-
-
Notifications
You must be signed in to change notification settings - Fork 653
/
Copy pathindex.html
2799 lines (2799 loc) · 341 KB
/
index.html
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
<!DOCTYPE html>
<html xmlns="http://www.w3.org/1999/xhtml" lang="" xml:lang="">
<head>
<meta charset="utf-8" />
<meta name="generator" content="pandoc" />
<meta name="viewport" content="width=device-width, initial-scale=1.0, user-scalable=yes" />
<title>FAQ FairEmail</title>
<style>
code{white-space: pre-wrap;}
span.smallcaps{font-variant: small-caps;}
span.underline{text-decoration: underline;}
div.column{display: inline-block; vertical-align: top; width: 50%;}
div.hanging-indent{margin-left: 1.5em; text-indent: -1.5em;}
ul.task-list{list-style: none;}
</style>
</head>
<body>
<header id="title-block-header">
<h1 class="title">FAQ FairEmail</h1>
</header>
<p><a name="top"></a> # FairEmail support</p>
<p>🌎 <a href="https://translate.google.com/translate?sl=en&u=https%3A%2F%2Fm66b.github.io%2FFairEmail%2F">Google Translate</a></p>
<p>🇬🇧 If you have a question, please check the following frequently asked questions first. <a href="#quick-support">At the bottom</a>, you can find out how to ask other questions, request features, and report bugs. You will receive an answer in your own language.</p>
<p>🇩🇪 Wenn Sie eine Frage haben, überprüfen Sie bitte zuerst die folgenden häufig gestellten Fragen. <a href="#quick-support">Unten</a> erfahren Sie, wie Sie andere Fragen stellen, Funktionen anfordern und Fehler melden können. Sie erhalten eine Antwort in Ihrer eigenen Sprache.</p>
<p>🇫🇷 Si vous avez une question, veuillez d’abord vérifier les questions fréquemment posées suivantes. <a href="#quick-support">En bas</a>, vous pouvez découvrir comment poser d’autres questions, demander des fonctionnalités et signaler des bogues. Vous recevrez une réponse dans votre propre langue.</p>
<p><br></p>
<p><strong>Important</strong></p>
<p>There is a lot of technical information in this FAQ, mostly for specific problems or specific use cases. For other more common questions, please see the tutorials below or contact me via <em>Get support</em> below.</p>
<p><br></p>
<h2 id="tutorials">Tutorials</h2>
<p>Please <a href="https://github.com/M66B/FairEmail/tree/master/tutorials">see here</a> for tutorials 📖.</p>
<h2 id="index">Index</h2>
<ul>
<li><a href="#authorizing-accounts">Authorizing accounts</a></li>
<li><a href="#howto">How to …?</a></li>
<li><a href="#known-problems">Known problems</a></li>
<li><a href="#planned-features">Planned features</a></li>
<li><a href="#frequently-asked-questions">Frequently Asked Questions</a> (FAQ)</li>
<li><a href="#get-support">Get support</a></li>
</ul>
<h2>
<a name="authorizing-accounts"></a>Authorizing accounts
</h2>
<p>🌎 <a href="https://translate.google.com/translate?sl=en&u=https%3A%2F%2Fm66b.github.io%2FFairEmail%2F%23authorizing-accounts">Google Translate</a></p>
<p>In most cases, the quick setup wizard will be able to automatically identify the correct configuration.</p>
<p>If the quick setup wizard fails, you’ll need to manually set up an account (to receive email) and an identity (to send email). For this you’ll need the IMAP and SMTP server addresses and port numbers, whether SSL/TLS or STARTTLS should be used and your username (mostly, but not always, your email address) and your password.</p>
<p>Searching for <em>IMAP</em> and the name of the provider is mostly sufficient to find the right documentation.</p>
<p>In some cases, you’ll need to enable external access to your account and/or to use a special (app) password, for instance when two-factor authentication is enabled.</p>
<p>For authorizing:</p>
<ul>
<li>Gmail / G suite, see <a href="#faq6">question 6</a></li>
<li>Outlook / Live / Hotmail, see <a href="#faq14">question 14</a></li>
<li>Office 365, see <a href="#faq156">question 156</a></li>
<li>Microsoft Exchange, see <a href="#faq8">question 8</a></li>
<li>Yahoo, AOL and Sky, see <a href="#faq88">question 88</a></li>
