Q: What is Forward Email's history?

You can learn more about Forward Email on our About page .

Question 1

What is Forward Email?

Accepted Answer

Note

Forward Email is perfect for individuals, small businesses, and developers who want professional email addresses without the cost and maintenance of a full email hosting solution.

Forward Email is a fully featured email service provider and email hosting provider for custom domain names.

It's the only free and open-source service, and lets you use custom domain email addresses without the complexity of setting up and maintaining your own email server.

Our service forwards emails sent to your custom domain to your existing email account – and you can even use us as your dedicated email hosting provider.

Key features of Forward Email:

Custom Domain Email: Use professional email addresses with your own domain name
Free Tier: Basic email forwarding at no cost
Enhanced Privacy: We don't read your emails or sell your data
Open Source: Our entire codebase is available on GitHub
SMTP, IMAP, and POP3 Support: Full email sending and receiving capabilities
End-to-End Encryption: Support for OpenPGP/MIME
Custom Catch-All Aliases: Create unlimited email aliases

You can compare us to 56+ other email service providers on our Email Comparison page.

Tip

Learn more about Forward Email by reading our free Technical Whitepaper and reviewing our Security Audit by Cure53.

Question 2

Who uses Forward Email?

Accepted Answer

We provide email hosting and email forwarding service to 1.6+ million domains and these notable users:

Customer Case Study U.S. Naval Academy :page_facing_up: Case Study Canonical :page_facing_up: Case Study Netflix Games The Linux Foundation :page_facing_up: Case Study The PHP Foundation Fox News Radio Disney Ad Sales jQuery :page_facing_up: Case Study LineageOS Ubuntu :page_facing_up: Case Study Kubuntu :page_facing_up: Case Study Lubuntu :page_facing_up: Case Study The University of Cambridge :page_facing_up: Case Study The University of Maryland :page_facing_up: Case Study The University of Washington :page_facing_up: Case Study Tufts University :page_facing_up: Case Study Swarthmore College :page_facing_up: Case Study Government of South Australia Government of Dominican Republic Fly.io RCD Hotels Isaac Z. Schlueter (npm) :page_facing_up: Case Study David Heinemeier Hansson (Ruby on Rails)

Question 3

What is Forward Email's history?

Accepted Answer

You can learn more about Forward Email on our About page.

Question 4

How fast is this service?

Accepted Answer

Note

Our system is designed for speed and reliability, with multiple redundant servers to ensure your emails are delivered promptly.

Forward Email delivers messages with minimal delay, typically within seconds of receipt.

Performance metrics:

Average Delivery Time: Less than 5-10 seconds from receipt to forwarding (see our Time to Inbox "TTI" monitoring page)
Uptime: 99.9%+ service availability
Global Infrastructure: Servers strategically located for optimal routing
Automatic Scaling: Our system scales during peak email periods

We operate in real-time, unlike other providers which rely upon delayed queues.

We do not write to disk or store logs – with the exception of errors and outbound SMTP (see our Privacy Policy).

Everything is done in-memory and our source code is on GitHub.

Question 5

Thunderbird

Accepted Answer

Create a new alias and generate a password in your Forward Email dashboard
Open Thunderbird and go to Edit → Account Settings → Account Actions → Add Mail Account
Enter your name, Forward Email address, and password
Click Configure manually and enter:
- Incoming: IMAP, imap.forwardemail.net, port 993, SSL/TLS
- Outgoing: SMTP, smtp.forwardemail.net, port 465, SSL/TLS (recommended; port 587 with STARTTLS is also supported)
Click Done

Question 6

Microsoft Outlook

Accepted Answer

Create a new alias and generate a password in your Forward Email dashboard
Go to File → Add Account
Enter your Forward Email address and click Connect
Choose Advanced options and select Let me set up my account manually
Select IMAP and enter:
- Incoming: imap.forwardemail.net, port 993, SSL
- Outgoing: smtp.forwardemail.net, port 465, SSL/TLS (recommended; port 587 with STARTTLS is also supported)
- Username: Your full email address
- Password: Your generated password
Click Connect

Question 7

Apple Mail

Accepted Answer

Create a new alias and generate a password in your Forward Email dashboard
Go to Mail → Preferences → Accounts → +
Select Other Mail Account
Enter your name, Forward Email address, and password
For server settings, enter:
- Incoming: imap.forwardemail.net
- Outgoing: smtp.forwardemail.net
- Username: Your full email address
- Password: Your generated password
Click Sign In

Question 8

eM Client

Accepted Answer

Create a new alias and generate a password in your Forward Email dashboard
Open eM Client and go to Menu → Accounts → + Add Account
Click on Mail and then select Other
Enter your Forward Email address and click Next
Enter the following server settings:
- Incoming server: imap.forwardemail.net
- Outgoing server: smtp.forwardemail.net
Enter your full email address as the User name and your generated password as the Password for both incoming and outgoing servers.
eM Client will test the connection. Once it passes, click Next.
Enter your name and choose an account name.
Click Finish.

Question 9

Do you offer a webmail client?

Accepted Answer

Yes. Our official, open-source webmail client is available at mail.forwardemail.net — no installation required, just log in from any browser using an alias address and its generated password (the same credentials used for IMAP, SMTP, and POP3).

It launched in February 2026 and also supports CalDAV Scheduling Extensions (RFC 6638), DANE/TLSA (RFC 6698), and Domain Connect for 1-click DNS setup, with real-time push notifications for IMAP, CalDAV, and CardDAV delivered over WebSockets.

The source code is fully open-source and available on GitHub at github.com/forwardemail/mail.forwardemail.net.

Question 10

Do you have desktop and mobile apps?

Accepted Answer

Yes. Native apps are available for desktop and mobile, built from the same open-source project as our webmail client, and can all be downloaded from our download page:

Desktop: macOS (Apple Silicon and Intel), Windows (x64 and ARM64, as either an .exe or .msi installer), and Linux (AppImage, .deb, .rpm, and Snap — each for x64 and ARM64).
Mobile: Android (APK, with an alternate F-Droid build) and iOS.

All release builds are published on GitHub at github.com/forwardemail/mail.forwardemail.net/releases, and the download page lets you verify release checksums against SHA256SUMS.txt.

Question 11

Mobile Devices

Accepted Answer

For iOS:

Go to Settings → Mail → Accounts → Add Account → Other
Tap Add Mail Account and enter your details
For server settings, use the same IMAP and SMTP settings as above

For Android:

Go to Settings → Accounts → Add Account → Personal (IMAP)
Enter your Forward Email address and password
For server settings, use the same IMAP and SMTP settings as above

Question 12

Sendmail SMTP Relay Configuration

Accepted Answer

You can configure Sendmail to relay emails through Forward Email's SMTP servers. This is a common setup for legacy systems or applications that rely on Sendmail.

Estimated Setup Time: Less than 20 minutes

Important: This requires a paid plan with SMTP access enabled.

Configuration

Edit your sendmail.mc file, typically located at /etc/mail/sendmail.mc:
sudo nano /etc/mail/sendmail.mc
Add the following lines to define the smart host and authentication:
define(`SMART_HOST', `smtp.forwardemail.net')dnl define(`RELAY_MAILER_ARGS', `TCP $h 465')dnl define(`confAUTH_MECHANISMS', `EXTERNAL GSSAPI DIGEST-MD5 CRAM-MD5 LOGIN PLAIN')dnl FEATURE(`authinfo',`hash -o /etc/mail/authinfo.db')dnl
Create the authentication file /etc/mail/authinfo:
sudo nano /etc/mail/authinfo
Add your Forward Email credentials to the authinfo file:
AuthInfo:smtp.forwardemail.net "U:your-alias@yourdomain.com" "P:your-generated-password" "M:PLAIN"
Generate the authentication database and secure the files:
sudo makemap hash /etc/mail/authinfo < /etc/mail/authinfo sudo chmod 600 /etc/mail/authinfo /etc/mail/authinfo.db
Rebuild the Sendmail configuration and restart the service:
sudo make -C /etc/mail sudo systemctl restart sendmail

Testing

Send a test email to verify the configuration:

echo "Test email from Sendmail" | mail -s "Sendmail Test" recipient@example.com

Question 13

Exim4 SMTP Relay Configuration

Accepted Answer

Exim4 is a popular MTA on Debian-based systems. You can configure it to use Forward Email as a smarthost.

Estimated Setup Time: Less than 15 minutes

Important: This requires a paid plan with SMTP access enabled.

Configuration

Run the Exim4 configuration tool:
sudo dpkg-reconfigure exim4-config
Select the following options:
- General type of mail configuration: mail sent by smarthost; received via SMTP or fetchmail
- System mail name: your.hostname
- IP-addresses to listen on for incoming SMTP connections: 127.0.0.1 ; ::1
- Other destinations for which mail is accepted: (leave blank)
- Domains to relay mail for: (leave blank)
- IP address or host name of the outgoing smarthost: smtp.forwardemail.net::465
- Hide local mail name in outgoing mail? No
- Keep number of DNS-queries minimal (Dial-on-Demand)? No
- Delivery method for local mail: Mbox format in /var/mail/
- Split configuration into small files? No
Edit the passwd.client file to add your credentials:
sudo nano /etc/exim4/passwd.client
Add the following line:
smtp.forwardemail.net:your-alias@yourdomain.com:your-generated-password
Update the configuration and restart Exim4:
sudo update-exim4.conf sudo systemctl restart exim4

Testing

Send a test email:

echo "Test from Exim4" | mail -s "Exim4 Test" recipient@example.com

Question 14

msmtp SMTP Client Configuration

Accepted Answer

msmtp is a lightweight SMTP client that's useful for sending emails from scripts or command-line applications.

Estimated Setup Time: Less than 10 minutes

Important: This requires a paid plan with SMTP access enabled.

Configuration

Create or edit the msmtp configuration file at ~/.msmtprc:
nano ~/.msmtprc
Add the following configuration:
defaults auth on tls on tls_trust_file /etc/ssl/certs/ca-certificates.crt logfile ~/.msmtp.log account forwardemail host smtp.forwardemail.net port 465 tls_starttls off from your-alias@yourdomain.com user your-alias@yourdomain.com password your-generated-password account default : forwardemail
Set the correct permissions for the configuration file:
chmod 600 ~/.msmtprc

Testing

Send a test email:

echo "This is a test email from msmtp" | msmtp -a default recipient@example.com

Question 15

Command-line Email Clients

Accepted Answer

Popular command-line email clients like Mutt, NeoMutt, and Alpine can be configured to use Forward Email's SMTP servers for sending mail. The configuration will be similar to the msmtp setup, where you provide the SMTP server details and your credentials in the respective configuration files (.muttrc, .neomuttrc, or .pinerc).

Question 16

Windows Email Configuration

Accepted Answer

For Windows users, you can configure popular email clients like Microsoft Outlook and eM Client using the IMAP and SMTP settings provided in your Forward Email account. For command-line or scripting use, you can use PowerShell's Send-MailMessage cmdlet (though it is considered obsolete) or a lightweight SMTP relay tool like E-MailRelay.

Question 17

Postfix SMTP Relay Configuration

Accepted Answer

You can configure Postfix to relay emails through Forward Email's SMTP servers. This is useful for server applications that need to send emails.

Estimated Setup Time: Less than 15 minutes

Important: This requires a paid plan with SMTP access enabled.

Installation

Install Postfix on your server:

# Ubuntu/Debian sudo apt update && sudo apt install postfix # CentOS/RHEL sudo yum install postfix # macOS brew install postfix

During installation, select "Internet Site" when prompted for configuration type.

Configuration

Edit the main Postfix configuration file:

sudo nano /etc/postfix/main.cf

Add or modify these settings:

# SMTP relay configuration relayhost = [smtp.forwardemail.net]:465 smtp_tls_wrappermode = yes smtp_tls_security_level = encrypt smtp_sasl_auth_enable = yes smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd smtp_sasl_security_options = noanonymous smtp_tls_CAfile = /etc/ssl/certs/ca-certificates.crt

Create the SASL password file:

sudo nano /etc/postfix/sasl_passwd

Add your Forward Email credentials:

[smtp.forwardemail.net]:465 your-alias@yourdomain.com:your-generated-password

Secure and hash the password file:

sudo chmod 600 /etc/postfix/sasl_passwd sudo postmap /etc/postfix/sasl_passwd

Restart Postfix:

sudo systemctl restart postfix

Testing

Test your configuration by sending a test email:

echo "Test email body" | mail -s "Test Subject" recipient@example.com

Question 18

How to Send Mail As using Gmail?

Accepted Answer

Estimated Setup Time: Less than 10 minutes

Getting Started: If you've followed the instructions above under How do I get started and set up email forwarding, then you can continue reading below.

Important: Google has deprecated this Gmail Send Mail As setup. Please review Google announcement. Use Forward Email Webmail, Forward Email apps, or another email client instead. See Forward Email FAQ for help.

Important: Please ensure you have read our Terms, Privacy Policy, and Outbound SMTP Limits – your use is considered acknowledgement and agreement.

Important: If you are a developer, then refer to our email API docs.

