

You can change a calendar's name and color after creation – just use your preferred calendar application (e.g. Apple Mail or Thunderbird).

Question 45

How do I connect and configure tasks and reminders?

Accepted Answer

To configure tasks and reminders, use the same CalDAV URL as calendars: https://caldav.forwardemail.net (or simply caldav.forwardemail.net if your client allows it)

Tasks and reminders will automatically be separated from calendar events into their own "Reminders" or "Tasks" calendar collection.

Setup instructions by platform:

macOS/iOS:

Add a new CalDAV account in System Preferences > Internet Accounts (or Settings > Accounts on iOS)
Use caldav.forwardemail.net as the server
Enter your Forward Email alias and generated password
After setup, you'll see both "Calendar" and "Reminders" collections
Use the Reminders app to create and manage tasks

Android with Tasks.org:

Install Tasks.org from Google Play Store or F-Droid
Go to Settings > Synchronization > Add Account > CalDAV
Enter server: https://caldav.forwardemail.net
Enter your Forward Email alias and generated password
Tasks.org will automatically discover your task calendars

Thunderbird:

Install the Lightning add-on if not already installed
Create a new calendar with type "CalDAV"
Use URL: https://caldav.forwardemail.net
Enter your Forward Email credentials
Both events and tasks will be available in the calendar interface

Question 46

Why can't I create tasks in macOS Reminders?

Accepted Answer

If you're having trouble creating tasks in macOS Reminders, try these troubleshooting steps:

Check account setup: Ensure your CalDAV account is properly configured with caldav.forwardemail.net
Verify separate calendars: You should see both "Calendar" and "Reminders" in your account. If you only see "Calendar", the task support may not be fully activated yet.
Refresh account: Try removing and re-adding your CalDAV account in System Preferences > Internet Accounts
Check server connectivity: Test that you can access https://caldav.forwardemail.net in your browser
Verify credentials: Ensure you're using the correct alias email and generated password (not your account password)
Force sync: In Reminders app, try creating a task and then manually refreshing the sync

Common issues:

"Reminders calendar not found": The server may need a moment to create the Reminders collection on first access
Tasks not syncing: Check that both devices are using the same CalDAV account credentials
Mixed content: Ensure tasks are being created in the "Reminders" calendar, not the general "Calendar"

Question 47

How do I set up Tasks.org on Android?

Accepted Answer

Tasks.org is a popular open-source task manager that works excellently with Forward Email's CalDAV task support.

Installation and Setup:

Install Tasks.org:
- From Google Play Store: Tasks.org
- From F-Droid: Tasks.org on F-Droid
Configure CalDAV sync:
- Open Tasks.org
- Go to ☰ Menu > Settings > Synchronization
- Tap "Add Account"
- Select "CalDAV"
Enter Forward Email settings:
- Server URL: https://caldav.forwardemail.net
- Username: Your Forward Email alias (e.g., you@yourdomain.com)
- Password: Your alias-specific generated password
- Tap "Add Account"
Account discovery:
- Tasks.org will automatically discover your task calendars
- You should see your "Reminders" collection appear
- Tap "Subscribe" to enable sync for the task calendar
Test sync:
- Create a test task in Tasks.org
- Check that it appears in other CalDAV clients (like macOS Reminders)
- Verify changes sync both ways

Features available:

✅ Task creation and editing
✅ Due dates and reminders
✅ Task completion and status
✅ Priority levels
✅ Subtasks and task hierarchy
✅ Tags and categories
✅ Two-way sync with other CalDAV clients

Troubleshooting:

If no task calendars appear, try manually refreshing in Tasks.org settings
Ensure you have at least one task created on the server (you can create one in macOS Reminders first)
Check network connectivity to caldav.forwardemail.net

Question 48

How do I set up SRS for Forward Email?

Accepted Answer

We automatically configure Sender Rewriting Scheme ("SRS") – you do not need to do this yourself.

Question 49

How do I set up MTA-STS for Forward Email?

Accepted Answer

Please refer to our section on MTA-STS for more insight.

Question 50

How do I add a profile picture to my email address?

Accepted Answer

If you're using Gmail, then follow these steps below:

Go to https://google.com and sign out of all email accounts
Click "Sign In" and on the drop-down click on "other account"
Select "Use another account"
Select "Create account"
Select "Use my current email address instead"
Enter your custom domain name email address
Retrieve the verification email sent to your email address
Enter the verification code from this email
Complete profile information for your new Google account
Agree to all Privacy and Terms of Use policies
Go to https://google.com and in the top right corner, click on your profile icon, and click on the "change" button
Upload a new photo or avatar for your account
Changes will take approximately 1-2 hours to propagate, but sometimes may be very quick.
Send a test email and the profile photo should appear.

Question 51

Do you support newsletters or mailing lists for marketing related email?

Accepted Answer

Yes, you can read more at https://forwardemail.net/guides/newsletter-with-listmonk.

Please note that in order to maintain IP reputation and ensure deliverability, Forward Email has a manual review process on a per-domain basis for newsletter approval. Email support@forwardemail.net or open a help request for approval. This typically takes less than 24 hours, with most requests being honored within 1-2 hours. In the near future we aim to make this process instant with additional spam controls and alerting. This process ensures that your emails reach the inbox and your messages don't get marked as spam.

Question 52

Do you support sending email with API?

Accepted Answer

Yes, as of May 2023 we support sending email with API as an add-on for all paid users.

Important: Please ensure you have read our Terms, Privacy Policy, and Outbound SMTP Limits – your use is considered acknowledgement and agreement.

Please view our section on Emails in our API documentation for options, examples, and more insight.

In order to send outbound email with our API, you must use your API token available under My Security.

If you no longer need API access, you can disable your token with DELETE /v1/account/api-token. A disabled token cannot authenticate API or WebSocket requests. To enable API access again, sign in to My Security and reset your token, which generates a replacement. Alias-password authentication is unchanged.

Question 53

Do you support receiving email with IMAP?

Accepted Answer

Yes, as of October 16, 2023 we support receiving email over IMAP as an add-on for all paid users. Please read our deep-dive article on how our encrypted SQLite mailbox storage feature works.

Important: Please ensure you have read our Terms and Privacy Policy – your use is considered acknowledgement and agreement.