<li>Apple iCloud, see <a href="#faq148">question 148</a> (<a href="https://support.apple.com/de-de/HT204397">German</a>)</li>
<li>Free.fr, see <a href="#faq157">question 157</a></li>
<li>Posteo: please check if <a href="https://posteo.de/en/help/activating-additional-email-account-protection">additional email account protection</a> (<a href="https://posteo.de/hilfe/zusaetzlichen-postfachschutz-deaktivieren">German</a>) isn’t enabled</li>
<li>Posteo: not that there is <a href="https://posteo.de/en/help/how-does-the-posteo-spam-filter-work">no spam folder</a> (<a href="https://posteo.de/hilfe/wie-funktioniert-der-posteo-spamfilter">German</a>)</li>
<li>Web.de: please check if <a href="https://hilfe.web.de/pop-imap/imap/imap-serverdaten.html">IMAP is enabled</a></li>
<li>Web.de: with two factor authentication you’ll need to use <a href="https://web.de/email/sicherheit/zwei-faktor-authentifizierung/">an app password</a></li>
<li>GMX: please check if <a href="https://support.gmx.com/pop-imap/toggle.html">IMAP is enabled</a> (<a href="https://hilfe.gmx.net/pop-imap/einschalten.html">German</a>). Reportedly, you need to do this on a desktop computer.</li>
<li>GMX: with two factor authentication you’ll need to use <a href="https://support.gmx.com/security/2fa/application-specific-passwords.html">an app password</a> (<a href="https://hilfe.gmx.net/sicherheit/2fa/anwendungsspezifisches-passwort.html">German</a>). Not that enabling two-factor authentication does not automatically enable IMAP.</li>
<li>T-online.de: please make sure you use <a href="https://www.telekom.de/hilfe/festnetz-internet-tv/e-mail/e-mail-adresse-passwoerter-und-sicherheit/passwort-fuer-e-mail-programme-einrichten">an email password</a> (German) and not your account password</li>
<li>Ionos (1und1): please make sure you use <a href="https://www.ionos.de/hilfe/e-mail/problemloesungen-mail-basicmail-business/passwort-fuer-e-mail-konto-bei-11-ionos-aendern/">an email password</a> (German) and not your account password</li>
<li>Yandex: please check if <a href="https://yandex.com/support/mail/mail-clients/others.html">IMAP is enabled</a></li>
<li>Comcast/Xfinity: please check if <a href="https://www.xfinity.com/support/articles/third-party-email-access">third part email access</a> is enabled</li>
</ul>
<p>Please see <a href="#faq22">here</a> for common error messages and solutions.</p>
<p>Related questions:</p>
<ul>
<li><a href="#faq111">Is OAuth supported?</a></li>
<li><a href="#faq133">Why is ActiveSync ™ not supported?</a></li>
</ul>
<p><a name="howto"></p>
<h2 id="how-to">How to …?</h2>
<p>🌎 <a href="https://translate.google.com/translate?sl=en&u=https%3A%2F%2Fm66b.github.io%2FFairEmail%2F%23howto">Google Translate</a></p>
<ul>
<li>Change the account name: (Main) Settings, tap Manual setup, tap Accounts, tap account</li>
<li>Change the swipe left/right target: (Main) Settings, tab page Behavior, Set swipe actions (*)</li>
<li>Change password: (Main) Settings, tap Manual setup, tap Accounts, tap account, change password</li>
<li>Set a signature: (Main) Settings, tap Manual setup, tap Identities, tap identity, Edit signature.</li>
<li>Set a default CC or BCC address: (Main) Settings, tap Manual setup, tap Identities, tap identity, tap Advanced.</li>
<li>Add CC and BCC addresses: tap the people’s icon at the end of the subject</li>
<li>Go to the next/previous message on archive/delete: in the behavior settings disable <em>Automatically close conversations</em> and select <em>Go to next/previous conversation</em> for <em>On closing a conversation</em></li>
<li>Add a folder to the unified inbox: long press the folder in the folder list and tick <em>Show in unified inbox</em></li>
<li>Add a folder to the navigation menu: long press the folder in the folder list and tick <em>Show in navigation menu</em></li>
<li>Load more messages: long press a folder in the folder list, select <em>Fetch more messages</em></li>
<li>Delete a message, skipping trash: long press the trash icon</li>