Go to My Account Domains Settings Outbound SMTP Configuration and follow setup instructions
Create a new alias for your domain under My Account Domains Aliases (e.g. hello@example.com)
Click on Generate Password next to the newly created alias. Copy to your clipboard and securely store the generated password shown on the screen.
Go to Gmail and under Settings Accounts and Import Send mail as, click "Add another email address"
When prompted for "Name", enter the name that you want your email to be seen as "From" (e.g. "Linus Torvalds").
When prompted for "Email address", enter the full email address of an alias you created under My Account Domains Aliases (e.g. hello@example.com)
Uncheck "Treat as an alias"
Click "Next Step" to proceed
When prompted for "SMTP Server", enter smtp.forwardemail.net and change the port to 465
When prompted for "Username", enter the full email address of an alias you created under My Account Domains Aliases (e.g. hello@example.com)
When prompted for "Password", paste the password from Generate Password in step 3 above
Select the radio button for "Secured connection using SSL"
Click "Add Account" to proceed
Open a new tab to Gmail and wait for your verification email to arrive (you will receive a verification code that confirms you are the owner of the email address you are attempting to "Send Mail As")
Once it arrives, copy and paste the verification code at the prompt you received in the previous step
Once you've done that, go back to the email and click the link to "confirm the request". You will most likely need to do this step and the previous step for the email to be correctly configured.

Congratulations! You've successfully completed all steps.

Question 19

What is the legacy free guide for Send Mail As using Gmail?

Accepted Answer

Important: Google has deprecated this Gmail Send Mail As setup. Please review Google announcement. Use Forward Email Webmail, Forward Email apps, or another email client instead. See Forward Email FAQ for help.

Important: This legacy free guide is deprecated as of May 2023 since we now support outbound SMTP. If you use the guide below, then this will cause your outbound email to say "via forwardemail dot net" in Gmail.

Estimated Setup Time: Less than 10 minutes

Getting Started: If you've followed the instructions above under How do I get started and set up email forwarding, then you can continue reading below.

Question 20

Advanced Gmail Routing Configuration

Accepted Answer

Estimated Setup Time: 15-30 minutes

If you want to set up advanced routing in Gmail so that aliases that don't match a mailbox will forward to Forward Email's mail exchanges, follow these steps:

Log in to your Google Admin console at admin.google.com
Go to Apps → Google Workspace → Gmail → Routing
Click on Add Route and configure the following settings:

Single Recipient Settings:

Select "Change envelope recipient" and enter your primary Gmail address
Check "Add X-Gm-Original-To header with original recipient"

Envelope Recipient Patterns:

Add a pattern that matches all non-existent mailboxes (e.g., .*@yourdomain.com)

Email Server Settings:

Select "Route to host" and enter mx1.forwardemail.net as the primary server
Add mx2.forwardemail.net as the backup server
Set port to 25
Select "Require TLS" for security

Click Save to create the route

Important: This configuration will only work for Google Workspace accounts with custom domains, not for regular Gmail accounts.

Question 21

Advanced Outlook Routing Configuration

Accepted Answer

Estimated Setup Time: 15-30 minutes

For Microsoft 365 (formerly Office 365) users who want to set up advanced routing so that aliases that don't match a mailbox will forward to Forward Email's mail exchanges:

Log in to the Microsoft 365 admin center at admin.microsoft.com
Go to Exchange → Mail flow → Rules
Click Add a rule and select Create a new rule
Name your rule (e.g., "Forward non-existent mailboxes to Forward Email")
Under Apply this rule if, select:
- "The recipient address matches..."
- Enter a pattern that matches all addresses at your domain (e.g., *@yourdomain.com)
Under Do the following, select:
- "Redirect the message to..."
- Choose "The following mail server"
- Enter mx1.forwardemail.net and port 25
- Add mx2.forwardemail.net as a backup server
Under Except if, select:
- "The recipient is..."
- Add all your existing mailboxes that should not be forwarded
Set the rule priority to ensure it runs after other mail flow rules
Click Save to activate the rule

Question 22

Why am I not receiving my test emails?

Accepted Answer

If you're sending a test email to yourself, then it may not show up in your inbox because it has the same "Message-ID" header.

This is a widely known issue, and also affects services such as Gmail. Here is the official Gmail answer regarding this issue.

If you continue to have issues, then it is most likely to be an issue with DNS propagation. You will need to wait a bit longer and try again (or try setting a lower TTL value on your TXT records).

Still having issues? Please contact us so we can help investigate the issue and find a quick resolution.

Question 23

How do I configure my email client to work with Forward Email?

Accepted Answer

Our service works with popular email clients such as:

Your username is your alias' email address and password is from Generate Password ("Normal Password").

Tip: If you are using Thunderbird, then ensure "Connection security" is set to "SSL/TLS" and Authentication method is set to "Normal password".

Type Hostname Protocol Ports IMAP imap.forwardemail.net SSL/TLS Preferred 993 and 2993 (or 2143 for legacy TLS 1.0) POP3 pop3.forwardemail.net SSL/TLS Preferred 995 and 2995 (or 2110 for legacy TLS 1.0) SMTP smtp.forwardemail.net SSL/TLS Recommended 465 and 2465 for SSL/TLS (recommended) or 587, 2587, 2525, and 25 for STARTTLS

Question 24

Why are my emails landing in Spam and Junk and how can I check my domain reputation?

Accepted Answer

This section guides you if your outbound mail is using our SMTP servers (e.g. smtp.forwardemail.net) (or forwarded via mx1.forwardemail.net or mx2.forwardemail.net) and it is being delivered in the Spam or Junk folder of recipients.

We routinely monitor our IP addresses against all reputable DNS denylists, therefore it is most likely a domain-reputation specific issue.

Emails can land in spam folders for several reasons:

Missing Authentication: Set up SPF, DKIM, and DMARC records.
Domain Reputation: New domains often have neutral reputation until they establish a sending history.
Content Triggers: Certain words or phrases can trigger spam filters.
Sending Patterns: Sudden increases in email volume can look suspicious.

You can try to use one or more of these tools to check your domain's reputation and categorization:

Reputation and Blocklist Check Tools

Tool Name URL Type Cloudflare Domain Categorization Feedback https://radar.cloudflare.com/domains/feedback Categorization Spamhaus IP and Domain Reputation Checker https://check.spamhaus.org/ DNSBL Cisco Talos IP and Domain Reputation Center https://talosintelligence.com/reputation_center Reputation Barracuda IP and Domain Reputation Lookup https://www.barracudacentral.org/lookups/lookup-reputation DNSBL MX Toolbox Blacklist Check https://mxtoolbox.com/blacklists.aspx Blacklist Google Postmaster Tools https://www.gmail.com/postmaster/ Reputation Yahoo Sender Hub https://senders.yahooinc.com/ Reputation MultiRBL.valli.org Blacklist Check https://multirbl.valli.org/lookup/ DNSBL Sender Score https://senderscore.org/act/blocklist-remover/ Reputation Invaluement https://www.invaluement.com/lookup/ DNSBL SURBL https://www.surbl.org/ DNSBL SpamCop https://www.spamcop.net/bl.shtml DNSBL UCEPROTECT's Levels 1, 2, and 3 https://www.uceprotect.net/en/rblcheck.php DNSBL UCEPROTECT's backscatterer.org https://www.backscatterer.org/ Backscatter Protection UCEPROTECT's whitelisted.org https://www.whitelisted.org/ (requires a fee) DNSWL

IP Removal Request Forms by Provider

If your IP address has been blocked by a specific email provider, use the appropriate removal form or contact below:

Provider Removal Form / Contact Notes Google/Gmail https://support.google.com/mail/contact/bulk_send_new Bulk sender contact form Microsoft (Outlook/Office 365/Hotmail) https://sender.office.com Office 365 IP delist portal Yahoo/AOL/Verizon https://senders.yahooinc.com/ Yahoo Sender Hub Apple/iCloud https://ipcheck.proofpoint.com/ Apple uses Proofpoint for IP reputation Proofpoint https://ipcheck.proofpoint.com/ Proofpoint IP check and removal Barracuda Networks https://www.barracudacentral.org/lookups/lookup-reputation Barracuda reputation lookup and removal Cloudmark https://csi.cloudmark.com/en/reset/ Cloudmark CSI reset request GoDaddy/SecureServer https://unblock.secureserver.net GoDaddy IP unblock request form Comcast/Xfinity https://spa.xfinity.com/report Comcast IP removal request Charter/Spectrum https://www.spectrum.net/support/internet/understanding-email-error-codes Contact Spectrum support for removal AT&T abuse_rbl@abuse-att.net Email for removal request Cox Communications unblock.request@cox.net Email for removal request CenturyLink/Lumen abuse@centurylink.com Uses Cloudfilter Windstream abuse@windstream.net Email for removal request t-online.de (Germany) tobr@rx.t-online.de Email for removal request Orange France https://postmaster.orange.fr/ Use contact form or email abuse@orange.fr GMX https://postmaster.gmx.net/en/contact GMX postmaster contact form Mail.ru https://postmaster.mail.ru/ Mail.ru postmaster portal Yandex https://postmaster.yandex.ru/ Yandex postmaster portal QQ Mail (Tencent) https://open.mail.qq.com/ QQ Mail whitelist application (Chinese) Netease (163.com) https://mail.163.com/postmaster/ Netease postmaster portal Alibaba/Aliyun/HiChina https://www.alibabacloud.com/help/en/alibaba-mail/ Contact via Alibaba Cloud console Amazon SES https://docs.aws.amazon.com/ses/latest/dg/faqs-dnsbls.html AWS SES console > Blacklist Removal SendGrid https://support.sendgrid.com/ Contact SendGrid support Mimecast https://community.mimecast.com/ Uses third-party RBLs - contact specific RBL Fastmail https://www.fastmail.com/support/ Contact Fastmail support Zoho https://help.zoho.com/portal/en/kb/campaigns/faqs/campaign-review/articles/how-do-i-delist-my-ip-address Contact Zoho support ProtonMail https://proton.me/support/contact Contact Proton support Tutanota https://tutanota.com/support Contact Tutanota support Hushmail https://www.hushmail.com/support/ Contact Hushmail support Mailbox.org https://mailbox.org/en/support Contact Mailbox.org support Posteo https://posteo.de/en/site/contact Contact Posteo support DuckDuckGo Email https://duckduckgo.com/email/support Contact DuckDuckGo support Sonic.net https://www.sonic.com/support Contact Sonic support Telus https://www.telus.com/en/support Contact Telus support Vodafone Germany https://www.vodafone.de/hilfe/ Contact Vodafone support Xtra (Spark NZ) https://www.spark.co.nz/help/ Contact Spark NZ support UOL/BOL (Brazil) https://ajuda.uol.com.br/ Contact UOL support (Portuguese) Libero (Italy) https://aiuto.libero.it/ Contact Libero support (Italian) Telenet (Belgium) https://www2.telenet.be/en/support/ Contact Telenet support Facebook/WhatsApp https://www.facebook.com/business/help Contact Facebook business support LinkedIn https://www.linkedin.com/help/linkedin Contact LinkedIn support Groups.io https://groups.io/helpcenter Contact Groups.io support Earthlink/Vade Secure https://sendertool.vadesecure.com/en/ Vade Secure sender tool Cloudflare Email Security https://www.cloudflare.com/products/zero-trust/email-security/ Contact Cloudflare support Hornetsecurity/Expurgate https://www.hornetsecurity.com/ Contact Hornetsecurity support SpamExperts/Antispamcloud https://www.spamexperts.com/ Contact via hosting provider Mail2World https://www.mail2world.com/support/ Contact Mail2World support

Tip

Start with a low volume of high-quality emails to build a positive reputation before sending in larger volumes.

Important

If your domain is on a blacklist, each blacklist has its own removal process. Check their websites for instructions.

Tip

If you need additional help or find that we are false-positive listed as spam by a certain email service provider, then please contact us.

Question 25

What should I do if I receive spam emails?

Accepted Answer

You should unsubscribe from the emailing list (if possible) and block the sender.

Please do not report the message as spam, but instead forward it to our manually curated and privacy-focused abuse prevention system.

The email address to forward spam to is: abuse@forwardemail.net

Question 26

Why are my test emails sent to myself in Gmail showing as "suspicious"?

Accepted Answer

If you see this error message in Gmail when you send a test to yourself, or when a person you're emailing with your alias sees an email from you for the first time, then please do not worry – as this is a built-in safety feature of Gmail.

You can simply click "Looks safe". For example, if you were to send a test message using the send mail as feature (to someone else), then they will not see this message.

However if they do see this message, it's because they were normally used to seeing your emails come from john@gmail.com instead of john@customdomain.com (just an example). Gmail will alert the users just to make sure things are safe just in case, there is no workaround.

Question 27

Can I remove the via forwardemail dot net in Gmail?

Accepted Answer

This topic is related to a widely known issue in Gmail where extra info appears next to a sender's name.

As of May 2023 we support sending email with SMTP as an add-on for all paid users – which means that you can remove the via forwardemail dot net in Gmail.

Note that this FAQ topic is specific for those using the How to Send Mail As using Gmail feature.

Please see the section on Do you support sending email with SMTP for configuration instructions.

Question 28

Where are your servers located?

Accepted Answer

Tip

We may soon announce our EU datacenter location hosted under forwardemail.eu. Subscribe to the discussion at https://github.com/orgs/forwardemail/discussions/336 for updates. There is no EU-only deployment or opt-in today – see Can I keep my email processing and storage in the EU (data residency).

Our servers are located primarily in Denver, Colorado – see https://forwardemail.net/ips for our complete list of IP addresses.

You can learn about our subprocessors on our GDPR, DPA, and Privacy pages.

Question 29

How do I export and backup my mailbox?

Accepted Answer

At anytime you can export your mailboxes as EML, Mbox, or encrypted SQLite formats.

Go to My Account Domains Aliases Download Backup and select your preferred export format type.

You will be emailed a link to download the export once it has finished.

Note that this export download link expires after 4 hours for security concerns.