Create a new alias for your domain under My Account Domains Aliases (e.g. hello@example.com)
Click on Generate Password next to the newly created alias. Copy to your clipboard and securely store the generated password shown on the screen.
Using your preferred email application, add or configure an account with your newly created alias (e.g. hello@example.com)

Tip: We recommend our official Forward Email apps for macOS, Windows, Linux, Android, and iOS — they come pre-configured for your encrypted mailboxes, calendars, and contacts. You can also use Thunderbird, Thunderbird Mobile, Apple Mail, or an open-source and privacy-focused alternative.
When prompted for IMAP server name, enter imap.forwardemail.net
When prompted for IMAP server port, enter 993 (SSL/TLS) – see alternate IMAP ports if necessary

Tip: If you are using Thunderbird, then ensure "Connection security" is set to "SSL/TLS" and Authentication method is set to "Normal password".
When prompted for IMAP server password, paste the password from Generate Password in step 2 above
Save your settings – if you are having issues, then please contact us

Congratulations! You've successfully completed all steps.

Question 54

Do you support POP3?

Accepted Answer

Yes, as of December 4, 2023 we support POP3 as an add-on for all paid users. Please read our deep-dive article on how our encrypted SQLite mailbox storage feature works.

Important: Please ensure you have read our Terms and Privacy Policy – your use is considered acknowledgement and agreement.

Create a new alias for your domain under My Account Domains Aliases (e.g. hello@example.com)
Click on Generate Password next to the newly created alias. Copy to your clipboard and securely store the generated password shown on the screen.
Using your preferred email application, add or configure an account with your newly created alias (e.g. hello@example.com)

Tip: We recommend our official Forward Email apps for macOS, Windows, Linux, Android, and iOS — they come pre-configured for your encrypted mailboxes, calendars, and contacts. You can also use Thunderbird, Thunderbird Mobile, Apple Mail, or an open-source and privacy-focused alternative.
When prompted for POP3 server name, enter pop3.forwardemail.net
When prompted for POP3 server port, enter 995 (SSL/TLS) – see alternate POP3 ports if necessary

Tip: If you are using Thunderbird, then ensure "Connection security" is set to "SSL/TLS" and Authentication method is set to "Normal password".
When prompted for POP3 server password, paste the password from Generate Password in step 2 above
Save your settings – if you are having issues, then please contact us

Congratulations! You've successfully completed all steps.

Question 55

Do you support calendars (CalDAV)?

Accepted Answer

Yes, as of February 5, 2024 we have added this feature. Our server is caldav.forwardemail.net and is also monitored on our status page.

It supports both IPv4 and IPv6 and is available over port 443 (HTTPS).

Login Example Description Username user@example.com Email address of an alias that exists for the domain at My Account Domains. Password ************************ Alias-specific generated password.

In order to use calendar support, the user must be the email address of an alias that exists for the domain at My Account Domains – and the password must be an alias-specific generated password.

Question 56

Do you support tasks and reminders (CalDAV VTODO)?

Accepted Answer

Yes, as of October 14, 2025 we have added CalDAV VTODO support for tasks and reminders. This uses the same server as our calendar support: caldav.forwardemail.net.

Our CalDAV server supports both calendar events (VEVENT) and tasks (VTODO) components using unified calendars. This means each calendar can contain both events and tasks, providing maximum flexibility and compatibility across all CalDAV clients.

How calendars and lists work:

Each calendar supports both events and tasks - You can add events, tasks, or both to any calendar
Apple Reminders lists - Each list you create in Apple Reminders becomes a separate calendar on the server
Multiple calendars - You can create as many calendars as you need, each with its own name, color, and organization
Cross-client sync - Tasks and events sync seamlessly between all compatible clients

Supported task clients:

Task features supported:

Task creation, editing, and deletion
Due dates and start dates
Task completion status (NEEDS-ACTION, IN-PROCESS, COMPLETED, CANCELLED)
Task priority levels
Recurring tasks
Task descriptions and notes
Multi-device synchronization
Subtasks with RELATED-TO property
Task reminders with VALARM

The login credentials are the same as for calendar support:

Login Example Description Username user@example.com Email address of an alias that exists for the domain at My Account Domains. Password ************************ Alias-specific generated password.

Important notes:

Each Reminders list is a separate calendar - When you create a new list in Apple Reminders, it creates a new calendar on the CalDAV server
Thunderbird users - You'll need to manually subscribe to each calendar/list you want to sync, or use the calendar home URL: https://caldav.forwardemail.net/dav/your-email@domain.com/
Apple users - Calendar discovery happens automatically, so all your calendars and lists will appear in Calendar.app and Reminders.app
Unified calendars - All calendars support both events and tasks, giving you flexibility in how you organize your data

Question 57

Do you support contacts (CardDAV)?

Accepted Answer

Yes, as of June 12, 2025 we have added this feature. Our server is carddav.forwardemail.net and is also monitored on our status page.

It supports both IPv4 and IPv6 and is available over port 443 (HTTPS).

Login Example Description Username user@example.com Email address of an alias that exists for the domain at My Account Domains. Password ************************ Alias-specific generated password.

In order to use contacts support, the user must be the email address of an alias that exists for the domain at My Account Domains – and the password must be an alias-specific generated password.

Question 58

Do you support sending email with SMTP?

Accepted Answer

Yes, as of May 2023 we support sending email with SMTP as an add-on for all paid users.

Important: Please ensure you have read our Terms, Privacy Policy, and Outbound SMTP Limits – your use is considered acknowledgement and agreement.

Important: If you are using Gmail, then refer to our Send Mail As with Gmail guide. If you are a developer, then refer to our email API docs.

Go to My Account Domains Settings Outbound SMTP Configuration and follow setup instructions
Create a new alias for your domain under My Account Domains Aliases (e.g. hello@example.com)
Click on Generate Password next to the newly created alias. Copy to your clipboard and securely store the generated password shown on the screen.
Using your preferred email application, add or configure an account with your newly created alias (e.g. hello@example.com)

Tip: We recommend our official Forward Email apps for macOS, Windows, Linux, Android, and iOS — they come pre-configured for your encrypted mailboxes, calendars, and contacts. You can also use Thunderbird, Thunderbird Mobile, Apple Mail, or an open-source and privacy-focused alternative.
When prompted for SMTP server name, enter smtp.forwardemail.net
When prompted for SMTP server port, enter 465 (SSL/TLS) – see alternate SMTP ports if necessary

Tip: If you are using Thunderbird, then ensure "Connection security" is set to "SSL/TLS" and Authentication method is set to "Normal password".
When prompted for SMTP server password, paste the password from Generate Password in step 3 above
Save your settings and send your first test email – if you are having issues, then please contact us

Important: Please note that in order to maintain IP reputation and ensure deliverability, we have a manual review process on a per-domain basis for outbound SMTP approval. This typically takes less than 24 hours, with most requests being honored within 1-2 hours. In the near future we aim to make this process instant with additional spam controls and alerting. This process ensures that your emails reach the inbox and your messages don't get marked as spam.

Congratulations! You've successfully completed all steps.

Question 59

Do you support OpenPGP/MIME, end-to-end encryption ("E2EE"), and Web Key Directory ("WKD")?

