PayShield

Mailbox setup

Connect a mailbox without guessing the settings.

Manual .eml upload works immediately. Mailbox monitoring is optional and uses IMAP with an app-specific password when your email provider allows it. Microsoft, work, school, and university accounts may need OAuth or admin approval.

The simple rule

  1. Use an app password, not your normal email password.
  2. Use IMAP over SSL/TLS on port 993.
  3. Use your full email address as the username unless your provider says otherwise.
  4. If the provider blocks the connection, upload .eml files manually and ask your IT admin.

What the app stores

The app stores encrypted connection material and scan metadata. It does not return your app password, encrypted token material, or full mailbox body in API responses. You can delete a mailbox connection from the app.

Usually works now

Gmail

Provider
Gmail
Host
imap.gmail.com
Port
993
Password
Google app password
  1. Enable IMAP in Gmail settings.
  2. Turn on 2-Step Verification.
  3. Create a Google app password for Mail.
  4. Paste that app password into the mailbox form.

Google Workspace accounts may block app passwords or IMAP.

Open Gmail IMAP settings Open Google app passwords
Google app password help
OAuth preferred

Outlook / Microsoft 365

Provider
Outlook
Host
outlook.office365.com
Port
993
Password
Usually OAuth, not normal password
  1. Use manual .eml upload if you are unsure.
  2. Only try IMAP if your Microsoft account or tenant allows it.
  3. For work, school, or university accounts, ask IT for approval.

Microsoft commonly requires Modern Auth/OAuth2. A proper OAuth connector should be the next safer path.

Open Outlook POP/IMAP settings
Microsoft IMAP help
Usually works now

Yahoo Mail

Provider
IMAP
Host
imap.mail.yahoo.com
Port
993
Password
Yahoo app password
  1. Open Yahoo Account Security.
  2. Generate an app password.
  3. Use your full Yahoo email address.

If Yahoo cannot create an app password, use manual upload and try again later.

Open Yahoo Account Security
Yahoo app password help
Usually works now

iCloud Mail

Provider
IMAP
Host
imap.mail.me.com
Port
993
Password
Apple app-specific password
  1. Enable two-factor authentication on your Apple Account.
  2. Create an app-specific password.
  3. Use your iCloud email. If that fails, try the username before @icloud.com.
Open Apple Account security
Apple iCloud Mail settings
Usually works now

Zoho Mail

Provider
IMAP
Host
imap.zoho.com
Port
993
Password
Zoho app-specific password if 2FA is enabled
  1. Confirm IMAP is enabled in Zoho Mail settings.
  2. If 2FA is enabled, create an app-specific password.
  3. Use your full Zoho email address.

Some Zoho plans or organization policies may block IMAP.

Open Zoho Mail settings Open Zoho app passwords
Zoho IMAP help
Usually works now

Fastmail

Provider
IMAP
Host
imap.fastmail.com
Port
993
Password
Fastmail app password
  1. Create an app password in Fastmail settings.
  2. Use your Fastmail username or email address.
  3. Use imap.fastmail.com unless Fastmail tells you to use a proxy host.
Open Fastmail security settings
Fastmail app password help
Advanced

Proton Mail

Provider
IMAP
Host
From Proton Mail Bridge
Port
From Proton Mail Bridge
Password
Bridge-generated password
  1. Install Proton Mail Bridge.
  2. Copy the IMAP host, port, username, and password shown by Bridge.
  3. Use those exact values in the app.

This is best for private/local setups, not a simple public SaaS path.

Open Proton Mail Bridge
Proton Bridge help
Usually works now

AOL Mail

Provider
IMAP
Host
imap.aol.com or export.imap.aol.com
Port
993
Password
AOL app password when required
  1. Open AOL Account Security.
  2. Generate an app password if AOL requires it.
  3. Use your full AOL email address.

If one official AOL host fails, try the alternate host listed by AOL support.

Open AOL Account Security
AOL app password help
Custom

Other IMAP / custom domain

Provider
IMAP
Host
Ask your provider or IT admin
Port
993
Password
App password if available
  1. Find the provider's incoming IMAP server.
  2. Confirm SSL/TLS is enabled on port 993.
  3. Ask IT whether third-party mailbox access is allowed.

If the provider only supports OAuth, use manual .eml upload for now.