If you need to inspect your exported EML or Mbox formats, then these open-soruce tools may be useful:

Name Format Platform GitHub URL MBox Viewer Mbox Windows https://github.com/eneam/mboxviewer mbox-web-viewer Mbox All platforms https://github.com/PHMRanger/mbox-web-viewer EmlReader EML Windows https://github.com/ayamadori/EmlReader Email viewer EML VSCode https://github.com/joelharkes/vscode_email_viewer eml-reader EML All platforms https://github.com/s0ph1e/eml-reader

Additionally if you need to convert a Mbox file to EML file, then you can use https://github.com/noelmartinon/mboxzilla.

Question 30

How do I import and migrate my existing mailbox?

Accepted Answer

You can easily import your email to Forward Email (e.g. using Thunderbird) with the instructions below:

Important: You must follow all of the following steps in order to import your existing email.

Export your email from your existing email provider:
Email Provider Export Format Export Instructions Gmail MBOX https://takeout.google.com/settings/takeout/custom/gmail Outlook PST
Tip: If you are using Outlook (PST export format), then you could simply follow the instructions under "Other" below. However we have provided links below to convert PST to MBOX/EML format based off your operating system:
Apple Mail MBOX https://support.apple.com/guide/mail/import-or-export-mailboxes-mlhlp1030/mac#apd37a3190755974 Fastmail EML https://www.fastmail.help/hc/en-us/articles/360060590573-Download-all-your-data#downloadmail Proton Mail MBOX/EML https://proton.me/support/export-emails-import-export-app Tutanota EML https://github.com/crepererum-oss/tatutanatata Gandi EML https://docs.gandi.net/en/gandimail/common_operations/backup_email.html#contents Zoho EML https://www.zoho.com/mail/help/import-export-emails.html#alink2 Other Use Thunderbird Set up your existing email account in Thunderbird and then use the ImportExportTools NG plugin to export and import your email. You may also be able to simply copy/paste or drag/drop emails between one account to another.
Download, install, and open Thunderbird.
Create a new account using your alias' full email address (e.g. you@yourdomain.com) and your generated password. If you do not yet have a generated password, then refer to our setup instructions.
Download and install the ImportExportTools NG Thunderbird plugin.
Create a new local folder in Thunderbird, and then right click on it → select the ImportExportTools NG option → choose Import mbox file (for MBOX export format) – or – Import messages / Import all messages from a directory (for EML export format).
Drag/drop from the local folder to a new (or existing) IMAP folder in Thunderbird you wish to upload messages to in IMAP storage with our service. This will ensure they are backed up online with our SQLite encrypted storage.

Tip: If you are confused as to how to import into Thunderbird, then you can refer to official instructions at https://kb.mozillazine.org/Importing_folders and https://github.com/thunderbird/import-export-tools-ng/wiki.

Important: Once you have completed the export and import process, then you may also want to enable forwarding on your existing email account and set up an auto-responder to notify senders that you have a new email address (e.g. if you were previously using Gmail and are now using an email with your custom domain name).

Congratulations! You've successfully completed all steps.

Question 31

How do I use my own S3-compatible storage for backups?

Accepted Answer

Paid plan users can configure their own S3-compatible storage provider on a per-domain basis for IMAP/SQLite backups. This means your encrypted mailbox backups can be stored on your own infrastructure instead of (or in addition to) our default storage.

Supported providers include Amazon S3, Cloudflare R2, MinIO, Backblaze B2, DigitalOcean Spaces, and any other S3-compatible service.

Setup

Create a private bucket with your S3-compatible provider. The bucket must not be publicly accessible.
Create access credentials (access key ID and secret access key) with read/write permissions to the bucket.
Go to My Account Domains Advanced Settings Custom S3-Compatible Storage.
Check "Enable custom S3-compatible storage" and fill in your endpoint URL, access key ID, secret access key, region, and bucket name.
Click "Test Connection" to verify your credentials, bucket access, and write permissions.
Click "Save" to apply the settings.

How Backups Work

Backups are triggered automatically for every connected IMAP alias. The IMAP server checks all active connections once per hour and dispatches a backup for each connected alias. A Redis-based lock prevents duplicate backups from running within 30 minutes of each other, and the actual backup is skipped if a successful backup was already completed within the last 24 hours (unless the backup was explicitly requested by a user for download).

Backups can also be triggered manually by clicking "Download Backup" for any alias in the dashboard. Manual backups always run regardless of the 24-hour window.

The backup process works as follows:

The SQLite database is copied using VACUUM INTO, which creates a consistent snapshot without interrupting active connections and preserves the database encryption.
The backup file is verified by opening it to confirm encryption is still valid.
A SHA-256 hash is computed and compared against the existing backup in storage. If the hash matches, the upload is skipped (no changes since last backup).
The backup is uploaded to S3 using multipart upload via the @aws-sdk/lib-storage library.
A signed download URL (valid for 4 hours) is generated and emailed to the user.

Backup Formats

Three backup formats are supported:

Format Extension Description sqlite .sqlite Raw encrypted SQLite snapshot containing mailbox, contact, calendar, and calendar-event records (default for automatic IMAP backups) mbox .zip Password-protected ZIP containing mailbox MBOX files plus Contacts VCF and Calendars ICS folders eml .zip Password-protected ZIP containing individual .eml files plus Contacts VCF and Calendars ICS folders

All export formats preserve contacts, calendars, and calendar events. The portable EML and MBOX ZIP archives organize VCF files by address book under Contacts and ICS event or task resources by calendar under Calendars. Raw SQLite backups retain the same records in their native tables.

Tip: If you have .sqlite backup files and want to convert them to .eml files locally, use our standalone CLI tool convert-sqlite-to-eml. It works on Windows, Linux, and macOS and does not require a network connection.

File Naming and Key Structure

When using custom S3 storage, backup files are stored with an ISO 8601 timestamp prefix so that each backup is preserved as a separate object. This gives you a full backup history in your own bucket.

The key format is:

{ISO 8601 timestamp}-{alias_id}.{extension}

For example:

2025-03-01T12:00:00.000Z-65a31c53c36b75ed685f3fda.sqlite 2025-03-01T12:00:00.000Z-65a31c53c36b75ed685f3fda.zip 2025-03-02T12:00:00.000Z-65a31c53c36b75ed685f3fda.sqlite

The alias_id is the MongoDB ObjectId of the alias. You can find it in the alias settings page or via the API.

When using the default (system) storage, the key is flat (e.g. 65a31c53c36b75ed685f3fda.sqlite) and each backup overwrites the previous one.

Note: Since custom S3 storage retains all backup versions, storage usage will grow over time. We recommend configuring lifecycle rules on your bucket to automatically expire old backups (e.g. delete objects older than 30 or 90 days).

Data Ownership and Deletion Policy

Your custom S3 bucket is entirely under your control. We never delete or modify files in your custom S3 bucket — not when an alias is deleted, not when a domain is removed, and not during any cleanup operations. We only write new backup files to your bucket.

This means:

Alias deletion — When you delete an alias, we remove the backup from our default system storage only. Any backups previously written to your custom S3 bucket remain untouched.
Domain removal — Removing a domain does not affect files in your custom bucket.
Retention management — You are responsible for managing storage in your own bucket, including configuring lifecycle rules to expire old backups.

If you disable custom S3 storage or switch back to our default storage, existing files in your bucket are preserved. Future backups will simply be written to our default storage instead.

Security

Your access key ID and secret access key are encrypted at rest using AES-256-GCM before being stored in our database. They are only decrypted at runtime when performing backup operations.
We automatically validate that your bucket is not publicly accessible. If a public bucket is detected, the configuration will be rejected on save. If public access is detected at backup time, we fall back to our default storage and notify all domain administrators by email.
Credentials are validated on save via a HeadBucket call to ensure the bucket exists and credentials are correct. If validation fails, custom S3 storage is automatically disabled.
Each backup file includes a SHA-256 hash in its S3 metadata, which is used to detect unchanged databases and skip redundant uploads.

Error Notifications

If a backup fails when using your custom S3 storage (e.g. due to expired credentials or a connectivity issue), all domain administrators will be notified by email. These notifications are rate-limited to once every 6 hours to prevent duplicate alerts. If your bucket is detected as publicly accessible at backup time, administrators will be notified once daily.

API

You can also configure custom S3 storage via the API:

curl -X PUT https://api.forwardemail.net/v1/domains/example.com \ -u API_TOKEN: \ -d has_custom_s3=true \ -d s3_endpoint=https://s3.us-east-1.amazonaws.com \ -d s3_access_key_id=YOUR_ACCESS_KEY_ID \ -d s3_secret_access_key=YOUR_SECRET_ACCESS_KEY \ -d s3_region=us-east-1 \ -d s3_bucket=my-email-backups

To test the connection via the API:

curl -X POST https://api.forwardemail.net/v1/domains/example.com/test-s3-connection \ -u API_TOKEN:

Question 32

How do I convert SQLite backups to EML files?

Accepted Answer

If you download or store SQLite backups (either from our default storage or your own custom S3 bucket), you can convert them to standard .eml files using our standalone CLI tool convert-sqlite-to-eml. The password-protected ZIP also contains VCF contacts organized by address book under Contacts and ICS calendar events or tasks organized by calendar under Calendars. EML files can be opened with any email client (Thunderbird, Outlook, Apple Mail, etc.) or imported into other mail servers.

Installation

You can either download a pre-built binary (no Node.js required) or run it directly with Node.js:

Pre-built binaries — Download the latest release for your platform from GitHub Releases:

Platform Architecture File Linux x64 convert-sqlite-to-eml-linux-x64 Linux arm64 convert-sqlite-to-eml-linux-arm64 macOS Apple Silicon convert-sqlite-to-eml-darwin-arm64 Windows x64 convert-sqlite-to-eml-win-x64.exe

macOS users: After downloading, you may need to remove the quarantine attribute before running the binary:

sudo xattr -rd com.apple.quarantine ./convert-sqlite-to-eml-darwin-arm64

(Replace ./convert-sqlite-to-eml-darwin-arm64 with the actual path to the downloaded file.)

Linux users: After downloading, you may need to make the binary executable:

chmod +x ./convert-sqlite-to-eml-linux-x64

(Replace ./convert-sqlite-to-eml-linux-x64 with the actual path to the downloaded file.)

From source (requires Node.js >= 18):

cd tools/convert-sqlite-to-eml npm install node index.js

Usage

The tool supports both interactive and non-interactive modes.

Interactive mode — run without arguments and you will be prompted for all inputs:

./convert-sqlite-to-eml Forward Email - Convert SQLite Backup to EML ============================================= Path to SQLite backup file: /path/to/backup.sqlite IMAP/alias password: ******** Output ZIP path [/path/to/backup-2025-03-01T12-00-00-000Z.zip]:

Non-interactive mode — pass arguments via command-line flags for scripting and automation:

./convert-sqlite-to-eml \ --path /path/to/backup.sqlite \ --password "your-imap-password" \ --output /path/to/output.zip Flag Description --path Path to the encrypted SQLite backup file --password IMAP/alias password for decryption --output Output path for the ZIP file (default: auto-generated with ISO 8601 timestamp) --help Show help message

Output Format

The tool produces a password-protected ZIP archive (AES-256 encrypted) containing:

README.txt INBOX/ .eml .eml Sent/ .eml Drafts/ .eml

EML files are organized by mailbox folder. The ZIP password is the same as your IMAP/alias password. Each .eml file is a standard RFC 5322 email message with full headers, body text, and attachments reconstructed from the SQLite database.

How It Works

Question 33

Do you support self-hosting?

Accepted Answer

Yes, as of March 2025, we support a self-hosted option. Read the blog here. Checkout the self-hosted guide to get started. And for those interested in a more broken down step-by-step version see our Ubuntu or Debian based guides.

Question 34

How do I get started and set up email forwarding?

Accepted Answer

Estimated Setup Time: Less than 10 minutes

Getting Started: Carefully read and follow steps one through eight listed below. Be sure to replace the email address of user@gmail.com with the email address you want to forward emails to (if it isn't already accurate). Similarly be sure to replace example.com with your custom domain name (if it isn't already accurate).