Accepted Answer

Yes, we support OpenPGP, end-to-end encryption ("E2EE"), and the discovery of public keys using Web Key Directory ("WKD"). You can configure OpenPGP using keys.openpgp.org or self-host your own keys (refer to this gist for WKD server setup).

WKD lookups are cached for 1 hour to ensure timely email delivery → therefore if you add, change, or remove your WKD key, then please email us at support@forwardemail.net with your email address in order for us to manually purge the cache.
We support PGP encryption for messages that are forwarded via WKD lookup or using an uploaded PGP key on our interface.
Uploaded keys take prevalance as long as the PGP checkbox is enabled/checked.
Messages sent to webhooks are not currently encrypted with PGP.
If you have multiple aliases that match for a given forwarding address (e.g. regex/wildcard/exact combo) and if more than one of these contains an uploaded PGP key and has PGP checked → then we will send you an error alert email and will not encrypt the message with your uploaded PGP key. This is very rare and usually only applies to advanced users with complex alias rules.
PGP encryption will not be applied to email forwarding through our MX servers if the sender had a DMARC policy of reject. If you require PGP encryption on all mail then we suggest to use our IMAP service and configure your PGP key for your alias for inbound mail.
On our paid plans (Enhanced Protection and Team), you can disable WKD lookup on a per-alias basis. Navigate to your alias settings and check the "Disable WKD Lookup" option. When disabled, inbound emails forwarded to that alias will not be encrypted via WKD even if a public key is published for the recipient. This is also available via the API using the has_wkd_disabled field.

You can validate your Web Key Directory setup at https://wkd.chimbosonic.com/ (open-source) or https://www.webkeydirectory.com/ (proprietary).

Automatic Encryption: If you are using our outbound SMTP service and sending unencrypted messages, then we will automatically attempt to encrypt messages on a per-recipient basis using Web Key Directory ("WKD").

Important: You must follow all of the following steps in order to enable OpenPGP for your custom domain name.

Congratulations! You've successfully completed all steps.

Question 60

Do you support S/MIME encryption?

Accepted Answer

Yes, we support S/MIME (Secure/Multipurpose Internet Mail Extensions) encryption as defined in RFC 8551. S/MIME provides end-to-end encryption using X.509 certificates, which is widely supported by enterprise email clients.

We support both RSA and ECC (Elliptic Curve Cryptography) certificates:

RSA certificates: 2048-bit minimum, 4096-bit recommended
ECC certificates: P-256, P-384, and P-521 NIST curves

To configure S/MIME encryption for your alias:

Obtain an S/MIME certificate from a trusted Certificate Authority (CA) or generate a self-signed certificate for testing.

Tip: Free S/MIME certificates are available from providers like Actalis or Actalis Free S/MIME.
Export your certificate in PEM format (the public certificate only, not the private key).
Go to My Account Domains Aliases (e.g. hello@example.com) Edit S/MIME and upload your public certificate.
Once configured, all incoming emails to your alias will be encrypted using your S/MIME certificate before being stored or forwarded.

Note: S/MIME encryption is applied to incoming messages that are not already encrypted. If a message is already encrypted with OpenPGP or S/MIME, it will not be re-encrypted.

Important: S/MIME encryption will not be applied to email forwarding through our MX servers if the sender had a DMARC policy of reject. If you require S/MIME encryption on all mail then we suggest to use our IMAP service and configure your S/MIME certificate for your alias for inbound mail.

The following email clients have built-in S/MIME support:

Email Client Platform Notes Apple Mail macOS Built-in S/MIME support. Go to Mail > Preferences > Accounts > your account > Trust to configure certificates. Apple Mail iOS Built-in S/MIME support. Go to Settings > Mail > Accounts > your account > Advanced > S/MIME to configure. Microsoft Outlook Windows Built-in S/MIME support. Go to File > Options > Trust Center > Trust Center Settings > Email Security to configure. Microsoft Outlook macOS Built-in S/MIME support. Go to Tools > Accounts > Advanced > Security to configure. Thunderbird Desktop Built-in S/MIME support. Go to Account Settings > End-To-End Encryption > S/MIME to configure. GNOME Evolution Desktop Built-in S/MIME support. Go to Edit > Preferences > Mail Accounts > your account > Security to configure. KMail Desktop Built-in S/MIME support. Go to Settings > Configure KMail > Identities > your identity > Cryptography to configure.

Congratulations! You've successfully configured S/MIME encryption for your alias.

Question 61

Do you support Sieve email filtering?

Accepted Answer

Yes. Forward Email supports server-side Sieve filtering based on RFC 5228. Scripts filter incoming messages before mailbox delivery. A script is rejected if it requests an unavailable capability or uses an extension without declaring it in require.

The complete, implementation-backed capability list and RFC notes are available in the Sieve protocol documentation.

Available Sieve capabilities

Category Capabilities and behavior Core language keep, discard, stop, conditional blocks, and the base address, header, exists, size, and boolean tests. Delivery fileinto, copy, redirect, mailbox for fileinto :create, and special-use for standard-folder :specialuse mapping and specialuse_exists. Tests and comparisons envelope, body, date, index, regex, subaddress, relational, i;ascii-casemap, and i;octet. State and variables variables, imap4flags, duplicate, and ihave. Actions and responses reject, ereject, vacation, vacation-seconds, and enotify using mailto:. The legacy declaration require "notify" is accepted as an input alias for enotify, but enotify is the advertised capability. Message processing editheader, environment, and mime, including foreverypart, break, extracttext, and replace.

redirect is delivered through the normal outbound queue. It is subject to the configured redirect-domain policy, denylist checks, and rate limits. editheader cannot modify protected authentication or delivery-routing headers.

Features not supported

Feature Reason enclose Creating a new message that encloses the original message is not implemented. mailboxexists Forward Email does not make live IMAP mailbox-state queries. fileinto :create remains available through mailbox. include Global and included script storage is not available. mboxmetadata / servermetadata IMAP METADATA integration is not available. fcc Sent-mail filing integration is not available. encoded-character The ${hex:...} syntax is not implemented. External lists valid_ext_list and other external-list operations are not available.

Example Sieve scripts

File newsletters into a folder:

require ["fileinto"]; if header :contains "List-Id" "newsletter" { fileinto "Newsletters"; }

Auto-reply when on vacation:

require ["vacation", "vacation-seconds"]; vacation :seconds 604800 :subject "Out of Office" "I am currently out of the office and will respond when I return.";

Create a folder when filing a message:

require ["fileinto", "imap4flags", "mailbox"]; if address :is "from" "boss@example.com" { fileinto :create :flags ["\Flagged"] "Important"; }

Redirect a message:

require ["redirect"]; if header :contains "Subject" "invoice" { redirect "recipient@example.com"; }

Managing Sieve scripts

You can manage Sieve scripts in several ways:

Note: Sieve filtering is applied to incoming messages before mailbox delivery. Scripts are executed in priority order, and the first matching action determines how the message is handled.

