Connect an IMAP inbox (coming)

Status: coming, not available yet. You cannot connect an IMAP inbox today. This page describes the rules we decided, so you know what to expect. We update it when the feature ships, and it is live only when you see "Other (IMAP)" in the Connect screen of your dashboard.

IMAP is the standard way many mail providers let an app read an inbox. It has no permissions of its own, so Nickbox limits what the assistant can do by itself.

What you will be able to connect

Inboxes from providers such as iCloud, Fastmail, Yahoo, Zoho, AOL and GMX, and from other providers that support IMAP. Nickbox will recognize those providers from your address and show you the mail server it found, so you can confirm it before connecting. For any other provider you will type the server yourself.

Two kinds of inbox do not use this route. Gmail connects with Google's own sign-in, and Microsoft inboxes connect with Microsoft's. If you enter one of those addresses, Nickbox will send you to the right guide.

Use an app password, not your normal password

Most providers ask you to create a separate password for apps, often called an app password or an app-specific password. Create one in your provider's security settings, use it in Nickbox, and revoke it there whenever you want. Your normal password never goes into Nickbox. Providers differ in the exact menu, so when a connection fails Nickbox will explain the usual cause for that provider, such as "iCloud asks for an app-specific password".

How the connection is protected

• Nickbox connects over TLS only: incoming mail on port 993, outgoing on port 465 or 587. Certificates must be valid, and servers with a self-signed certificate are refused.
• The app password is stored encrypted. Only the Nickbox mail server can decrypt it. The dashboard cannot, and no API returns it.
• Nickbox will never permanently delete messages and will never run the IMAP expunge command. "Delete" will mean a move to the trash folder.

Modes for an IMAP inbox

Mode	What your assistant can do
read	Search and read. This is where every inbox starts.
draft	Also save drafts. Nothing is sent.
send_approval	Also prepare messages. Nothing leaves until you approve that exact message in your dashboard.
full	Also mark messages as read or flagged and move them between folders. A message to a new recipient still needs your approval.

An app password gives access to the whole inbox, and IMAP has no way to limit it to reading. So here the limit is enforced by Nickbox on its own server, on every call, not by your provider. Some features depend on the provider. For example, filtering by "has attachment" and moving messages are not available on every server, and Nickbox will say so instead of guessing.

Disconnect it

When the feature ships, removing the inbox in the dashboard will delete the stored password. Also revoke the app password in your provider's settings.