<li>Delete an account/identity: (Main) Settings, tap Manual setup, tap Accounts/Identities, tap the account/identity, trash icon top right</li>
<li>Delete a folder: long press the folder in the folder list, Edit properties, trash icon top right</li>
<li>Undo send: Outbox, swipe the message in the list left or right</li>
<li>Delete a contact: please <a href="#faq171">see this FAQ</a></li>
<li>Store sent messages in the inbox: please <a href="#faq142">see this FAQ</a></li>
<li>Change system folders: (Main) Settings, tap Manual setup, tap Accounts, tap account, at the bottom</li>
<li>Export/import settings: (Main) Settings, navigation (left side) menu</li>
</ul>
<p>(*) Swipe actions for individual and POP3 accounts can be configured in the account setting: (Main) Settings, tap Manual setup, tap Accounts, tap account</p>
<h2>
<a name="known-problems"></a>Known problem
</h2>
<p>🌎 <a href="https://translate.google.com/translate?sl=en&u=https%3A%2F%2Fm66b.github.io%2FFairEmail%2F%23known-problems">Google Translate</a></p>
<ul>
<li><del>A <a href="https://issuetracker.google.com/issues/37054851">bug in Android 5.1 and 6</a> causes apps to sometimes show a wrong time format. Toggling the Android setting <em>Use 24-hour format</em> might temporarily solve the issue. A workaround was added.</del></li>
<li><del>A <a href="https://issuetracker.google.com/issues/126362828">bug in Google Drive</a> causes files exported to Google Drive to be empty. Google has fixed this.</del></li>
<li><del>A <a href="https://issuetracker.google.com/issues/78495471">bug in AndroidX</a> causes FairEmail to occasionally crash on long pressing or swiping. Google has fixed this.</del></li>
<li><del>A <a href="https://issuetracker.google.com/issues/138441698">bug in AndroidX ROOM</a> causes sometimes a crash with “<em>… Exception while computing database live data … Couldn’t read row …</em>”. A workaround was added.</del></li>
<li>A <a href="https://issuetracker.google.com/issues/119872129">bug in Android</a> causes FairEmail to crash with “<em>… Bad notification posted …</em>” on some devices once after updating FairEmail and tapping on a notification.</li>
<li>A <a href="https://issuetracker.google.com/issues/62427912">bug in Android</a> sometimes causes a crash with “<em>… ActivityRecord not found for …</em>” after updating FairEmail. Reinstalling (<a href="https://stackoverflow.com/questions/46309428/android-activitythread-reportsizeconfigurations-causes-app-to-freeze-with-black">source</a>) might fix the problem.</li>
<li>A <a href="https://issuetracker.google.com/issues/37018931">bug in Android</a> sometimes causes a crash with <em>… InputChannel is not initialized …</em> on some devices.</li>
<li><del>A <a href="https://review.lineageos.org/c/LineageOS/android_frameworks_base/+/265273">bug in LineageOS</a> sometimes causes a crash with <em>… java.lang.ArrayIndexOutOfBoundsException: length=…; index=… …</em>.</del></li>
<li>A bug in Nova Launcher on Android 5.x causes FairEmail to crash with a <em>java.lang.StackOverflowError</em> when Nova Launcher has access to the accessibility service.</li>
<li><del>The folder selector sometimes shows no folders for yet unknown reasons. This seems to be fixed.</del></li>
<li><del>A <a href="https://issuetracker.google.com/issues/64729576">bug in AndroidX</a> makes it hard to grap the fast scroller. A workaround was added.</del></li>
<li><del>Encryption with YubiKey results into an infinite loop. This seems to be caused by a <a href="https://github.com/open-keychain/open-keychain/issues/2507">bug in OpenKeychain</a>.</del></li>
<li>A preview of a message text doesn’t (always) appear on Samsung watches because <a href="https://developer.android.com/reference/androidx/core/app/NotificationCompat.Builder.html#setLocalOnly(boolean)">setLocalOnly</a> seem to be ignored. Message preview texts are known to be displayed correctly on Pebble 2, Fitbit Charge 3, Mi band 3, and Xiaomi Amazfit BIP smartwatches. See also <a href="#faq126">this FAQ</a>.</li>