Security: Redirects are checked against configured policy and rate limits. Vacation responses and notifications are rate-limited to prevent abuse.

Question 62

Do you support MTA-STS?

Accepted Answer

Yes, as of March 2, 2023 we support MTA-STS. You can use this template if you wish to enable it on your domain.

Our configuration can be found publicly on GitHub at https://github.com/forwardemail/mta-sts.forwardemail.net.

Question 63

Do you support passkeys and WebAuthn?

Accepted Answer

Yes! As of December 13, 2023 we have added support for passkeys due to high demand.

Passkeys allow you to securely log in without requiring a password and two-factor authentication.

You can validate your identity with touch, facial recognition, device-based password, or PIN.

We allow you to manage up to 30 passkeys at once, so that you can log in with all of your devices with ease.

Learn more about passkeys at the following links:

Question 64

Is two-factor authentication (2FA) supported?

Accepted Answer

Yes, for logging into your account — including webmail — via one-time passcodes, backed by recovery keys.

2FA applies to your account login itself, not to IMAP, SMTP, POP3, CalDAV, or CardDAV connections from third-party clients (Thunderbird, Apple Mail, etc.) — those authenticate with an alias-specific generated password instead, so there isn't currently a 2FA-equivalent standard for that class of client. If you'd like to see that change, a GitHub feature request is the best way to make the case for it.

Typ	Värdnamn	Protokoll	Portar
IMAP	`imap.forwardemail.net`	SSL/TLS Föredras	`993` och `2993`
SMTP	`smtp.forwardemail.net`	SSL/TLS Rekommenderas	`465` och `2465` för SSL/TLS (rekommenderas) eller `587`, `2587`, `2525` och `25` för STARTTLS

Format	Extension	Beskrivning
`sqlite`	`.sqlite`	Krypterad rå `sqlite`-ögonblicksbild som innehåller poster för brevlåda, kontakter, kalender och kalenderhändelser; standard för automatisk IMAP-säkerhetskopiering i `.sqlite`.
`mbox`	`.zip`	Lösenordsskyddad `.zip` som innehåller `mbox`-filer för brevlåda samt mapparna `Contacts` (VCF) och `Calendars` (ICS).
`eml`	`.zip`	Lösenordsskyddad `.zip` som innehåller enskilda `.eml`-filer i `eml`-format samt mapparna `Contacts` (VCF) och `Calendars` (ICS).

Flagga	Beskrivning
`--path <path>`	Sökväg till den krypterade SQLite-säkerhetskopian
`--password <pass>`	IMAP/alias-lösenord för dekryptering
`--output <path>`	Utdata-sökväg för ZIP-filen (standard: autogenererad med ISO 8601-tidsstämpel)
`--help`	Visa hjälpmelding

Registrar	Steg för konfiguration
1&1	Logga in Domain Center (Välj din domän) Redigera DNS-inställningar
Amazon Route 53	Logga in Hosted Zones (Välj din domän)
Aplus.net	Logga in My Servers Domain Management DNS Manager
Bluehost	FÖR ROCK: Logga in Domains (Klicka på ▼-ikonen bredvid hantera) DNS FÖR LEGACY: Logga in Domains Zone editor (Välj din domän)
Cloudflare	Logga in DNS
DNS Made Easy	Logga in DNS (Välj din domän)
DNSimple	Logga in (Välj din domän) DNS Hantera
Digital Ocean	Logga in Networking Domains (Välj din domän) More Manage Domain
Domain.com	Logga in I kortvy, klicka på hantera på din domän I listvy, klicka på kugghjulsikonen DNS & Nameservers DNS Records
Domains.com Titta	Logga in (Välj din domän) Hantera (klicka på kugghjulsikonen) Klicka på DNS & Nameservers i vänstermenyn
DreamHost	Logga in Panel Domains Manage Domains DNS
Dyn	Logga in Overview Manage Simple Editor Records
Gandi	Logga in (Välj din domän) Management Redigera zonen
GoDaddy Titta	Logga in Manage My Domains (Välj din domän) Manage DNS
Google Domains Titta	Logga in (Välj din domän) Konfigurera DNS
Namecheap Titta	Logga in Domain List (Välj din domän) Hantera Advanced DNS
Netlify	Logga in (Välj din domän) Setup Netlify DNS
Network Solutions	Logga in Account Manager My Domain Names (Välj din domän) Hantera Ändra vart domänen pekar Advanced DNS
Shopify Titta	Logga in Managed Domains (Välj din domän) DNS-inställningar
Squarespace	Logga in Hemmeny Inställningar Domäner (Välj din domän) Avancerade inställningar Anpassade poster
Vercel's Now	Använder "now" CLI `now dns add [domain] '@' MX [record-value] [priority]`
Weebly	Logga in Domänsida (Välj din domän) DNS
Wix	Logga in Domänsida (Klicka på -ikonen) Välj Hantera DNS-poster
eNom	Logga in Domäner Mina domäner
Övrigt	Viktigt: Ser du inte namnet på din registrator här? Sök helt enkelt på Internet efter "hur ändrar man DNS-poster på $REGISTRAR" (ersätt $REGISTRAR med namnet på din registrator – t.ex. "hur ändrar man DNS-poster på GoDaddy" om du använder GoDaddy).

Namn/Värd/Alias	TTL	Typ	Prioritet	Svar/Värde
"@", ".", eller tomt	3600	MX	0	`mx1.forwardemail.net`
"@", ".", eller tomt	3600	MX	0	`mx2.forwardemail.net`

Kund	Fallstudie
U.S. Naval Academy	📄 Fallstudie
Canonical	📄 Fallstudie
Netflix Games
The Linux Foundation	📄 Fallstudie
The PHP Foundation
Fox News Radio
Disney Ad Sales
jQuery	📄 Fallstudie
LineageOS
Ubuntu	📄 Fallstudie
Kubuntu	📄 Fallstudie
Lubuntu	📄 Fallstudie
The University of Cambridge	📄 Fallstudie
The University of Maryland	📄 Fallstudie
The University of Washington	📄 Fallstudie
Tufts University	📄 Fallstudie
Swarthmore College	📄 Fallstudie
Government of South Australia
Government of Dominican Republic
Fly.io
RCD Hotels
Isaac Z. Schlueter (npm)	📄 Fallstudie
David Heinemeier Hansson (Ruby on Rails)