If you have already registered your domain name somewhere, then you must completely skip this step and go to step two! Otherwise you can click here to register your domain name.
Do you remember where you registered your domain? Once you remember this, then follow the instructions below:
Important: You must open a new tab and sign in to your domain registrar. You can easily click on your "Registrar" below to automatically do this. In this new tab, you must navigate to the DNS management page at your registrar – and we have provided the step by step navigation steps below under the "Steps to Configure" column. Once you've navigated to this page in the new tab, you can return to this tab and proceed to step three below. Do not close the opened tab yet; you will need it for future steps!
Registrar Steps to Configure 1&1 Log in Domain Center (Select your domain) Edit DNS Settings Amazon Route 53 Log in Hosted Zones (Select your domain) Aplus.net Log in My Servers Domain Management DNS Manager Bluehost FOR ROCK: Log in Domains (Click the ▼ icon next to manage) DNS
FOR LEGACY: Log in Domains Zone editor (Select your domain) Cloudflare Log in DNS DNS Made Easy Log in DNS (Select your domain) DNSimple Log in (Select your domain) DNS Manage Digital Ocean Log in Networking Domains (Select your domain) More Manage Domain Domain.com Log in In card view, click manage on your domain In list view, click the gear icon DNS & Nameservers DNS Records Domains.com
Watch Log in (Select your domain) Manage (click gear icon) Click on DNS & Nameservers in left-hand menu DreamHost Log in Panel Domains Manage Domains DNS Dyn Log in Overview Manage Simple Editor Records Gandi Log in (Select your domain) Management Edit the zone GoDaddy
Watch Log in Manage My Domains (Select your domain) Manage DNS Google Domains
Watch Log in (Select your domain) Configure DNS Namecheap
Watch Log in Domain List (Select your domain) Manage Advanced DNS Netlify Log in (Select your domain) Setup Netlify DNS Network Solutions Log in Account Manager My Domain Names (Select your domain) Manage Change Where Domain Points Advanced DNS Shopify
Watch Log in Managed Domains (Select your domain) DNS Settings Squarespace Log in Home menu Settings Domains (Select your domain) Advanced settings Custom Records Vercel's Now Using "now" CLI now dns add [domain] '@' MX [record-value] [priority] Weebly Log in Domains page (Select your domain) DNS Wix Log in Domains page (Click icon) Select Manage DNS Records eNom Log in Domains My Domains Other
Important: Don't see your registrar name listed here? Simply search on the Internet for "how to change DNS records on $REGISTRAR" (replacing $REGISTRAR with the name of your registrar – e.g. "how to change DNS records on GoDaddy" if you're using GoDaddy).
Using your registrar's DNS management page (the other tab you have opened), set the following "MX" records:
Important: Note that there should be NO other MX records set. Both records shown below MUST exist. Be sure there are no typos; and you have both mx1 and mx2 spelled correctly. If there were already MX records that existed, please delete them completely. The "TTL" value does not need to be 3600, it could be a lower or higher value if necessary.
Name/Host/Alias TTL Type Priority Answer/Value "@", ".", or blank 3600 MX 0 mx1.forwardemail.net "@", ".", or blank 3600 MX 0 mx2.forwardemail.net
Using your registrar's DNS management page (the other tab you have opened), set the following TXT record(s):
Important: If you are on a paid plan, then you must completely skip this step and go to step five! If you are not on a paid plan, then your forwarded addresses will be publicly searchable – go to My Account Domains and upgrade your domain to a paid plan if desired. If you would like to learn more about paid plans see our Pricing page. Otherwise you can continue to choose one or more combinations from Option A to Option F listed below.

Option A: If you are forwarding all emails from your domain, (e.g. "all@example.com", "hello@example.com", etc) to a specific address "user@gmail.com":
Name/Host/Alias TTL Type Answer/Value "@", ".", or blank 3600 TXT forward-email=user@gmail.com
Tip: Make sure to replace the values above in the "Value" column with your own email address. The "TTL" value does not need to be 3600, it could be a lower or higher value if necessary. A lower time to live ("TTL") value will ensure any future changes made to your DNS records are propagated throughout the Internet quicker – think of this as how long it will be cached in-memory (in seconds). You can learn more about TTL on Wikipedia.

Option B: If you just need to forward a single email address (e.g. hello@example.com to user@gmail.com; this will also forward "hello+test@example.com" to "user+test@gmail.com" automatically):
Name/Host/Alias TTL Type Answer/Value "@", ".", or blank 3600 TXT forward-email=hello:user@gmail.com
Option C: If you are forwarding multiple emails, then you'll want to separate them with a comma:
Name/Host/Alias TTL Type Answer/Value "@", ".", or blank 3600 TXT forward-email=hello:user@gmail.com,support:user@gmail.com
Option D: You can have an infinite amount of forwarding emails setup – just make sure to not wrap over 255 characters in a single-line and start each line with "forward-email=". An example is provided below:
Name/Host/Alias TTL Type Answer/Value "@", ".", or blank 3600 TXT forward-email=hello:user@gmail.com,support:user@gmail.com "@", ".", or blank 3600 TXT forward-email=help:user@gmail.com,foo:user@gmail.com "@", ".", or blank 3600 TXT forward-email=orders:user@gmail.com,baz:user@gmail.com "@", ".", or blank 3600 TXT forward-email=info:user@gmail.com,beep:user@gmail.com "@", ".", or blank 3600 TXT forward-email=errors:user@gmail.com,boop:user@gmail.com
Option E: You can also specify a domain name in your TXT record to have global alias forwarding (e.g. "user@example.com" will get forwarded to "user@example.net"):
Name/Host/Alias TTL Type Answer/Value "@", ".", or blank 3600 TXT forward-email=example.net
Option F: You can even use webhooks as a global or individual alias to forward emails to. See the example and full section on webhooks titled Do you support webhooks below.
Name/Host/Alias TTL Type Answer/Value "@", ".", or blank 3600 TXT forward-email=alias:https://requestbin.com/r/en8pfhdgcculn
Option G: You can even use regular expressions ("regex") for matching aliases and for handling substitutions to forward emails to. See the examples and full section on regex titled Do you support regular expressions or regex below.

Need advanced regex with substitution? See the examples and full section on regex titled Do you support regular expressions or regex below.

Simple Example: If I want all emails that go to `linus@example.com` or `torvalds@example.com` to forward to `user@gmail.com`:
Name/Host/Alias TTL Type Answer/Value "@", ".", or blank 3600 TXT forward-email=/^(linus|torvalds)$/:user@gmail.com
Important: Catch-all forwarding rules could also be described as "fall-through". This means that incoming emails which match at least one specific forwarding rule will be used instead of the catch-all. Specific rules include email addresses and regular expressions.

For example:
forward-email=hello:first@gmail.com,second@gmail.com
Emails sent to hello@example.com will **not** be forwarded to second@gmail.com (catch-all) with this configuration, and instead only be delivered to first@gmail.com.
Using your registrar's DNS management page (the other tab you have opened), additionally set the following TXT record: Name/Host/Alias TTL Type Answer/Value "@", ".", or blank 3600 TXT v=spf1 a include:spf.forwardemail.net -all
Important: If you are using Gmail (e.g. Send Mail As) or G Suite, then you'll need to append include:_spf.google.com to the value above, for example:

v=spf1 a include:spf.forwardemail.net include:_spf.google.com -all

Tip: If you already have a similar line with "v=spf1", then you'll need to append include:spf.forwardemail.net right before any existing "include:host.com" records and before the "-all" in the same line, for example:

v=spf1 a include:spf.forwardemail.net include:host.com -all

Note that there is a difference between "-all" and "~all". The "-" indicates that the SPF check should FAIL if it does not match, and "~" indicates that the SPF check should SOFTFAIL. We recommend to use the "-all" approach to prevent domain forgery.

You may also need to include the SPF record for whichever host you are sending mail from (e.g. Outlook).
Verify your DNS records using our "Verify Records" tool available at My Account Domains Setup.
Send a test email to confirm it works. Note that it might take some time for your DNS records to propagate.
Tip: If you are not receiving test emails, or receive a test email that says "Be careful with this message", then see the answers for Why am I not receiving my test emails and Why are my test emails sent to myself in Gmail showing as "suspicious" respectively.
If you wish to "Send Mail As" from Gmail, then you will need to watch this video, or follow the steps under How to Send Mail As Using Gmail below.

Congratulations! You've successfully completed all steps.

Tip: Optional add-ons are listed below. Note that these add-ons are completely optional and may not be necessary. We wanted to at least provide you with additional information if necessary.

Optional Add-on: If you're using the How to Send Mail As using Gmail feature, then you may want to add yourself to an allowlist. See these instructions by Gmail on this topic.

Question 35

Can I use multiple MX exchanges and servers for advanced forwarding?

Accepted Answer

Yes, but you should only have one MX exchange listed in your DNS records.

Do not attempt to use "Priority" as a way to configure multiple MX exchanges.

Instead, you need to configure your existing MX exchange to forward mail for all non-matching aliases to our service's exchanges (mx1.forwardemail.net and/or mx2.forwardemail.net).

If you are using Google Workspace and you want to forward all non-matching aliases to our service, then see https://support.google.com/a/answer/6297084.

If you are using Microsoft 365 (Outlook) and you want to forward all non-matching aliases to our service, then see https://learn.microsoft.com/en-us/exchange/mail-flow-best-practices/use-connectors-to-configure-mail-flow/set-up-connectors-to-route-mail and https://learn.microsoft.com/en-us/exchange/mail-flow-best-practices/manage-mail-flow-for-multiple-locations.

Question 36

How do I set up a vacation responder (out of office auto-responder)?

Accepted Answer

Go to My Account Domains Aliases and either create or edit the alias you would like to configure a vacation autoresponder for.

You have the ability to configure a start date, end date, subject, and message, and enable or disable it at anytime:

Plaintext subject and message are currently supported (we use striptags package internally to remove any HTML).
Subject is limited to 100 characters.
Message is limited to 1000 characters.
Setup requires Outbound SMTP configuration (e.g. you will need to setup DKIM, DMARC, and Return-Path DNS records).
- Go to My Account Domains Settings Outbound SMTP Configuration and follow setup instructions.
Vacation responder cannot be enabled on global vanity domain names (e.g. disposable addresses are not supported).
Vacation responder cannot be enabled for aliases with wildcard/catch-all (*) nor regular expressions.

Unlike mail systems such as postfix (e.g. that use the sieve vacation filter extension) – Forward Email automatically adds your DKIM signature, dummy-proofs connection issues when sending vacation responses (e.g. due to common SSL/TLS connection issues and legacy maintained servers), and even supports Open WKD and PGP encryption for vacation responses.

Question 37

How do I set up SPF for Forward Email?

Accepted Answer

Using your registrar's DNS management page, set the following TXT record:

Name/Host/Alias TTL Type Answer/Value "@", ".", or blank 3600 TXT v=spf1 a include:spf.forwardemail.net -all

Important: If you are using Gmail (e.g. Send Mail As) or G Suite, then you'll need to append include:_spf.google.com to the value above, for example:

v=spf1 a include:spf.forwardemail.net include:_spf.google.com -all

Important: If you are using Microsoft Outlook or Live.com, you'll need to append include:spf.protection.outlook.com to your SPF TXT record, for example:

v=spf1 a include:spf.forwardemail.net include:spf.protection.outlook.com -all

Tip: If you already have a similar line with "v=spf1", then you'll need to append include:spf.forwardemail.net right before any existing "include:host.com" records and before the "-all" in the same line, for example:

v=spf1 a include:spf.forwardemail.net include:host.com -all

Note that there is a difference between "-all" and "~all". The "-" indicates that the SPF check should FAIL if it does not match, and "~" indicates that the SPF check should SOFTFAIL. We recommend to use the "-all" approach to prevent domain forgery.

You may also need to include the SPF record for whichever host you are sending mail from (e.g. Outlook).

Question 38

How do I set up DKIM for Forward Email?

Accepted Answer

Go to My Account Domains Settings Outbound SMTP Configuration and follow setup instructions.

Question 39

How do I set up DMARC for Forward Email?

Accepted Answer

Go to My Account Domains Settings Outbound SMTP Configuration and follow setup instructions.

Question 40

How do I view DMARC Reports?

Accepted Answer

Forward Email provides a comprehensive DMARC Reports dashboard that allows you to monitor your email authentication performance across all your domains from a single interface.

What are DMARC Reports?

DMARC (Domain-based Message Authentication, Reporting, and Conformance) reports are XML files sent by receiving mail servers that tell you how your emails are being authenticated. These reports help you understand:

How many emails are being sent from your domain
Whether those emails are passing SPF and DKIM authentication
What actions receiving servers are taking (accept, quarantine, or reject)
Which IP addresses are sending email on behalf of your domain

How to Access DMARC Reports

Go to My Account DMARC Reports to view your dashboard. You can also access domain-specific reports from My Account Domains by clicking the "DMARC" button next to any domain.

Dashboard Features

The DMARC Reports dashboard provides:

Summary Metrics: Total reports received, total messages analyzed, SPF alignment rate, DKIM alignment rate, and overall pass rate
Messages Over Time Chart: Visual trend of email volume and authentication rates over the past 30 days
Alignment Summary: Donut chart showing SPF vs DKIM alignment distribution
Message Disposition: Stacked bar chart showing how receiving servers handled your emails (accepted, quarantined, or rejected)
Recent Reports Table: Detailed list of individual DMARC reports with filtering and pagination
Domain Filtering: Filter reports by specific domain when managing multiple domains

Why This Matters

For organizations managing multiple domains (like enterprises, non-profits, or agencies), DMARC reports are essential for:

Identifying unauthorized senders: Detect if someone is spoofing your domain
Improving deliverability: Ensure your legitimate emails pass authentication
Monitoring email infrastructure: Track which services and IPs are sending on your behalf
Compliance: Maintain visibility into email authentication for security audits

Unlike other services that require separate DMARC monitoring tools, Forward Email includes DMARC report processing and visualization as part of your account at no additional cost.

Requirements

DMARC Reports are available for paid plans only
Your domain must have DMARC configured (see How do I set up DMARC for Forward Email)
Reports are automatically collected when receiving mail servers send them to your configured DMARC reporting address

Weekly Email Reports

Paid plan users automatically receive weekly DMARC report summaries via email. These emails include:

Summary statistics for all your domains
SPF and DKIM alignment rates
Message disposition breakdown (accepted, quarantined, rejected)
Top reporting organizations (Google, Microsoft, Yahoo, etc.)
IP addresses with alignment issues that may need attention
Direct links to your DMARC Reports dashboard

Weekly reports are sent automatically and cannot be disabled separately from other email notifications.

Question 41

Why do my DMARC reports show failures from unknown IP addresses?

Accepted Answer

If your DMARC reports contain unfamiliar IP addresses failing SPF and DKIM, please do not worry – this is normal and actually means your setup is working correctly.

DMARC reports list every server that attempted to send mail claiming to be from your domain, including unauthorized ones. In nearly all cases these unknown IPs are simply spammers or bots trying to impersonate your domain. Here is what happens when they try:

SPF fails because the sending IP is not listed in your SPF record.
DKIM fails because they cannot produce a valid signature for your domain.
With a DMARC policy of p=reject, the message is rejected outright and never reaches anyone's inbox.