<li>A <a href="https://issuetracker.google.com/issues/37068143">bug in Android 6.0</a> causes a crash with <em>… Invalid offset: … Valid range is …</em> when text is selected and tapping outside of the selected text. This bug has been fixed in Android 6.0.1.</li>
<li>Internal (anchor) links will not work because original messages are shown in an embedded WebView in a scrolling view (the conversation list). This is an Android limitation which cannot be fixed or worked around.</li>
<li>Language detection <a href="https://issuetracker.google.com/issues/173337263">is not working anymore</a> on Pixel devices with (upgraded to?) Android 11</li>
<li>A <a href="https://github.com/open-keychain/open-keychain/issues/2688">bug in OpenKeychain</a> causes invalid PGP signatures when using a hardware token.</li>
<li>Search suggestions causes the keyboard losing focus on Android 12L.</li>
<li><a href="https://techcommunity.microsoft.com/t5/outlook/outlook-office-365-imap-idle-is-broken/m-p/3616242">A bug</a> in the Outlook IMAP server causes delayed new message notifications.</li>
</ul>
<p><a name="redmi"></a> <a name="oneplus"></a> <a name="oppo"></a></p>
<p><br /></p>
<p><strong>Xiaomi Redmi / OnePlus / Oppo</strong></p>
<p>🌎 <a href="https://translate.google.com/translate?sl=en&u=https%3A%2F%2Fm66b.github.io%2FFairEmail%2F%23redmi">Google Translate</a></p>
<p>On some Xiaomi Redmi (Note) devices, some OnePlus devices with Android 12 and some Oppo devices with Android 12 the database occasionally gets corrupted, resulting in total data loss (on the device only, unless you are using a POP3 account with the option <em>Leave messages on server</em> disabled).</p>
<p>The cause of this problem are disk I/O errors due to an Android bug (more likely) or maybe a hardware issue (less likely), please <a href="https://www.sqlite.org/rescode.html#ioerr_write">see here</a>.</p>
<p>“<em>This error might result from a hardware malfunction or because a filesystem came unmounted while the file was open.</em>”</p>
<p>This can’t be fixed by the app and should be fixed by manufacturer of the device.</p>
<p><strong>Please do not blame the app for this!</strong></p>
<p>For the record the stack trace:</p>
<pre><code>android.database.sqlite.SQLiteDiskIOException: disk I/O error (code 778)
at io.requery.android.database.sqlite.SQLiteConnection.nativeExecute(SourceFile:-2)
at io.requery.android.database.sqlite.SQLiteConnection.execute(SQLiteConnection:595)
at io.requery.android.database.sqlite.SQLiteSession.endTransactionUnchecked(SQLiteSession:447)
at io.requery.android.database.sqlite.SQLiteSession.endTransaction(SQLiteSession:411)
at io.requery.android.database.sqlite.SQLiteDatabase.endTransaction(SQLiteDatabase:551)
at androidx.room.RoomDatabase.internalEndTransaction(RoomDatabase:594)
at androidx.room.RoomDatabase.endTransaction(RoomDatabase:584)</code></pre>
<p>The cause might be <a href="https://ericsink.com/entries/sqlite_android_n.html">changes in Android 7 Nougat</a>, which is why sqlite isn’t bundled anymore since version 1.1970.</p>
<h2>
<a name="planned-features"></a>Planned features
</h2>
<p>🌎 <a href="https://translate.google.com/translate?sl=en&u=https%3A%2F%2Fm66b.github.io%2FFairEmail%2F%23planned-features">Google Translate</a></p>
<ul>
<li>✔ <del>Synchronize on demand (manual)</del></li>
<li>✔ <del>Semi-automatic encryption</del></li>
<li>✔ <del>Copy message</del></li>
<li>✔ <del>Colored stars</del></li>
<li>✔ <del>Notification settings per folder</del></li>
<li>✔ <del>Select local images for signatures</del></li>
<li>✔ <del>Show messages matched by a rule</del></li>
<li>❌ <del><a href="https://tools.ietf.org/html/rfc5804">ManageSieve</a></del> (there are no maintained Java libraries with a suitable license and without dependencies and besides that, FairEmail has its own filter rules)</li>
<li>✔ <del>Search for messages with/without attachments</del> (on-device only because IMAP doesn’t support searching for attachments)</li>