Verktygsnamn	URL	Typ
Cloudflare Domain Categorization Feedback	https://radar.cloudflare.com/domains/feedback	Kategorisering
Spamhaus IP and Domain Reputation Checker	https://check.spamhaus.org/	DNSBL
Cisco Talos IP and Domain Reputation Center	https://talosintelligence.com/reputation_center	Rykte
Barracuda IP and Domain Reputation Lookup	https://www.barracudacentral.org/lookups/lookup-reputation	DNSBL
MX Toolbox Blacklist Check	https://mxtoolbox.com/blacklists.aspx	Svartlista
Google Postmaster Tools	https://www.gmail.com/postmaster/	Rykte
Yahoo Sender Hub	https://senders.yahooinc.com/	Rykte
MultiRBL.valli.org Blacklist Check	https://multirbl.valli.org/lookup/	DNSBL
Sender Score	https://senderscore.org/act/blocklist-remover/	Rykte
Invaluement	https://www.invaluement.com/lookup/	DNSBL
SURBL	https://www.surbl.org/	DNSBL
SpamCop	https://www.spamcop.net/bl.shtml	DNSBL
UCEPROTECT's Levels 1, 2, and 3	https://www.uceprotect.net/en/rblcheck.php	DNSBL
UCEPROTECT's backscatterer.org	https://www.backscatterer.org/	Backscatter-skydd
UCEPROTECT's whitelisted.org	https://www.whitelisted.org/ (requires a fee)	DNSWL

Leverantör	Borttagningsformulär / Kontakt	Noteringar
Google/Gmail	https://support.google.com/mail/contact/bulk_send_new	Kontaktformulär för massändare
Microsoft (Outlook/Office 365/Hotmail)	https://sender.office.com	Office 365 IP-borttagningsportal
Yahoo/AOL/Verizon	https://senders.yahooinc.com/	Yahoo Sender Hub
Apple/iCloud	https://ipcheck.proofpoint.com/	Apple använder Proofpoint för IP-rykte
Proofpoint	https://ipcheck.proofpoint.com/	Proofpoint IP-kontroll och borttagning
Barracuda Networks	https://www.barracudacentral.org/lookups/lookup-reputation	Barracuda ryktekontroll och borttagning
Cloudmark	https://csi.cloudmark.com/en/reset/	Cloudmark CSI återställningsbegäran
GoDaddy/SecureServer	https://unblock.secureserver.net	GoDaddy IP-borttagningsformulär
Comcast/Xfinity	https://spa.xfinity.com/report	Comcast IP-borttagningsbegäran
Charter/Spectrum	https://www.spectrum.net/support/internet/understanding-email-error-codes	Kontakta Spectrum support för borttagning
AT&T	`abuse_rbl@abuse-att.net`	E-post för borttagningsbegäran
Cox Communications	`unblock.request@cox.net`	E-post för borttagningsbegäran
CenturyLink/Lumen	`abuse@centurylink.com`	Använder Cloudfilter
Windstream	`abuse@windstream.net`	E-post för borttagningsbegäran
t-online.de (Tyskland)	`tobr@rx.t-online.de`	E-post för borttagningsbegäran
Orange France	https://postmaster.orange.fr/	Använd kontaktformulär eller e-post `abuse@orange.fr`
GMX	https://postmaster.gmx.net/en/contact	GMX postmaster kontaktformulär
Mail.ru	https://postmaster.mail.ru/	Mail.ru postmasterportal
Yandex	https://postmaster.yandex.ru/	Yandex postmasterportal
QQ Mail (Tencent)	https://open.mail.qq.com/	QQ Mail whitelist-ansökan (kinesiska)
Netease (163.com)	https://mail.163.com/postmaster/	Netease postmasterportal
Alibaba/Aliyun/HiChina	https://www.alibabacloud.com/help/en/alibaba-mail/	Kontakt via Alibaba Cloud-konsol
Amazon SES	https://docs.aws.amazon.com/ses/latest/dg/faqs-dnsbls.html	AWS SES-konsol > Borttagning från svartlista
SendGrid	https://support.sendgrid.com/	Kontakta SendGrid support
Mimecast	https://community.mimecast.com/	Använder tredjeparts RBLs - kontakta specifik RBL
Fastmail	https://www.fastmail.com/support/	Kontakta Fastmail support
Zoho	https://help.zoho.com/portal/en/kb/campaigns/faqs/campaign-review/articles/how-do-i-delist-my-ip-address	Kontakta Zoho support
ProtonMail	https://proton.me/support/contact	Kontakta Proton support
Tutanota	https://tutanota.com/support	Kontakta Tutanota support
Hushmail	https://www.hushmail.com/support/	Kontakta Hushmail support
Mailbox.org	https://mailbox.org/en/support	Kontakta Mailbox.org support
Posteo	https://posteo.de/en/site/contact	Kontakta Posteo support
DuckDuckGo Email	https://duckduckgo.com/email/support	Kontakta DuckDuckGo support
Sonic.net	https://www.sonic.com/support	Kontakta Sonic support
Telus	https://www.telus.com/en/support	Kontakta Telus support
Vodafone Germany	https://www.vodafone.de/hilfe/	Kontakta Vodafone support
Xtra (Spark NZ)	https://www.spark.co.nz/help/	Kontakta Spark NZ support
UOL/BOL (Brasilien)	https://ajuda.uol.com.br/	Kontakta UOL support (portugisiska)
Libero (Italien)	https://aiuto.libero.it/	Kontakta Libero support (italienska)
Telenet (Belgien)	https://www2.telenet.be/en/support/	Kontakta Telenet support
Facebook/WhatsApp	https://www.facebook.com/business/help	Kontakta Facebook business support
LinkedIn	https://www.linkedin.com/help/linkedin	Kontakta LinkedIn support
Groups.io	https://groups.io/helpcenter	Kontakta Groups.io support
Earthlink/Vade Secure	https://sendertool.vadesecure.com/en/	Vade Secure sändarverktyg
Cloudflare Email Security	https://www.cloudflare.com/products/zero-trust/email-security/	Kontakta Cloudflare support
Hornetsecurity/Expurgate	https://www.hornetsecurity.com/	Kontakta Hornetsecurity support
SpamExperts/Antispamcloud	https://www.spamexperts.com/	Kontakta via hosting-leverantör
Mail2World	https://www.mail2world.com/support/	Kontakta Mail2World support

Namn	Format	Plattform	GitHub URL
MBox Viewer	Mbox	Windows	https://github.com/eneam/mboxviewer
mbox-web-viewer	Mbox	Alla plattformar	https://github.com/PHMRanger/mbox-web-viewer
EmlReader	EML	Windows	https://github.com/ayamadori/EmlReader
Email viewer	EML	VSCode	https://github.com/joelharkes/vscode_email_viewer
eml-reader	EML	Alla plattformar	https://github.com/s0ph1e/eml-reader
Dessutom, om du behöver konvertera en Mbox-fil till en EML-fil, kan du använda https://github.com/noelmartinon/mboxzilla.