In other words, these failures are proof that DMARC is doing its job – blocking impersonation attempts before they cause harm. No action is required on your part.

How to tell legitimate senders from impersonators

If you also use other services to send mail on your domain's behalf (marketing tools, CRMs, etc.), make sure those services have a valid DKIM signature configured – otherwise their messages will also appear as failures in your reports.

Important

Make sure your domain publishes a DMARC policy of p=reject so that impersonation attempts are rejected rather than delivered. See How do I set up DMARC for Forward Email.

Question 42

How do I connect and configure my contacts?

Accepted Answer

To configure your contacts, use the CardDAV URL of: https://carddav.forwardemail.net (or simply carddav.forwardemail.net if your client allows it)

Question 43

How do I connect and configure my calendars?

Accepted Answer

To configure your calendar, use the CalDAV URL of: https://caldav.forwardemail.net (or simply caldav.forwardemail.net if your client allows it)

Question 44

How do I add more calendars and manage existing calendars?

Accepted Answer

If you'd like to add additional calendars, then just add a new calendar URL of: https://caldav.forwardemail.net/dav/principals/calendar-name (be sure to replace calendar-name with your desired calendar name)

You can change a calendar's name and color after creation – just use your preferred calendar application (e.g. Apple Mail or Thunderbird).

Question 45

How do I connect and configure tasks and reminders?

Accepted Answer

To configure tasks and reminders, use the same CalDAV URL as calendars: https://caldav.forwardemail.net (or simply caldav.forwardemail.net if your client allows it)

Tasks and reminders will automatically be separated from calendar events into their own "Reminders" or "Tasks" calendar collection.

Setup instructions by platform:

macOS/iOS:

Add a new CalDAV account in System Preferences > Internet Accounts (or Settings > Accounts on iOS)
Use caldav.forwardemail.net as the server
Enter your Forward Email alias and generated password
After setup, you'll see both "Calendar" and "Reminders" collections
Use the Reminders app to create and manage tasks

Android with Tasks.org:

Install Tasks.org from Google Play Store or F-Droid
Go to Settings > Synchronization > Add Account > CalDAV
Enter server: https://caldav.forwardemail.net
Enter your Forward Email alias and generated password
Tasks.org will automatically discover your task calendars

Thunderbird:

Install the Lightning add-on if not already installed
Create a new calendar with type "CalDAV"
Use URL: https://caldav.forwardemail.net
Enter your Forward Email credentials
Both events and tasks will be available in the calendar interface

Question 46

Why can't I create tasks in macOS Reminders?

Accepted Answer

If you're having trouble creating tasks in macOS Reminders, try these troubleshooting steps:

Check account setup: Ensure your CalDAV account is properly configured with caldav.forwardemail.net
Verify separate calendars: You should see both "Calendar" and "Reminders" in your account. If you only see "Calendar", the task support may not be fully activated yet.
Refresh account: Try removing and re-adding your CalDAV account in System Preferences > Internet Accounts
Check server connectivity: Test that you can access https://caldav.forwardemail.net in your browser
Verify credentials: Ensure you're using the correct alias email and generated password (not your account password)
Force sync: In Reminders app, try creating a task and then manually refreshing the sync

Common issues:

"Reminders calendar not found": The server may need a moment to create the Reminders collection on first access
Tasks not syncing: Check that both devices are using the same CalDAV account credentials
Mixed content: Ensure tasks are being created in the "Reminders" calendar, not the general "Calendar"

Question 47

How do I set up Tasks.org on Android?

Accepted Answer

Tasks.org is a popular open-source task manager that works excellently with Forward Email's CalDAV task support.

Installation and Setup:

Install Tasks.org:
- From Google Play Store: Tasks.org
- From F-Droid: Tasks.org on F-Droid
Configure CalDAV sync:
- Open Tasks.org
- Go to ☰ Menu > Settings > Synchronization
- Tap "Add Account"
- Select "CalDAV"
Enter Forward Email settings:
- Server URL: https://caldav.forwardemail.net
- Username: Your Forward Email alias (e.g., you@yourdomain.com)
- Password: Your alias-specific generated password
- Tap "Add Account"
Account discovery:
- Tasks.org will automatically discover your task calendars
- You should see your "Reminders" collection appear
- Tap "Subscribe" to enable sync for the task calendar
Test sync:
- Create a test task in Tasks.org
- Check that it appears in other CalDAV clients (like macOS Reminders)
- Verify changes sync both ways

Features available:

✅ Task creation and editing
✅ Due dates and reminders
✅ Task completion and status
✅ Priority levels
✅ Subtasks and task hierarchy
✅ Tags and categories
✅ Two-way sync with other CalDAV clients

Troubleshooting:

If no task calendars appear, try manually refreshing in Tasks.org settings
Ensure you have at least one task created on the server (you can create one in macOS Reminders first)
Check network connectivity to caldav.forwardemail.net

Question 48

How do I set up SRS for Forward Email?

Accepted Answer

We automatically configure Sender Rewriting Scheme ("SRS") – you do not need to do this yourself.

Question 49

How do I set up MTA-STS for Forward Email?

Accepted Answer

Please refer to our section on MTA-STS for more insight.

Question 50

How do I add a profile picture to my email address?

Accepted Answer

If you're using Gmail, then follow these steps below:

Go to https://google.com and sign out of all email accounts
Click "Sign In" and on the drop-down click on "other account"
Select "Use another account"
Select "Create account"
Select "Use my current email address instead"
Enter your custom domain name email address
Retrieve the verification email sent to your email address
Enter the verification code from this email
Complete profile information for your new Google account
Agree to all Privacy and Terms of Use policies
Go to https://google.com and in the top right corner, click on your profile icon, and click on the "change" button
Upload a new photo or avatar for your account
Changes will take approximately 1-2 hours to propagate, but sometimes may be very quick.
Send a test email and the profile photo should appear.

Question 51

Do you support newsletters or mailing lists for marketing related email?

Accepted Answer

Yes, you can read more at https://forwardemail.net/guides/newsletter-with-listmonk.

Please note that in order to maintain IP reputation and ensure deliverability, Forward Email has a manual review process on a per-domain basis for newsletter approval. Email support@forwardemail.net or open a help request for approval. This typically takes less than 24 hours, with most requests being honored within 1-2 hours. In the near future we aim to make this process instant with additional spam controls and alerting. This process ensures that your emails reach the inbox and your messages don't get marked as spam.

Question 52

Do you support sending email with API?

Accepted Answer

Yes, as of May 2023 we support sending email with API as an add-on for all paid users.

Important: Please ensure you have read our Terms, Privacy Policy, and Outbound SMTP Limits – your use is considered acknowledgement and agreement.

Please view our section on Emails in our API documentation for options, examples, and more insight.

In order to send outbound email with our API, you must use your API token available under My Security.

If you no longer need API access, you can disable your token with DELETE /v1/account/api-token. A disabled token cannot authenticate API or WebSocket requests. To enable API access again, sign in to My Security and reset your token, which generates a replacement. Alias-password authentication is unchanged.

Question 53

Do you support receiving email with IMAP?

Accepted Answer

Yes, as of October 16, 2023 we support receiving email over IMAP as an add-on for all paid users. Please read our deep-dive article on how our encrypted SQLite mailbox storage feature works.

Important: Please ensure you have read our Terms and Privacy Policy – your use is considered acknowledgement and agreement.

Create a new alias for your domain under My Account Domains Aliases (e.g. hello@example.com)
Click on Generate Password next to the newly created alias. Copy to your clipboard and securely store the generated password shown on the screen.
Using your preferred email application, add or configure an account with your newly created alias (e.g. hello@example.com)

Tip: We recommend our official Forward Email apps for macOS, Windows, Linux, Android, and iOS — they come pre-configured for your encrypted mailboxes, calendars, and contacts. You can also use Thunderbird, Thunderbird Mobile, Apple Mail, or an open-source and privacy-focused alternative.
When prompted for IMAP server name, enter imap.forwardemail.net
When prompted for IMAP server port, enter 993 (SSL/TLS) – see alternate IMAP ports if necessary

Tip: If you are using Thunderbird, then ensure "Connection security" is set to "SSL/TLS" and Authentication method is set to "Normal password".
When prompted for IMAP server password, paste the password from Generate Password in step 2 above
Save your settings – if you are having issues, then please contact us

Congratulations! You've successfully completed all steps.

Question 54

Do you support POP3?

Accepted Answer

Yes, as of December 4, 2023 we support POP3 as an add-on for all paid users. Please read our deep-dive article on how our encrypted SQLite mailbox storage feature works.

Important: Please ensure you have read our Terms and Privacy Policy – your use is considered acknowledgement and agreement.

Create a new alias for your domain under My Account Domains Aliases (e.g. hello@example.com)
Click on Generate Password next to the newly created alias. Copy to your clipboard and securely store the generated password shown on the screen.
Using your preferred email application, add or configure an account with your newly created alias (e.g. hello@example.com)

Tip: We recommend our official Forward Email apps for macOS, Windows, Linux, Android, and iOS — they come pre-configured for your encrypted mailboxes, calendars, and contacts. You can also use Thunderbird, Thunderbird Mobile, Apple Mail, or an open-source and privacy-focused alternative.
When prompted for POP3 server name, enter pop3.forwardemail.net
When prompted for POP3 server port, enter 995 (SSL/TLS) – see alternate POP3 ports if necessary

Tip: If you are using Thunderbird, then ensure "Connection security" is set to "SSL/TLS" and Authentication method is set to "Normal password".
When prompted for POP3 server password, paste the password from Generate Password in step 2 above
Save your settings – if you are having issues, then please contact us

Congratulations! You've successfully completed all steps.

Question 55

Do you support calendars (CalDAV)?

Accepted Answer

Yes, as of February 5, 2024 we have added this feature. Our server is caldav.forwardemail.net and is also monitored on our status page.

It supports both IPv4 and IPv6 and is available over port 443 (HTTPS).

Login Example Description Username user@example.com Email address of an alias that exists for the domain at My Account Domains. Password ************************ Alias-specific generated password.

In order to use calendar support, the user must be the email address of an alias that exists for the domain at My Account Domains – and the password must be an alias-specific generated password.

Question 56

Do you support tasks and reminders (CalDAV VTODO)?

Accepted Answer

Yes, as of October 14, 2025 we have added CalDAV VTODO support for tasks and reminders. This uses the same server as our calendar support: caldav.forwardemail.net.

Our CalDAV server supports both calendar events (VEVENT) and tasks (VTODO) components using unified calendars. This means each calendar can contain both events and tasks, providing maximum flexibility and compatibility across all CalDAV clients.

How calendars and lists work:

Each calendar supports both events and tasks - You can add events, tasks, or both to any calendar
Apple Reminders lists - Each list you create in Apple Reminders becomes a separate calendar on the server
Multiple calendars - You can create as many calendars as you need, each with its own name, color, and organization
Cross-client sync - Tasks and events sync seamlessly between all compatible clients

Supported task clients:

Task features supported:

Task creation, editing, and deletion
Due dates and start dates
Task completion status (NEEDS-ACTION, IN-PROCESS, COMPLETED, CANCELLED)
Task priority levels
Recurring tasks
Task descriptions and notes
Multi-device synchronization
Subtasks with RELATED-TO property
Task reminders with VALARM

The login credentials are the same as for calendar support:

Login Example Description Username user@example.com Email address of an alias that exists for the domain at My Account Domains. Password ************************ Alias-specific generated password.

Important notes:

Each Reminders list is a separate calendar - When you create a new list in Apple Reminders, it creates a new calendar on the CalDAV server
Thunderbird users - You'll need to manually subscribe to each calendar/list you want to sync, or use the calendar home URL: https://caldav.forwardemail.net/dav/your-email@domain.com/
Apple users - Calendar discovery happens automatically, so all your calendars and lists will appear in Calendar.app and Reminders.app
Unified calendars - All calendars support both events and tasks, giving you flexibility in how you organize your data

Question 57

Do you support contacts (CardDAV)?

Accepted Answer

Yes, as of June 12, 2025 we have added this feature. Our server is carddav.forwardemail.net and is also monitored on our status page.

It supports both IPv4 and IPv6 and is available over port 443 (HTTPS).

Login Example Description Username user@example.com Email address of an alias that exists for the domain at My Account Domains. Password ************************ Alias-specific generated password.

In order to use contacts support, the user must be the email address of an alias that exists for the domain at My Account Domains – and the password must be an alias-specific generated password.

Question 58

Do you support sending email with SMTP?

Accepted Answer

Yes, as of May 2023 we support sending email with SMTP as an add-on for all paid users.

Important: Please ensure you have read our Terms, Privacy Policy, and Outbound SMTP Limits – your use is considered acknowledgement and agreement.

Important: If you are using Gmail, then refer to our Send Mail As with Gmail guide. If you are a developer, then refer to our email API docs.

Go to My Account Domains Settings Outbound SMTP Configuration and follow setup instructions
Create a new alias for your domain under My Account Domains Aliases (e.g. hello@example.com)
Click on Generate Password next to the newly created alias. Copy to your clipboard and securely store the generated password shown on the screen.
Using your preferred email application, add or configure an account with your newly created alias (e.g. hello@example.com)

Tip: We recommend our official Forward Email apps for macOS, Windows, Linux, Android, and iOS — they come pre-configured for your encrypted mailboxes, calendars, and contacts. You can also use Thunderbird, Thunderbird Mobile, Apple Mail, or an open-source and privacy-focused alternative.
When prompted for SMTP server name, enter smtp.forwardemail.net
When prompted for SMTP server port, enter 465 (SSL/TLS) – see alternate SMTP ports if necessary

Tip: If you are using Thunderbird, then ensure "Connection security" is set to "SSL/TLS" and Authentication method is set to "Normal password".
When prompted for SMTP server password, paste the password from Generate Password in step 3 above
Save your settings and send your first test email – if you are having issues, then please contact us

Important: Please note that in order to maintain IP reputation and ensure deliverability, we have a manual review process on a per-domain basis for outbound SMTP approval. This typically takes less than 24 hours, with most requests being honored within 1-2 hours. In the near future we aim to make this process instant with additional spam controls and alerting. This process ensures that your emails reach the inbox and your messages don't get marked as spam.