<li>✔ <del>Search for a folder</del></li>
<li>✔ <del>Search suggestions</del></li>
<li>❌ <del><a href="https://autocrypt.org/autocrypt-spec-1.0.0.pdf">Autocrypt Setup Message</a> (section 4.4)</del> (IMO it is not a good idea to let an email client handle sensitive encryption keys for an exceptional use case while OpenKeychain can export keys too)</li>
<li>✔ <del>Generic unified folders</del></li>
<li>✔ <del>New per account message notification schedules</del> (implemented by adding a time condition to rules so messages can be snoozed during selected periods)</li>
<li>✔ <del>Copy accounts and identities</del></li>
<li>✔ <del>Pinch zoom</del></li>
<li>✔ <del>More compact folder view</del></li>
<li>✔ <del>Compose lists</del></li>
<li>❌ <del>Compose tables</del> (the Android editor doesn’t support tables)</li>
<li>✔ <del>Pinch zoom text size</del></li>
<li>✔ <del>Display GIFs</del></li>
<li>✔ <del>Themes</del></li>
<li>❌ <del>Any day time condition</del> (any day doesn’t really fit into the from/to date/time condition)</li>
<li>✔ <del>Send as attachment</del></li>
<li>✔ <del>Widget for selected account</del></li>
<li>✔ <del>Remind to attach files</del></li>
<li>✔ <del>Select domains to show images for</del></li>
<li>✔ <del>Unified starred messages view</del> (implemented as saved search)</li>
<li>✔ <del>Move notification action</del></li>
<li>✔ <del>S/MIME support</del></li>
<li>✔ <del>Search for settings</del></li>
<li>POP3 folders</li>
<li>Bottom action bar</li>
</ul>
<p>Anything on this list is in random order and <em>might</em> be added in the near future.</p>
<h2>
<a name="frequently-asked-questions"></a>Frequently Asked Questions
</h2>
<p>🌎 <a href="https://translate.google.com/translate?sl=en&u=https%3A%2F%2Fm66b.github.io%2FFairEmail%2F%23frequently-asked-questions">Google Translate</a></p>
<ul>
<li><a href="#faq1">(1) Which permissions are needed and why?</a></li>
<li><a href="#faq2">(2) Why is there a permanent notification shown?</a></li>
<li><a href="#faq3">(3) What are operations and why are they pending?</a></li>
<li><a href="#faq4">(4) How can I use an invalid security certificate / empty password / plain text connection?</a></li>
<li><a href="#faq5">(5) How can I customize the message view?</a></li>
<li><a href="#faq6">(6) How can I login to Gmail / G suite?</a></li>
<li><a href="#faq7">(7) Why are sent messages not appearing (directly) in the sent folder?</a></li>
<li><a href="#faq8">(8) Can I use a Microsoft Exchange account?</a></li>
<li><a href="#faq9">(9) What are identities / how do I add an alias / configure a default CC or BCC address?</a></li>
<li><a href="#faq11"><del>(11) Why is POP not supported?</del></a></li>
<li><a href="#faq10"><del>(10) What does ‘UIDPLUS not supported’ mean?</del></a></li>
<li><a href="#faq12">(12) How does encryption/decryption work?</a></li>
<li><a href="#faq13">(13) How does search on device/server work?</a></li>
<li><a href="#faq14">(14) How can I set up an Outlook / Live / Hotmail account?</a></li>
<li><a href="#faq15">(15) Why does the message text keep loading?</a></li>
<li><a href="#faq16">(16) Why are messages not being synchronized?</a></li>
<li><a href="#faq17"><del>(17) Why does manual synchronize not work?</del></a></li>
<li><a href="#faq18">(18) Why is the message preview not always shown?</a></li>
<li><a href="#faq19">(19) Why are the pro features so expensive?</a></li>
<li><a href="#faq20">(20) Can I get a refund?</a></li>
<li><a href="#faq21">(21) How do I enable the notification light?</a></li>
<li><a href="#faq22">(22) What does account/folder error … mean?</a></li>
<li><a href="#faq23">(23) Why do I get alert …?</a></li>
<li><a href="#faq24">(24) What is browse messages on the server?</a></li>
<li><a href="#faq25">(25) Why can’t I select/open/save an image, attachment or a file?</a></li>
<li><a href="#faq26">(26) Can I help to translate FairEmail in my own language?</a></li>
<li><a href="#faq27">(27) How can I distinguish between embedded and external images?</a></li>