E-postleverantör	Exportformat	Exportinstruktioner
Gmail	MBOX	https://takeout.google.com/settings/takeout/custom/gmail
Outlook	PST	Tips: Om du använder Outlook (PST exportformat), kan du helt enkelt följa instruktionerna under "Other" nedan. Vi har dock tillhandahållit länkar nedan för att konvertera PST till MBOX/EML-format baserat på ditt operativsystem: Zinkuba för Windows (GitHub) readpst för Windows cygwin – (t.ex. `readpst -u -o $OUT_DIR $IN_DIR` där du ersätter `$OUT_DIR` och `$IN_DIR` med sökvägarna för utdata- respektive indatakatalog). readpst för Ubuntu/Linux – (t.ex. `sudo apt-get install readpst` och sedan `readpst -u -o $OUT_DIR $IN_DIR`, där du ersätter `$OUT_DIR` och `$IN_DIR` med sökvägarna för utdata- respektive indatakatalog). readpst för macOS (via brew) – (t.ex. `brew install libpst` och sedan `readpst -u -o $OUT_DIR $IN_DIR`, där du ersätter `$OUT_DIR` och `$IN_DIR` med sökvägarna för utdata- respektive indatakatalog). PST Converter för Windows (GitHub)
Apple Mail	MBOX	https://support.apple.com/guide/mail/import-or-export-mailboxes-mlhlp1030/mac#apd37a3190755974
Fastmail	EML	https://www.fastmail.help/hc/en-us/articles/360060590573-Download-all-your-data#downloadmail
Proton Mail	MBOX/EML	https://proton.me/support/export-emails-import-export-app
Tutanota	EML	https://github.com/crepererum-oss/tatutanatata
Gandi	EML	https://docs.gandi.net/en/gandimail/common_operations/backup_email.html#contents
Zoho	EML	https://www.zoho.com/mail/help/import-export-emails.html#alink2
Other	Använd Thunderbird	Ställ in ditt befintliga e-postkonto i Thunderbird och använd sedan tillägget ImportExportTools NG för att exportera och importera din e-post. Du kan också eventuellt bara kopiera/klistra in eller dra/släppa e-postmeddelanden mellan konton.

Plattform	Arkitektur	Fil
Linux	x64	`convert-sqlite-to-eml-linux-x64`
Linux	arm64	`convert-sqlite-to-eml-linux-arm64`
macOS	Apple Silicon	`convert-sqlite-to-eml-darwin-arm64`
Windows	x64	`convert-sqlite-to-eml-win-x64.exe`

Namn/Värd/Alias	TTL	Typ	Svar/Värde
"@", ".", eller tomt	3600	TXT	`forward-email=hello:user@gmail.com,support:user@gmail.com`
"@", ".", eller tomt	3600	TXT	`forward-email=help:user@gmail.com,foo:user@gmail.com`
"@", ".", eller tomt	3600	TXT	`forward-email=orders:user@gmail.com,baz:user@gmail.com`
"@", ".", eller tomt	3600	TXT	`forward-email=info:user@gmail.com,beep:user@gmail.com`
"@", ".", eller tomt	3600	TXT	`forward-email=errors:user@gmail.com,boop:user@gmail.com`

Inloggning	Exempel	Beskrivning
Användarnamn	`user@example.com`	E-postadress för ett alias som finns för domänen på Mitt konto Domäner.
Lösenord	`************************`	Alias-specifikt genererat lösenord.

E-postklient	Plattform	Rekommenderad plugin	Noteringar
Thunderbird	Skrivbord	Konfigurera OpenPGP i Thunderbird	Thunderbird har inbyggt stöd för OpenPGP.
Gmail	Webbläsare	Mailvelope eller FlowCrypt (proprietär licens)	Gmail stödjer inte OpenPGP, men du kan ladda ner den öppna källkodspluginen Mailvelope eller FlowCrypt.
Apple Mail	macOS	Free-GPGMail	Apple Mail stödjer inte OpenPGP, men du kan ladda ner den öppna källkodspluginen Free-GPGMail.
Apple Mail	iOS	PGPro eller FlowCrypt (proprietär licens)	Apple Mail stödjer inte OpenPGP, men du kan ladda ner den öppna källkodspluginen PGPro eller FlowCrypt.
Outlook	Windows	gpg4win	Outlooks skrivbords-e-postklient stödjer inte OpenPGP, men du kan ladda ner den öppna källkodspluginen gpg4win.
Outlook	Webbläsare	Mailvelope eller FlowCrypt (proprietär licens)	Outlooks webbaserade e-postklient stödjer inte OpenPGP, men du kan ladda ner den öppna källkodspluginen Mailvelope eller FlowCrypt.
Android	Mobil	OpenKeychain eller FlowCrypt	Android e-postklienter såsom Thunderbird Mobile och FairEmail stödjer båda den öppna källkodspluginen OpenKeychain. Du kan alternativt använda den öppna källkodspluginen (proprietär licensiering) FlowCrypt.
Google Chrome	Webbläsare	Mailvelope eller FlowCrypt (proprietär licens)	Du kan ladda ner den öppna källkods webbläsartillägget Mailvelope eller FlowCrypt.
Mozilla Firefox	Webbläsare	Mailvelope eller FlowCrypt (proprietär licens)	Du kan ladda ner den öppna källkods webbläsartillägget Mailvelope eller FlowCrypt.
Microsoft Edge	Webbläsare	Mailvelope	Du kan ladda ner den öppna källkods webbläsartillägget Mailvelope.
Brave	Webbläsare	Mailvelope eller FlowCrypt (proprietär licens)	Du kan ladda ner den öppna källkods webbläsartillägget Mailvelope eller FlowCrypt.
Balsa	Skrivbord	Konfigurera OpenPGP i Balsa	Balsa har inbyggt stöd för OpenPGP.
KMail	Skrivbord	Konfigurera OpenPGP i KMail	KMail har inbyggt stöd för OpenPGP.
GNOME Evolution	Skrivbord	Konfigurera OpenPGP i Evolution	GNOME Evolution har inbyggt stöd för OpenPGP.
Terminal	Skrivbord	Konfigurera gpg i Terminal	Du kan använda det öppna källkodsverktyget gpg kommandorad för att generera en ny nyckel från kommandoraden.