Congratulations! You've successfully completed all steps.

Question 59

Do you support OpenPGP/MIME, end-to-end encryption ("E2EE"), and Web Key Directory ("WKD")?

Accepted Answer

Yes, we support OpenPGP, end-to-end encryption ("E2EE"), and the discovery of public keys using Web Key Directory ("WKD"). You can configure OpenPGP using keys.openpgp.org or self-host your own keys (refer to this gist for WKD server setup).

WKD lookups are cached for 1 hour to ensure timely email delivery → therefore if you add, change, or remove your WKD key, then please email us at support@forwardemail.net with your email address in order for us to manually purge the cache.
We support PGP encryption for messages that are forwarded via WKD lookup or using an uploaded PGP key on our interface.
Uploaded keys take prevalance as long as the PGP checkbox is enabled/checked.
Messages sent to webhooks are not currently encrypted with PGP.
If you have multiple aliases that match for a given forwarding address (e.g. regex/wildcard/exact combo) and if more than one of these contains an uploaded PGP key and has PGP checked → then we will send you an error alert email and will not encrypt the message with your uploaded PGP key. This is very rare and usually only applies to advanced users with complex alias rules.
PGP encryption will not be applied to email forwarding through our MX servers if the sender had a DMARC policy of reject. If you require PGP encryption on all mail then we suggest to use our IMAP service and configure your PGP key for your alias for inbound mail.
On our paid plans (Enhanced Protection and Team), you can disable WKD lookup on a per-alias basis. Navigate to your alias settings and check the "Disable WKD Lookup" option. When disabled, inbound emails forwarded to that alias will not be encrypted via WKD even if a public key is published for the recipient. This is also available via the API using the has_wkd_disabled field.

You can validate your Web Key Directory setup at https://wkd.chimbosonic.com/ (open-source) or https://www.webkeydirectory.com/ (proprietary).

Automatic Encryption: If you are using our outbound SMTP service and sending unencrypted messages, then we will automatically attempt to encrypt messages on a per-recipient basis using Web Key Directory ("WKD").

Important: You must follow all of the following steps in order to enable OpenPGP for your custom domain name.

Congratulations! You've successfully completed all steps.

Question 60

Do you support S/MIME encryption?

Accepted Answer

Yes, we support S/MIME (Secure/Multipurpose Internet Mail Extensions) encryption as defined in RFC 8551. S/MIME provides end-to-end encryption using X.509 certificates, which is widely supported by enterprise email clients.

We support both RSA and ECC (Elliptic Curve Cryptography) certificates:

RSA certificates: 2048-bit minimum, 4096-bit recommended
ECC certificates: P-256, P-384, and P-521 NIST curves

To configure S/MIME encryption for your alias:

Obtain an S/MIME certificate from a trusted Certificate Authority (CA) or generate a self-signed certificate for testing.

Tip: Free S/MIME certificates are available from providers like Actalis or Actalis Free S/MIME.
Export your certificate in PEM format (the public certificate only, not the private key).
Go to My Account Domains Aliases (e.g. hello@example.com) Edit S/MIME and upload your public certificate.
Once configured, all incoming emails to your alias will be encrypted using your S/MIME certificate before being stored or forwarded.

Note: S/MIME encryption is applied to incoming messages that are not already encrypted. If a message is already encrypted with OpenPGP or S/MIME, it will not be re-encrypted.

Important: S/MIME encryption will not be applied to email forwarding through our MX servers if the sender had a DMARC policy of reject. If you require S/MIME encryption on all mail then we suggest to use our IMAP service and configure your S/MIME certificate for your alias for inbound mail.

The following email clients have built-in S/MIME support:

Email Client Platform Notes Apple Mail macOS Built-in S/MIME support. Go to Mail > Preferences > Accounts > your account > Trust to configure certificates. Apple Mail iOS Built-in S/MIME support. Go to Settings > Mail > Accounts > your account > Advanced > S/MIME to configure. Microsoft Outlook Windows Built-in S/MIME support. Go to File > Options > Trust Center > Trust Center Settings > Email Security to configure. Microsoft Outlook macOS Built-in S/MIME support. Go to Tools > Accounts > Advanced > Security to configure. Thunderbird Desktop Built-in S/MIME support. Go to Account Settings > End-To-End Encryption > S/MIME to configure. GNOME Evolution Desktop Built-in S/MIME support. Go to Edit > Preferences > Mail Accounts > your account > Security to configure. KMail Desktop Built-in S/MIME support. Go to Settings > Configure KMail > Identities > your identity > Cryptography to configure.

Congratulations! You've successfully configured S/MIME encryption for your alias.

Question 61

Do you support Sieve email filtering?

Accepted Answer

Yes. Forward Email supports server-side Sieve filtering based on RFC 5228. Scripts filter incoming messages before mailbox delivery. A script is rejected if it requests an unavailable capability or uses an extension without declaring it in require.

The complete, implementation-backed capability list and RFC notes are available in the Sieve protocol documentation.

Available Sieve capabilities

Category Capabilities and behavior Core language keep, discard, stop, conditional blocks, and the base address, header, exists, size, and boolean tests. Delivery fileinto, copy, redirect, mailbox for fileinto :create, and special-use for standard-folder :specialuse mapping and specialuse_exists. Tests and comparisons envelope, body, date, index, regex, subaddress, relational, i;ascii-casemap, and i;octet. State and variables variables, imap4flags, duplicate, and ihave. Actions and responses reject, ereject, vacation, vacation-seconds, and enotify using mailto:. The legacy declaration require "notify" is accepted as an input alias for enotify, but enotify is the advertised capability. Message processing editheader, environment, and mime, including foreverypart, break, extracttext, and replace.

redirect is delivered through the normal outbound queue. It is subject to the configured redirect-domain policy, denylist checks, and rate limits. editheader cannot modify protected authentication or delivery-routing headers.

Features not supported

Feature Reason enclose Creating a new message that encloses the original message is not implemented. mailboxexists Forward Email does not make live IMAP mailbox-state queries. fileinto :create remains available through mailbox. include Global and included script storage is not available. mboxmetadata / servermetadata IMAP METADATA integration is not available. fcc Sent-mail filing integration is not available. encoded-character The ${hex:...} syntax is not implemented. External lists valid_ext_list and other external-list operations are not available.

Example Sieve scripts

File newsletters into a folder:

require ["fileinto"]; if header :contains "List-Id" "newsletter" { fileinto "Newsletters"; }

Auto-reply when on vacation:

require ["vacation", "vacation-seconds"]; vacation :seconds 604800 :subject "Out of Office" "I am currently out of the office and will respond when I return.";

Create a folder when filing a message:

require ["fileinto", "imap4flags", "mailbox"]; if address :is "from" "boss@example.com" { fileinto :create :flags ["\Flagged"] "Important"; }

Redirect a message:

require ["redirect"]; if header :contains "Subject" "invoice" { redirect "recipient@example.com"; }

Managing Sieve scripts

You can manage Sieve scripts in several ways:

Note: Sieve filtering is applied to incoming messages before mailbox delivery. Scripts are executed in priority order, and the first matching action determines how the message is handled.

Security: Redirects are checked against configured policy and rate limits. Vacation responses and notifications are rate-limited to prevent abuse.

Question 62

Do you support MTA-STS?

Accepted Answer

Yes, as of March 2, 2023 we support MTA-STS. You can use this template if you wish to enable it on your domain.

Our configuration can be found publicly on GitHub at https://github.com/forwardemail/mta-sts.forwardemail.net.

Question 63

Do you support passkeys and WebAuthn?

Accepted Answer

Yes! As of December 13, 2023 we have added support for passkeys due to high demand.

Passkeys allow you to securely log in without requiring a password and two-factor authentication.

You can validate your identity with touch, facial recognition, device-based password, or PIN.

We allow you to manage up to 30 passkeys at once, so that you can log in with all of your devices with ease.

Learn more about passkeys at the following links:

Question 64

Is two-factor authentication (2FA) supported?

Accepted Answer

Yes, for logging into your account — including webmail — via one-time passcodes, backed by recovery keys.

2FA applies to your account login itself, not to IMAP, SMTP, POP3, CalDAV, or CardDAV connections from third-party clients (Thunderbird, Apple Mail, etc.) — those authenticate with an alias-specific generated password instead, so there isn't currently a 2FA-equivalent standard for that class of client. If you'd like to see that change, a GitHub feature request is the best way to make the case for it.

Typ	Hostname	Protokol	Porty
IMAP	`imap.forwardemail.net`	SSL/TLS preferováno	`993` a `2993`
SMTP	`smtp.forwardemail.net`	SSL/TLS doporučeno	`465` a `2465` pro SSL/TLS (doporučeno) nebo `587`, `2587`, `2525` a `25` pro STARTTLS

Formát	Přípona	Popis
`sqlite`	`.sqlite`	Surový šifrovaný snímek `sqlite` obsahující záznamy poštovní schránky, kontaktů, kalendáře a událostí kalendáře; výchozí automatická záloha IMAP ve formátu `.sqlite`.
`mbox`	`.zip`	Heslem chráněný `.zip` obsahující soubory `mbox` (MBOX) poštovní schránky a složky `Contacts` (VCF) a `Calendars` (ICS).
`eml`	`.zip`	Heslem chráněný `.zip` obsahující jednotlivé soubory `.eml` (formát `eml`) a složky `Contacts` (VCF) a `Calendars` (ICS).

Přepínač	Popis
`--path <path>`	Cesta k zašifrovanému SQLite záložnímu souboru
`--password <pass>`	IMAP/alias heslo pro dešifrování
`--output <path>`	Výstupní cesta pro ZIP soubor (výchozí: automaticky generováno s ISO 8601 časem)
`--help`	Zobrazit nápovědu

Registrátor	Kroky konfigurace
1&1	Přihlaste se Centrum domén (Vyberte svou doménu) Upravit nastavení DNS
Amazon Route 53	Přihlaste se Hostované zóny (Vyberte svou doménu)
Aplus.net	Přihlaste se Moje servery Správa domén Správce DNS
Bluehost	PRO ROCK: Přihlaste se Domény (Klikněte na ikonu ▼ vedle správy) DNS PRO LEGACY: Přihlaste se Domény Editor zón (Vyberte svou doménu)
Cloudflare	Přihlaste se DNS
DNS Made Easy	Přihlaste se DNS (Vyberte svou doménu)
DNSimple	Přihlaste se (Vyberte svou doménu) DNS Spravovat
Digital Ocean	Přihlaste se Síťování Domény (Vyberte svou doménu) Více Spravovat doménu
Domain.com	Přihlaste se V zobrazení karet klikněte na správu své domény V seznamu klikněte na ikonu ozubeného kola DNS a nameservery DNS záznamy
Domains.com Sledujte	Přihlaste se (Vyberte svou doménu) Spravovat (klikněte na ikonu ozubeného kola) Klikněte na DNS & Nameservers v levém menu
DreamHost	Přihlaste se Panel Domény Spravovat domény DNS
Dyn	Přihlaste se Přehled Spravovat Jednoduchý editor Záznamy
Gandi	Přihlaste se (Vyberte svou doménu) Správa Upravit zónu
GoDaddy Sledujte	Přihlaste se Spravovat mé domény (Vyberte svou doménu) Spravovat DNS
Google Domains Sledujte	Přihlaste se (Vyberte svou doménu) Konfigurovat DNS
Namecheap Sledujte	Přihlaste se Seznam domén (Vyberte svou doménu) Spravovat Pokročilý DNS
Netlify	Přihlaste se (Vyberte svou doménu) Nastavit Netlify DNS
Network Solutions	Přihlaste se Správce účtu Moje domény (Vyberte svou doménu) Spravovat Změnit cílovou adresu domény Pokročilý DNS
Shopify Sledujte	Přihlaste se Spravované domény (Vyberte svou doménu) Nastavení DNS
Squarespace	Přihlaste se Hlavní menu Nastavení Domény (Vyberte svou doménu) Pokročilá nastavení Vlastní záznamy
Vercel's Now	Použijte CLI "now" `now dns add [domain] '@' MX [record-value] [priority]`
Weebly	Přihlaste se Stránka domén (Vyberte svou doménu) DNS
Wix	Přihlaste se Stránka domén (Klikněte na ikonu ) Vyberte Spravovat DNS záznamy
eNom	Přihlaste se Domény Moje domény
Jiný	Důležité: Nevidíte zde svého registrátora? Jednoduše vyhledejte na internetu "jak změnit DNS záznamy u $REGISTRATORA" (nahraďte $REGISTRATORA názvem svého registrátora – např. "jak změnit DNS záznamy u GoDaddy", pokud používáte GoDaddy).

Přihlášení	Příklad	Popis
Uživatelské jméno	`[email protected]`	Emailová adresa aliasu, který existuje pro doménu na Můj účet Domény.
Heslo	`************************`	Alias-specifické generované heslo.