<li><a href="#faq28">(28) How can I manage status bar notifications?</a></li>
<li><a href="#faq29">(29) How can I get new message notifications for other folders?</a></li>
<li><a href="#faq30">(30) How can I use the provided quick settings?</a></li>
<li><a href="#faq31">(31) How can I use the provided shortcuts?</a></li>
<li><a href="#faq32">(32) How can I check if reading email is really safe?</a></li>
<li><a href="#faq33">(33) Why are edited sender addresses not working?</a></li>
<li><a href="#faq34">(34) How are identities matched?</a></li>
<li><a href="#faq35">(35) Why should I be careful with viewing images, attachments, the original message, and opening links?</a></li>
<li><a href="#faq36">(36) How are settings files encrypted?</a></li>
<li><a href="#faq37">(37) How are passwords stored?</a></li>
<li><a href="#faq39">(39) How can I reduce the battery usage of FairEmail?</a></li>
<li><a href="#faq40">(40) How can I reduce the data usage of FairEmail?</a></li>
<li><a href="#faq41">(41) How can I fix the error ‘Handshake failed’?</a></li>
<li><a href="#faq42">(42) Can you add a new provider to the list of providers?</a></li>
<li><a href="#faq43">(43) Can you show the original …?</a></li>
<li><a href="#faq44">(44) Can you show contact photos / identicons in the sent folder?</a></li>
<li><a href="#faq45">(45) How can I fix ‘This key is not available. To use it, you must import it as one of your own!’?</a></li>
<li><a href="#faq46">(46) Why does the message list keep refreshing?</a></li>
<li><a href="#faq47">(47) How do I solve the error ‘No primary account or no drafts folder’?</a></li>
<li><a href="#faq48"><del>(48) How do I solve the error ‘No primary account or no archive folder’?</del></a></li>
<li><a href="#faq49">(49) How do I fix ‘An outdated app sent a file path instead of a file stream’?</a></li>
<li><a href="#faq50">(50) Can you add an option to synchronize all messages?</a></li>
<li><a href="#faq51">(51) How are folders sorted?</a></li>
<li><a href="#faq52">(52) Why does it take some time to reconnect to an account?</a></li>
<li><a href="#faq53">(53) Can you stick the message action bar to the top/bottom?</a></li>
<li><a href="#faq54"><del>(54) How do I use a namespace prefix?</del></a></li>
<li><a href="#faq55">(55) How can I mark all messages as read / move or delete all messages?</a></li>
<li><a href="#faq56">(56) Can you add support for JMAP?</a></li>
<li><a href="#faq57">(57) Can I use HTML in signatures?</a></li>
<li><a href="#faq58">(58) What does an open/closed email icon mean?</a></li>
<li><a href="#faq59">(59) Can original messages be opened in the browser?</a></li>
<li><a href="#faq60">(60) Did you know …?</a></li>
<li><a href="#faq61">(61) Why are some messages shown dimmed?</a></li>
<li><a href="#faq62">(62) Which authentication methods are supported?</a></li>
<li><a href="#faq63">(63) How are images resized for displaying on screens?</a></li>
<li><a href="#faq64"><del>(64) Can you add custom actions for swipe left/right?</del></a></li>
<li><a href="#faq65">(65) Why are some attachments shown dimmed?</a></li>
<li><a href="#faq66">(66) Is FairEmail available in the Google Play Family Library?</a></li>
<li><a href="#faq67">(67) How can I snooze conversations?</a></li>
<li><a href="#faq68"><del>(68) Why can Adobe Acrobat reader not open PDF attachments / Microsoft apps not open attached documents?</del></a></li>
<li><a href="#faq69">(69) Can you add auto scroll up on new message?</a></li>
<li><a href="#faq70">(70) When will messages be auto expanded?</a></li>
<li><a href="#faq71">(71) How do I use filter rules?</a></li>
<li><a href="#faq72">(72) What are primary accounts/identities?</a></li>
<li><a href="#faq73">(73) Is moving messages across accounts safe/efficient?</a></li>
<li><a href="#faq74">(74) Why do I see duplicate messages?</a></li>
<li><a href="#faq75">(75) Can you make an iOS, Windows, Linux, etc version?</a></li>
<li><a href="#faq76">(76) What does ‘Clear local messages’ do?</a></li>