E-postklient	Plattform	Noteringar
Apple Mail	macOS	Inbyggt stöd för S/MIME. Gå till Mail > Inställningar > Konton > ditt konto > Tillit för att konfigurera certifikat.
Apple Mail	iOS	Inbyggt stöd för S/MIME. Gå till Inställningar > Mail > Konton > ditt konto > Avancerat > S/MIME för att konfigurera.
Microsoft Outlook	Windows	Inbyggt stöd för S/MIME. Gå till Arkiv > Alternativ > Trust Center > Inställningar för Trust Center > E-postsäkerhet för att konfigurera.
Microsoft Outlook	macOS	Inbyggt stöd för S/MIME. Gå till Verktyg > Konton > Avancerat > Säkerhet för att konfigurera.
Thunderbird	Skrivbord	Inbyggt stöd för S/MIME. Gå till Kontoinställningar > End-To-End Encryption > S/MIME för att konfigurera.
GNOME Evolution	Skrivbord	Inbyggt stöd för S/MIME. Gå till Redigera > Inställningar > E-postkonton > ditt konto > Säkerhet för att konfigurera.
KMail	Skrivbord	Inbyggt stöd för S/MIME. Gå till Inställningar > Konfigurera KMail > Identiteter > din identitet > Kryptografi för att konfigurera.

Kategori	Funktioner och beteende
Kärnspråk	`keep`, `discard`, `stop`, villkorsblock, och grundläggande tester `address`, `header`, `exists`, `size` och booleska tester.
Leverans	`fileinto`, `copy`, `redirect`, `mailbox` för `fileinto :create`, och `special-use` för standardmappens `:specialuse`-mappning och `specialuse_exists`.
Tester och jämförelser	`envelope`, `body`, `date`, `index`, `regex`, `subaddress`, `relational`, `i;ascii-casemap`, och `i;octet`.
Tillstånd och variabler	`variables`, `imap4flags`, `duplicate`, och `ihave`.
Åtgärder och svar	`reject`, `ereject`, `vacation`, `vacation-seconds`, och `enotify` med `mailto:`. Den äldre deklarationen `require "notify"` accepteras som en indataalias för `enotify`, men `enotify` är den annonserade funktionen.
Meddelandehantering	`editheader`, `environment`, och `mime`, inklusive `foreverypart`, `break`, `extracttext`, och `replace`.

Funktion	Orsak
`enclose`	Att skapa ett nytt meddelande som kapslar in originalmeddelandet är inte implementerat.
`mailboxexists`	Forward Email gör inga live IMAP-förfrågningar om brevlådestatus. `fileinto :create` förblir tillgängligt via `mailbox`.
`include`	Global och inkluderad skriptlagring är inte tillgänglig.
`mboxmetadata` / `servermetadata`	IMAP METADATA-integration är inte tillgänglig.
`fcc`	Integration för arkivering av skickad post är inte tillgänglig.
`encoded-character`	Syntaxen `${hex:...}` är inte implementerad.
Externa listor	`valid_ext_list` och andra operationer för externa listor är inte tillgängliga.

Aliasnamn	Effekt	Test
`/^(linus\|torvalds)$/`	E-post till `linus@example.com` eller `torvalds@example.com`	(visa test på RegExr)
`/^24highst(reet)$/`	E-post till `24highst@example.com` eller `24highstreet@example.com`	(visa test på RegExr)

Token	Beskrivning
`%SUBDOMAIN%`	Underdomänens etikett(er) under rotdomänen för den inkommande mottagaren. Till exempel, för `team@sales.example.com` (rot `example.com`) är detta `sales`, och för `x@a.b.example.com` är detta `a.b`. För rot-/apex-domänen är det en tom sträng.
`%HOST%`	Den fullständiga värden (domänen) för den inkommande mottagaren. Till exempel, för `team@sales.example.com` är detta `sales.example.com`.

Level	Scope	Default Limit	Description
Per-alias	Enskilt alias	Ingen (använder domängränsen)	Valfritt. Om ett alias har en anpassad `smtp_limit` inställd kontrolleras den först.
Per-domain	Alla e-postmeddelanden skickade från en domän under en dag	300/dag	Räknar alla utgående e-postmeddelanden från varje alias på domänen.
Per-user	Alla e-postmeddelanden skickade av ett användarkonto under en dag	300/dag	Förhindrar kringgående genom att radera och återskapa alias eller domäner.

Protokoll	Värdnamn	Portar	IPv4	IPv6	Noteringar
`SSL/TLS` Föredras	`smtp.forwardemail.net`	`465`, `2465`	✅	✅	Modern TLS 1.2+ (Rekommenderas)
`TLS` (STARTTLS)	`smtp.forwardemail.net`	`587`, `2587`, `2525`, `25`	✅	✅	Stöds (föredra SSL/TLS-port `465`)
`SSL/TLS` Endast Legacy	`smtp.forwardemail.net`	`2455`	✅	✅	⚠️ TLS 1.0 endast för gamla enheter
`TLS` (STARTTLS) Endast Legacy	`smtp.forwardemail.net`	`2555`	✅	✅	⚠️ TLS 1.0 endast för gamla enheter
Inloggning	Exempel	Beskrivning
---------	-------------------------	------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Användarnamn	`user@example.com`	E-postadress för ett alias som finns för domänen på Mitt konto Domäner.
Lösenord	`************************`	Alias

Protokoll	Värdnamn	Portar	IPv4	IPv6
`SSL/TLS` Föredras	`pop3.forwardemail.net`	`995`, `2995`	✅	✅
Inloggning	Exempel	Beskrivning
---------	--------------------------	------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Användarnamn	`user@example.com`	E-postadress för ett alias som finns för domänen på Mitt konto Domäner.
Lösenord	`************************`	Alias-specifikt genererat lösenord.

Typ	Namn/Värd	Mål/Värde
CNAME	`autoconfig`	`autoconfig.forwardemail.net`
CNAME	`autodiscover`	`autodiscover.forwardemail.net`

Typ	Namn/Värd	Prioritet	Vikt	Port	Mål/Värde	Syfte
SRV	`_imaps._tcp`	0	1	993	`imap.forwardemail.net`	IMAP över SSL/TLS (föredras)
SRV	`_imap._tcp`	0	0	0	`.`	Klartext IMAP inaktiverat
SRV	`_submissions._tcp`	0	1	465	`smtp.forwardemail.net`	SMTP-inlämning (SSL/TLS, rekommenderas)
SRV	`_submission._tcp`	5	1	587	`smtp.forwardemail.net`	SMTP-inlämning (STARTTLS)
SRV	`_pop3s._tcp`	10	1	995	`pop3.forwardemail.net`	POP3 över SSL/TLS
SRV	`_pop3._tcp`	0	0	0	`.`	Klartext POP3 inaktiverat
SRV	`_caldavs._tcp`	0	1	443	`caldav.forwardemail.net`	CalDAV över TLS (kalendrar)
SRV	`_caldav._tcp`	0	0	0	`.`	Klartext CalDAV inaktiverat
SRV	`_carddavs._tcp`	0	1	443	`carddav.forwardemail.net`	CardDAV över TLS (kontakter)
SRV	`_carddav._tcp`	0	0	0	`.`	Klartext CardDAV inaktiverat