Zákazník	Případová studie
U.S. Naval Academy	📄 Případová studie
Canonical	📄 Případová studie
Netflix Games
The Linux Foundation	📄 Případová studie
The PHP Foundation
Fox News Radio
Disney Ad Sales
jQuery	📄 Případová studie
LineageOS
Ubuntu	📄 Případová studie
Kubuntu	📄 Případová studie
Lubuntu	📄 Případová studie
The University of Cambridge	📄 Případová studie
The University of Maryland	📄 Případová studie
The University of Washington	📄 Případová studie
Tufts University	📄 Případová studie
Swarthmore College	📄 Případová studie
Government of South Australia
Government of Dominican Republic
Fly.io
RCD Hotels
Isaac Z. Schlueter (npm)	📄 Případová studie
David Heinemeier Hansson (Ruby on Rails)

Název nástroje	URL	Typ
Cloudflare Domain Categorization Feedback	https://radar.cloudflare.com/domains/feedback	Kategorizace
Spamhaus IP and Domain Reputation Checker	https://check.spamhaus.org/	DNSBL
Cisco Talos IP and Domain Reputation Center	https://talosintelligence.com/reputation_center	Reputace
Barracuda IP and Domain Reputation Lookup	https://www.barracudacentral.org/lookups/lookup-reputation	DNSBL
MX Toolbox Blacklist Check	https://mxtoolbox.com/blacklists.aspx	Blacklist
Google Postmaster Tools	https://www.gmail.com/postmaster/	Reputace
Yahoo Sender Hub	https://senders.yahooinc.com/	Reputace
MultiRBL.valli.org Blacklist Check	https://multirbl.valli.org/lookup/	DNSBL
Sender Score	https://senderscore.org/act/blocklist-remover/	Reputace
Invaluement	https://www.invaluement.com/lookup/	DNSBL
SURBL	https://www.surbl.org/	DNSBL
SpamCop	https://www.spamcop.net/bl.shtml	DNSBL
UCEPROTECT's Levels 1, 2, and 3	https://www.uceprotect.net/en/rblcheck.php	DNSBL
UCEPROTECT's backscatterer.org	https://www.backscatterer.org/	Ochrana proti backscatteru
UCEPROTECT's whitelisted.org	https://www.whitelisted.org/ (vyžaduje poplatek)	DNSWL

Poskytovatel	Formulář pro odstranění / Kontakt	Poznámky
Google/Gmail	https://support.google.com/mail/contact/bulk_send_new	Formulář pro kontakt hromadných odesílatelů
Microsoft (Outlook/Office 365/Hotmail)	https://sender.office.com	Portál pro odstranění IP z Office 365
Yahoo/AOL/Verizon	https://senders.yahooinc.com/	Yahoo Sender Hub
Apple/iCloud	https://ipcheck.proofpoint.com/	Apple používá Proofpoint pro reputaci IP
Proofpoint	https://ipcheck.proofpoint.com/	Kontrola a odstranění IP u Proofpoint
Barracuda Networks	https://www.barracudacentral.org/lookups/lookup-reputation	Kontrola reputace a odstranění u Barracuda
Cloudmark	https://csi.cloudmark.com/en/reset/	Žádost o reset u Cloudmark CSI
GoDaddy/SecureServer	https://unblock.secureserver.net	Formulář pro odblokování IP u GoDaddy
Comcast/Xfinity	https://spa.xfinity.com/report	Žádost o odstranění IP u Comcast
Charter/Spectrum	https://www.spectrum.net/support/internet/understanding-email-error-codes	Kontaktujte podporu Spectrum pro odstranění
AT&T	`[email protected]`	E-mail pro žádost o odstranění
Cox Communications	`[email protected]`	E-mail pro žádost o odstranění
CenturyLink/Lumen	`[email protected]`	Používá Cloudfilter
Windstream	`[email protected]`	E-mail pro žádost o odstranění
t-online.de (Německo)	`[email protected]`	E-mail pro žádost o odstranění
Orange France	https://postmaster.orange.fr/	Použijte kontaktní formulář nebo e-mail `[email protected]`
GMX	https://postmaster.gmx.net/en/contact	Kontaktní formulář GMX postmastera
Mail.ru	https://postmaster.mail.ru/	Portál Mail.ru postmastera
Yandex	https://postmaster.yandex.ru/	Portál Yandex postmastera
QQ Mail (Tencent)	https://open.mail.qq.com/	Žádost o zařazení na whitelist QQ Mail (čínsky)
Netease (163.com)	https://mail.163.com/postmaster/	Portál Netease postmastera
Alibaba/Aliyun/HiChina	https://www.alibabacloud.com/help/en/alibaba-mail/	Kontakt přes konzoli Alibaba Cloud
Amazon SES	https://docs.aws.amazon.com/ses/latest/dg/faqs-dnsbls.html	Konzole AWS SES > Odstranění z blacklistu
SendGrid	https://support.sendgrid.com/	Kontaktujte podporu SendGrid
Mimecast	https://community.mimecast.com/	Používá třetí strany RBL - kontaktujte konkrétní RBL
Fastmail	https://www.fastmail.com/support/	Kontaktujte podporu Fastmail
Zoho	https://help.zoho.com/portal/en/kb/campaigns/faqs/campaign-review/articles/how-do-i-delist-my-ip-address	Kontaktujte podporu Zoho
ProtonMail	https://proton.me/support/contact	Kontaktujte podporu Proton
Tutanota	https://tutanota.com/support	Kontaktujte podporu Tutanota
Hushmail	https://www.hushmail.com/support/	Kontaktujte podporu Hushmail
Mailbox.org	https://mailbox.org/en/support	Kontaktujte podporu Mailbox.org
Posteo	https://posteo.de/en/site/contact	Kontaktujte podporu Posteo
DuckDuckGo Email	https://duckduckgo.com/email/support	Kontaktujte podporu DuckDuckGo
Sonic.net	https://www.sonic.com/support	Kontaktujte podporu Sonic
Telus	https://www.telus.com/en/support	Kontaktujte podporu Telus
Vodafone Germany	https://www.vodafone.de/hilfe/	Kontaktujte podporu Vodafone
Xtra (Spark NZ)	https://www.spark.co.nz/help/	Kontaktujte podporu Spark NZ
UOL/BOL (Brazílie)	https://ajuda.uol.com.br/	Kontaktujte podporu UOL (portugalsky)
Libero (Itálie)	https://aiuto.libero.it/	Kontaktujte podporu Libero (italsky)
Telenet (Belgie)	https://www2.telenet.be/en/support/	Kontaktujte podporu Telenet
Facebook/WhatsApp	https://www.facebook.com/business/help	Kontaktujte podporu Facebook business
LinkedIn	https://www.linkedin.com/help/linkedin	Kontaktujte podporu LinkedIn
Groups.io	https://groups.io/helpcenter	Kontaktujte podporu Groups.io
Earthlink/Vade Secure	https://sendertool.vadesecure.com/en/	Nástroj odesílatele Vade Secure
Cloudflare Email Security	https://www.cloudflare.com/products/zero-trust/email-security/	Kontaktujte podporu Cloudflare
Hornetsecurity/Expurgate	https://www.hornetsecurity.com/	Kontaktujte podporu Hornetsecurity
SpamExperts/Antispamcloud	https://www.spamexperts.com/	Kontakt přes poskytovatele hostingu
Mail2World	https://www.mail2world.com/support/	Kontaktujte podporu Mail2World

Název	Formát	Platforma	GitHub URL
MBox Viewer	Mbox	Windows	https://github.com/eneam/mboxviewer
mbox-web-viewer	Mbox	Všechny platformy	https://github.com/PHMRanger/mbox-web-viewer
EmlReader	EML	Windows	https://github.com/ayamadori/EmlReader
Email viewer	EML	VSCode	https://github.com/joelharkes/vscode_email_viewer
eml-reader	EML	Všechny platformy	https://github.com/s0ph1e/eml-reader
Additionally if you need to convert a Mbox file to EML file, then you can use https://github.com/noelmartinon/mboxzilla.

Poskytovatel e-mailu	Formát exportu	Pokyny k exportu
Gmail	MBOX	https://takeout.google.com/settings/takeout/custom/gmail
Outlook	PST	Tip: Pokud používáte Outlook (formát exportu PST), můžete jednoduše postupovat podle pokynů v části "Jiné" níže. Nicméně níže jsme poskytli odkazy na převod PST do formátu MBOX/EML podle vašeho operačního systému: Zinkuba pro Windows (GitHub) readpst pro Windows cygwin – (např. `readpst -u -o $OUT_DIR $IN_DIR` s nahrazením `$OUT_DIR` a `$IN_DIR` cestami k výstupnímu a vstupnímu adresáři). readpst pro Ubuntu/Linux – (např. `sudo apt-get install readpst` a poté `readpst -u -o $OUT_DIR $IN_DIR`, s nahrazením `$OUT_DIR` a `$IN_DIR` cestami k výstupnímu a vstupnímu adresáři). readpst pro macOS (přes brew) – (např. `brew install libpst` a poté `readpst -u -o $OUT_DIR $IN_DIR`, s nahrazením `$OUT_DIR` a `$IN_DIR` cestami k výstupnímu a vstupnímu adresáři). PST Converter pro Windows (GitHub)
Apple Mail	MBOX	https://support.apple.com/guide/mail/import-or-export-mailboxes-mlhlp1030/mac#apd37a3190755974
Fastmail	EML	https://www.fastmail.help/hc/en-us/articles/360060590573-Download-all-your-data#downloadmail
Proton Mail	MBOX/EML	https://proton.me/support/export-emails-import-export-app
Tutanota	EML	https://github.com/crepererum-oss/tatutanatata
Gandi	EML	https://docs.gandi.net/en/gandimail/common_operations/backup_email.html#contents
Zoho	EML	https://www.zoho.com/mail/help/import-export-emails.html#alink2
Jiné	Použijte Thunderbird	Nastavte svůj stávající e-mailový účet v Thunderbirdu a poté použijte plugin ImportExportTools NG k exportu a importu svého e-mailu. Také můžete jednoduše zkopírovat/vložit nebo přetáhnout e-maily mezi účty.

Platforma	Architektura	Soubor
Linux	x64	`convert-sqlite-to-eml-linux-x64`
Linux	arm64	`convert-sqlite-to-eml-linux-arm64`
macOS	Apple Silicon	`convert-sqlite-to-eml-darwin-arm64`
Windows	x64	`convert-sqlite-to-eml-win-x64.exe`

Name/Host/Alias	TTL	Type	Priority	Answer/Value
"@", ".", nebo prázdné	3600	MX	0	`mx1.forwardemail.net`
"@", ".", nebo prázdné	3600	MX	0	`mx2.forwardemail.net`

Jméno/Hostitel/Alias	TTL	Typ	Odpověď/Hodnota
"@", ".", nebo prázdné	3600	TXT	`forward-email=hello:[email protected],support:[email protected]`
"@", ".", nebo prázdné	3600	TXT	`forward-email=help:[email protected],foo:[email protected]`
"@", ".", nebo prázdné	3600	TXT	`forward-email=orders:[email protected],baz:[email protected]`
"@", ".", nebo prázdné	3600	TXT	`forward-email=info:[email protected],beep:[email protected]`
"@", ".", nebo prázdné	3600	TXT	`forward-email=errors:[email protected],boop:[email protected]`

E-mailový klient	Platforma	Doporučený plugin	Poznámky
Thunderbird	Desktop	Nastavení OpenPGP v Thunderbirdu	Thunderbird má vestavěnou podporu pro OpenPGP.
Gmail	Prohlížeč	Mailvelope nebo FlowCrypt (proprietární licence)	Gmail nepodporuje OpenPGP, ale můžete si stáhnout open-source plugin Mailvelope nebo FlowCrypt.
Apple Mail	macOS	Free-GPGMail	Apple Mail nepodporuje OpenPGP, ale můžete si stáhnout open-source plugin Free-GPGMail.
Apple Mail	iOS	PGPro nebo FlowCrypt (proprietární licence)	Apple Mail nepodporuje OpenPGP, ale můžete si stáhnout open-source plugin PGPro nebo FlowCrypt.
Outlook	Windows	gpg4win	Desktopový e-mailový klient Outlook nepodporuje OpenPGP, ale můžete si stáhnout open-source plugin gpg4win.
Outlook	Prohlížeč	Mailvelope nebo FlowCrypt (proprietární licence)	Webový e-mailový klient Outlook nepodporuje OpenPGP, ale můžete si stáhnout open-source plugin Mailvelope nebo FlowCrypt.
Android	Mobilní	OpenKeychain nebo FlowCrypt	Android mail klienti jako Thunderbird Mobile a FairEmail oba podporují open-source plugin OpenKeychain. Alternativně můžete použít open-source (proprietární licence) plugin FlowCrypt.
Google Chrome	Prohlížeč	Mailvelope nebo FlowCrypt (proprietární licence)	Můžete si stáhnout open-source rozšíření prohlížeče Mailvelope nebo FlowCrypt.
Mozilla Firefox	Prohlížeč	Mailvelope nebo FlowCrypt (proprietární licence)	Můžete si stáhnout open-source rozšíření prohlížeče Mailvelope nebo FlowCrypt.
Microsoft Edge	Prohlížeč	Mailvelope	Můžete si stáhnout open-source rozšíření prohlížeče Mailvelope.
Brave	Prohlížeč	Mailvelope nebo FlowCrypt (proprietární licence)	Můžete si stáhnout open-source rozšíření prohlížeče Mailvelope nebo FlowCrypt.
Balsa	Desktop	Nastavení OpenPGP v Balsa	Balsa má vestavěnou podporu pro OpenPGP.
KMail	Desktop	Nastavení OpenPGP v KMail	KMail má vestavěnou podporu pro OpenPGP.
GNOME Evolution	Desktop	Nastavení OpenPGP v Evolution	GNOME Evolution má vestavěnou podporu pro OpenPGP.
Terminál	Desktop	Nastavení gpg v Terminálu	Můžete použít open-source gpg příkazový nástroj k vygenerování nového klíče z příkazové řádky.