Klient	E-post	CalDAV/CardDAV
Thunderbird	`autoconfig` CNAME- eller SRV-poster	`autoconfig` XML- eller SRV-poster (RFC 6764)
Apple Mail (macOS)	SRV-poster (RFC 6186)	SRV-poster (RFC 6764)
Apple Mail (iOS)	SRV-poster (RFC 6186)	SRV-poster (RFC 6764)
Microsoft Outlook	`autodiscover` CNAME eller `_autodiscover._tcp` SRV	Stöds inte
GNOME (Evolution)	SRV-poster (RFC 6186)	SRV-poster (RFC 6764)
KDE (KMail)	SRV-poster (RFC 6186)	SRV-poster (RFC 6764)
eM Client	`autoconfig` eller `autodiscover`	SRV-poster (RFC 6764)

Leverantör	Certifierad enligt ramverk för dataskydd	GDPR-efterlevnadssida
Cloudflare	✅ Ja	https://www.cloudflare.com/trust-hub/gdpr/
DataPacket	❌ Nej	https://www.datapacket.com/privacy-policy
DigitalOcean	❌ Nej	https://www.digitalocean.com/legal/gdpr
GitHub	✅ Ja	https://docs.github.com/en/site-policy/privacy-policies/github-data-protection-agreement
Vultr	❌ Nej	https://www.vultr.com/legal/eea-gdpr-privacy/

Funktion	Vad sparas	Lagringstid
Vidarebefordran av e‑post (ett alias som vidarebefordrar till en annan adress eller webhook)	Ingenting. Meddelandet behandlas helt i minnet och skickas vidare till destinationen; det skrivs aldrig till disk eller till en databas.	Ingen – meddelandet kasseras så snart leverans har försökts
SMTP‑felloggar (`4xx`/`5xx`‑svar)	SMTP‑felet, kuvertet och e‑posthuvudena. Inte meddelandetexten eller bilagor.	7 dagar (se Sparar ni felloggar)
Anti‑missbruks‑cachar (grålista, neklista, frekvensbegränsning)	Nycklar härledda från avsändar- och mottagaruppgifter (adresser, domäner, hashar), inget meddelandeinnehåll.	Upp till 30 dagar (se Har ni en grålista och Har ni en neklista)
Postlådelagring (IMAP/POP3/CalDAV/CardDAV, när aktiverat på ett alias)	Meddelanden, kontakter och kalendrar, i en individuellt krypterad SQLite‑postlåda som endast ditt lösenord kan öppna.	Tills du raderar meddelandet, aliaset, domänen eller kontot (se Hur exporterar och säkerhetskopierar jag min postlåda)
Utgående SMTP	Köposter för leverans och felrapportering. Meddelandetexter behålls som standard i 0 dagar efter lyckad leverans eller ett permanent fel; du kan höja detta till som mest 30 dagar per domän.	~30 dagar för köposter (se vår Integritetspolicy)

Fält	Värde
Underbiträde	Forward Email LLC
Registrerad i	State of Delaware, United States
Tjänst	Vidarebefordran av e‑post (inkommande MX) och, där det är aktiverat, krypterad postlådelagring (IMAP/POP3/CalDAV/CardDAV) samt utgående SMTP
Behandlade personuppgifter	E‑postadresser, kuvert- och rubrikmetadata samt meddelandeinnehåll under överföring (endast i minnet för vidarebefordran; krypterat i vila för postlådelagring)
Plats för behandling	United States (Denver, Colorado)
Lagringstid	Se Var behandlas och lagras inkommande e‑post för min domän, och hur länge
Överföringsmekanism	Så som anges på våra sidor Data Processing Agreement och GDPR
Våra underbiträden	Listade på vår GDPR-sida och i DPA (för närvarande Cloudflare, DataPacket, DigitalOcean, GitHub, Vultr, Stripe och PayPal)
EU‑representant (Art. 27)	Osano International Compliance Services Limited, Dublin, Ireland – fullständig adress på vår GDPR-sida
Representant i Storbritannien	Osano UK Compliance LTD, Belfast – fullständig adress på vår GDPR-sida
Personuppgiftsbiträdesavtal	https://forwardemail.net/dpa (accepteras tillsammans med våra Terms; en motundertecknad kopia tillhandahålls under Enterprise License)
Säkerhetskontakt	security@forwardemail.net

Hur kan vi hjälpa?

Kom igång snabbt

Introduktion

E-postklienter

Konfiguration

Testning

Konfiguration

Testning

Konfiguration

Testning

Installation

Konfiguration

Testning

Felsökning

Verktyg för kontroll av rykte och blocklistor

Formulär för borttagning av IP-adress per leverantör

Datahantering

Installation

Hur säkerhetskopior fungerar

Backup Formats

File Naming and Key Structure

Data Ownership and Deletion Policy

Security

Felmeddelanden

API

Installation

Användning

Output Format

How It Works

Email Configuration

Avancerade funktioner

Tillgängliga Sieve-funktioner

Funktioner som inte stöds

Exempel på Sieve-skript

Hantera Sieve-skript

Exempel för förbättrat integritetsskydd

Exempel för gratisplanen

Nödvändiga DNS-poster för wildcard-underdomäner

Ersättningstokens för underdomäner

Alternativ A: CNAME-poster (enklast)

Alternativ B: SRV-poster (direkt)

Vilka e-postklienter stödjer autoupptäckt?

Säkerhet

System- och tekniska detaljer

Konto och Fakturering

Ytterligare resurser

Fortfarande fastnat?

Gräns	Omfattning	Mängd
Daglig total	Alla tjänster sammanlagt (IMAP, POP3, SMTP, CalDAV, CardDAV)	50 GB
Per timme per tjänst	Per individuell tjänst (t.ex. IMAP nedladdning, SMTP uppladdning)	10 GB

Namn/Värd/Alias	TTL	Typ	Svar/Värde
"@", ".", eller tomt	3600	TXT	`forward-email=hello:user+a@gmail.com`
"@", ".", eller tomt	3600	TXT	`forward-email=hello:user+b@gmail.com`

Namn/Värd/Alias	TTL	Typ	Svar/Värde
"@", ".", eller tomt	3600	TXT	`forward-email=user+a@gmail.com`
@, ".", eller tomt	3600	TXT	`forward-email=user+b@gmail.com`