E-mailový klient	Platforma	Poznámky
Apple Mail	macOS	Vestavěná podpora S/MIME. Jděte do Mail > Preferences > Accounts > váš účet > Trust pro konfiguraci certifikátů.
Apple Mail	iOS	Vestavěná podpora S/MIME. Jděte do Nastavení > Mail > Účty > váš účet > Pokročilé > S/MIME pro konfiguraci.
Microsoft Outlook	Windows	Vestavěná podpora S/MIME. Jděte do Soubor > Možnosti > Centrum zabezpečení > Nastavení centra zabezpečení > E-mailová bezpečnost pro konfiguraci.
Microsoft Outlook	macOS	Vestavěná podpora S/MIME. Jděte do Nástroje > Účty > Pokročilé > Zabezpečení pro konfiguraci.
Thunderbird	Desktop	Vestavěná podpora S/MIME. Jděte do Nastavení účtu > End-To-End Encryption > S/MIME pro konfiguraci.
GNOME Evolution	Desktop	Vestavěná podpora S/MIME. Jděte do Upravit > Předvolby > E-mailové účty > váš účet > Zabezpečení pro konfiguraci.
KMail	Desktop	Vestavěná podpora S/MIME. Jděte do Nastavení > Konfigurace KMail > Identity > vaše identita > Kryptografie pro konfiguraci.

Kategorie	Schopnosti a chování
Core language	`keep`, `discard`, `stop`, podmíněné bloky a základní testy `address`, `header`, `exists`, `size` a logické testy.
Delivery	`fileinto`, `copy`, `redirect`, `mailbox` pro `fileinto :create`, a `special-use` pro mapování standardních složek `:specialuse` a `specialuse_exists`.
Tests and comparisons	`envelope`, `body`, `date`, `index`, `regex`, `subaddress`, `relational`, `i;ascii-casemap`, a `i;octet`.
State and variables	`variables`, `imap4flags`, `duplicate`, a `ihave`.
Actions and responses	`reject`, `ereject`, `vacation`, `vacation-seconds`, a `enotify` používající `mailto:`. Zastaralé prohlášení `require "notify"` je přijímáno jako vstupní alias pro `enotify`, ale `enotify` je inzerovaná schopnost.
Message processing	`editheader`, `environment`, a `mime`, včetně `foreverypart`, `break`, `extracttext`, a `replace`.

Funkce	Důvod
`enclose`	Vytvoření nové zprávy, která obaluje původní zprávu, není implementováno.
`mailboxexists`	Forward Email neprovádí živé dotazy na stav IMAP schránek. `fileinto :create` zůstává dostupné přes `mailbox`.
`include`	Globální a vkládané úložiště skriptů není k dispozici.
`mboxmetadata` / `servermetadata`	Integrace IMAP METADATA není k dispozici.
`fcc`	Integrace pro ukládání odeslané pošty není k dispozici.
`encoded-character`	Syntax `${hex:...}` není implementována.
External lists	`valid_ext_list` a další operace s externími seznamy nejsou k dispozici.

Název aliasu	Efekt	Test
`/^(linus\|torvalds)$/`	E-maily na `[email protected]` nebo `[email protected]`	(zobrazit test na RegExr)
`/^24highst(reet)$/`	E-maily na `[email protected]` nebo `[email protected]`	(zobrazit test na RegExr)

Token	Popis
`%SUBDOMAIN%`	Štítek (štítky) subdomény pod kořenovou doménou příchozího příjemce. Například pro `[email protected]` (kořen `example.com`) je to `sales` a pro `[email protected]` je to `a.b`. Pro kořenovou/vrcholovou doménu je to prázdný řetězec.
`%HOST%`	Úplný hostitel (doména) příchozího příjemce. Například pro `[email protected]` je to `sales.example.com`.

Úroveň	Rozsah	Výchozí limit	Popis
Pro alias	Jednotlivý alias	Žádný (použije se limit domény)	Volitelné. Pokud má alias nastavený vlastní `smtp_limit`, kontroluje se jako první.
Pro doménu	Všechny e-maily odeslané z domény za den	300/day	Započítává všechny odchozí e-maily napříč všemi aliasy na doméně.
Pro uživatele	Všechny e-maily odeslané uživatelským účtem za den	300/day	Zabraňuje obejití odstraněním a znovuvytvořením aliasů nebo domén.

Protokol	Hostname	Porty	IPv4	IPv6	Poznámky
`SSL/TLS` Doporučeno	`smtp.forwardemail.net`	`465`, `2465`	✅	✅	Moderní TLS 1.2+ (doporučeno)
`TLS` (STARTTLS)	`smtp.forwardemail.net`	`587`, `2587`, `2525`, `25`	✅	✅	Podporováno (preferujte SSL/TLS port `465`)
`SSL/TLS` Pouze legacy	`smtp.forwardemail.net`	`2455`	✅	✅	⚠️ TLS 1.0 pouze pro stará zařízení
`TLS` (STARTTLS) Pouze legacy	`smtp.forwardemail.net`	`2555`	✅	✅	⚠️ TLS 1.0 pouze pro stará zařízení
Přihlášení	Příklad	Popis
---------	--------------------------	-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Uživatelské jméno	`[email protected]`	Emailová adresa aliasu, který existuje pro doménu v Můj účet Domény.
Heslo	`************************`	Alias

Protokol	Hostitel	Porty	IPv4	IPv6
`SSL/TLS` Preferováno	`pop3.forwardemail.net`	`995`, `2995`	✅	✅
Přihlášení	Příklad	Popis
---------	-------------------------	-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Uživatelské jméno	`[email protected]`	Emailová adresa aliasu, který existuje pro doménu na Můj účet Domény.
Heslo	`************************`	Alias-specifické generované heslo.

Typ	Název/Hostitel	Cíl/Hodnota
CNAME	`autoconfig`	`autoconfig.forwardemail.net`
CNAME	`autodiscover`	`autodiscover.forwardemail.net`

Typ	Název/Hostitel	Priorita	Váha	Port	Cíl/Hodnota	Účel
SRV	`_imaps._tcp`	0	1	993	`imap.forwardemail.net`	IMAP přes SSL/TLS (doporučeno)
SRV	`_imap._tcp`	0	0	0	`.`	Nešifrovaný IMAP zakázán
SRV	`_submissions._tcp`	0	1	465	`smtp.forwardemail.net`	SMTP odesílání (SSL/TLS, doporučeno)
SRV	`_submission._tcp`	5	1	587	`smtp.forwardemail.net`	SMTP odesílání (STARTTLS)
SRV	`_pop3s._tcp`	10	1	995	`pop3.forwardemail.net`	POP3 přes SSL/TLS
SRV	`_pop3._tcp`	0	0	0	`.`	Nešifrovaný POP3 zakázán
SRV	`_caldavs._tcp`	0	1	443	`caldav.forwardemail.net`	CalDAV přes TLS (kalendáře)
SRV	`_caldav._tcp`	0	0	0	`.`	Nešifrovaný CalDAV zakázán
SRV	`_carddavs._tcp`	0	1	443	`carddav.forwardemail.net`	CardDAV přes TLS (kontakty)
SRV	`_carddav._tcp`	0	0	0	`.`	Nešifrovaný CardDAV zakázán

Klient	E-mail	CalDAV/CardDAV
Thunderbird	`autoconfig` CNAME nebo SRV záznamy	`autoconfig` XML nebo SRV záznamy (RFC 6764)
Apple Mail (macOS)	SRV záznamy (RFC 6186)	SRV záznamy (RFC 6764)
Apple Mail (iOS)	SRV záznamy (RFC 6186)	SRV záznamy (RFC 6764)
Microsoft Outlook	`autodiscover` CNAME nebo `_autodiscover._tcp` SRV	Nepodporováno
GNOME (Evolution)	SRV záznamy (RFC 6186)	SRV záznamy (RFC 6764)
KDE (KMail)	SRV záznamy (RFC 6186)	SRV záznamy (RFC 6764)
eM Client	`autoconfig` nebo `autodiscover`	SRV záznamy (RFC 6764)

Poskytovatel	Certifikace rámce ochrany osobních údajů	Stránka souladu s GDPR
Cloudflare	✅ Ano	https://www.cloudflare.com/trust-hub/gdpr/
DataPacket	❌ Ne	https://www.datapacket.com/privacy-policy
DigitalOcean	❌ Ne	https://www.digitalocean.com/legal/gdpr
GitHub	✅ Ano	https://docs.github.com/en/site-policy/privacy-policies/github-data-protection-agreement
Vultr	❌ Ne	https://www.vultr.com/legal/eea-gdpr-privacy/

Funkce	Co se uchovává	Doba uchování
Přeposílání e‑mailů (alias, který přeposílá na jinou adresu nebo webhook)	Nic. Zpráva je zpracována výhradně v paměti a předána na cílové místo; nikdy není zapsána na disk ani do databáze.	Žádná – zpráva je zahozena okamžitě po pokusu o doručení
Protokoly chyb SMTP (odpovědi `4xx`/`5xx`)	Chyba SMTP, obálka a e‑mailové hlavičky. Ne tělo zprávy ani přílohy.	7 dní (viz Ukládáte chybové logy)
Antiabuzní cache (greylist, denylist, omezování rychlosti)	Klíče odvozené z údajů o odesílateli a příjemci (adresy, domény, hashe), žádný obsah zprávy.	Až 30 dní (viz Máte greylist a Máte denylist)
Úložiště schránky (IMAP/POP3/CalDAV/CardDAV, je‑li na aliasu povoleno)	Zprávy, kontakty a kalendáře v individuálně šifrované schránce SQLite, kterou lze otevřít pouze vaším heslem.	Dokud neodstraníte zprávu, alias, doménu nebo účet (viz Jak exportuji a zálohuji svou schránku)
Odchozí SMTP	Záznamy fronty pro doručování a hlášení chyb. Těla zpráv se po úspěšném doručení nebo trvalé chybě ve výchozím nastavení uchovávají 0 dní; můžete to zvýšit nejvýše na 30 dní na doménu.	~30 dní pro záznamy fronty (viz naše Zásady ochrany osobních údajů)

Pole	Hodnota
Subzpracovatel	Forward Email LLC
Registrován v	State of Delaware, United States
Služba	Přeposílání e‑mailů (příchozí MX) a, je‑li povoleno, šifrované úložiště schránky (IMAP/POP3/CalDAV/CardDAV) a odchozí SMTP
Zpracovávané osobní údaje	E‑mailové adresy, metadata obálky a hlaviček a obsah zpráv při přenosu (pro přeposílání pouze v paměti; pro úložiště schránky šifrované v klidu)
Místo zpracování	United States (Denver, Colorado)
Doba uchování	Viz Kde se zpracovává a ukládá příchozí e‑mail pro mou doménu a jak dlouho
Mechanismus předávání	Jak je stanoveno na našich stránkách Data Processing Agreement a GDPR
Naši subzpracovatelé	Uvedeni na naší stránce GDPR a v DPA (aktuálně Cloudflare, DataPacket, DigitalOcean, GitHub, Vultr, Stripe a PayPal)
Zástupce v EU (čl. 27)	Osano International Compliance Services Limited, Dublin, Irsko – úplná adresa na naší stránce GDPR
Zástupce ve Spojeném království	Osano UK Compliance LTD, Belfast – úplná adresa na naší stránce GDPR
Dohoda o zpracování údajů	https://forwardemail.net/dpa (přijímá se spolu s našimi Podmínkami; podepsaná kopie je poskytována v rámci Enterprise License)
Kontakt pro bezpečnost	[email protected]

Jak vám můžeme pomoci?

Rychlý start

Úvod

E-mailoví klienti

Konfigurace

Testování

Konfigurace

Testování

Konfigurace

Testování

Instalace

Konfigurace

Testování

Řešení problémů

Nástroje pro kontrolu reputace a blacklistů

Formuláře pro žádost o odstranění IP podle poskytovatele

Správa dat

Nastavení

Jak fungují zálohy

Formáty záloh

Pojmenování souborů a struktura klíčů

Vlastnictví dat a politika mazání

Bezpečnost

Oznámení o chybách

API

Instalace

Použití

Výstupní formát

Jak to funguje

Konfigurace e-mailu

Pokročilé funkce

Dostupné schopnosti Sieve

Funkce, které nejsou podporovány

Příklady Sieve skriptů

Správa Sieve skriptů

Příklady pro zvýšenou ochranu soukromí

Příklady pro bezplatný tarif

Požadované záznamy DNS pro zástupné subdomény

Tokeny pro nahrazení subdomény

Možnost A: CNAME záznamy (nejjednodušší)

Možnost B: SRV záznamy (přímé)

Které e-mailové klienty podporují automatické zjišťování?

Bezpečnost

Systémové a technické detaily

Účet a fakturace

Další zdroje

Ještě zůstat?

Limit	Rozsah	Množství
Denní celkem	Všechny služby dohromady (IMAP, POP3, SMTP, CalDAV, CardDAV)	50 GB
Hodinový na službu	Na jednotlivou službu (např. IMAP stahování, SMTP nahrávání)	10 GB

Name/Host/Alias	TTL	Type	Answer/Value
"@", ".", nebo prázdné	3600	TXT	`forward-email=hello:[email protected]`
"@", ".", nebo prázdné	3600	TXT	`forward-email=hello:[email protected]`