<li><a href="#faq77">(77) Why are messages sometimes shown with a small delay?</a></li>
<li><a href="#faq78">(78) How do I use schedules?</a></li>
<li><a href="#faq79">(79) How do I use synchronize on demand (manual)?</a></li>
<li><a href="#faq80"><del>(80) How do I fix the error ‘Unable to load BODYSTRUCTURE’?</del></a></li>
<li><a href="#faq81">(81) Can you make the background of the original message view dark in dark themes?</a></li>
<li><a href="#faq82">(82) What is a tracking image?</a></li>
<li><a href="#faq84">(84) What are local contacts for?</a></li>
<li><a href="#faq85">(85) Why is an identity not available?</a></li>
<li><a href="#faq86"><del>(86) What are ‘extra privacy features’?</del></a></li>
<li><a href="#faq87">(87) What does ‘invalid credentials’ mean?</a></li>
<li><a href="#faq88">(88) How can I use a Yahoo/AT&T, AOL or Sky account?</a></li>
<li><a href="#faq89">(89) How can I send plain text only messages?</a></li>
<li><a href="#faq90">(90) Why are some texts linked while not being a link?</a></li>
<li><a href="#faq91"><del>(91) Can you add periodical synchronization to save battery power?</del></a></li>
<li><a href="#faq92">(92) Can you add spam filtering, verification of the DKIM signature and SPF authorization?</a></li>
<li><a href="#faq93">(93) Can you allow installation/data storage on external storage media (sdcard)?</a></li>
<li><a href="#faq94">(94) What does the red/orange stripe at the end of the header mean?</a></li>
<li><a href="#faq95">(95) Why are not all apps shown when selecting an attachment or image?</a></li>
<li><a href="#faq96">(96) Where can I find the IMAP and SMTP settings?</a></li>
<li><a href="#faq97">(97) What is ‘cleanup’?</a></li>
<li><a href="#faq98">(98) Why can I still pick contacts after revoking contacts permissions?</a></li>
<li><a href="#faq99">(99) Can you add a rich text or markdown editor?</a></li>
<li><a href="#faq100">(100) How can I synchronize Gmail categories?</a></li>
<li><a href="#faq101">(101) What does the blue/orange dot at the bottom of the conversations mean?</a></li>
<li><a href="#faq102">(102) How can I enable auto rotation of images?</a></li>
<li><a href="#faq158">(103) How can I record audio?</a></li>
<li><a href="#faq104">(104) What do I need to know about error reporting?</a></li>
<li><a href="#faq105">(105) How does the roam-like-at-home option work?</a></li>
<li><a href="#faq106">(106) Which launchers can show a badge count with the number of unread messages?</a></li>
<li><a href="#faq107">(107) How do I use colored stars?</a></li>
<li><a href="#faq108"><del>(108) Can you add permanently delete messages from any folder?</del></a></li>
<li><a href="#faq109"><del>(109) Why is ‘select account’ available in official versions only?</del></a></li>
<li><a href="#faq110">(110) Why are (some) messages empty and/or attachments corrupted?</a></li>
<li><a href="#faq111">(111) Is OAuth supported?</a></li>
<li><a href="#faq112">(112) Which email provider do you recommend?</a></li>
<li><a href="#faq113">(113) How does biometric authentication work?</a></li>
<li><a href="#faq114">(114) Can you add an import for the settings of other email apps?</a></li>
<li><a href="#faq115"><del>(115) Can you add email address chips?</del></a></li>
<li><a href="#faq116"><del>(116) How can I show images in messages from trusted senders by default?</del></a></li>
<li><a href="#faq117">(117) How can I restore a purchase (on another device) ?</a></li>
<li><a href="#faq118">(118) What does ‘Remove tracking parameters’ exactly?</a></li>
<li><a href="#faq119"><del>(119) Can you add colors to the unified inbox widget?</del></a></li>
<li><a href="#faq120">(120) Why are new message notifications not removed on opening the app?</a></li>
<li><a href="#faq121">(121) How are messages grouped into a conversation?</a></li>
<li><a href="#faq122"><del>(122) Why is the recipient name/email address show with a warning color?</del></a></li>
<li><a href="#faq123">(123) What will happen when FairEmail cannot connect to an email server?</a></li>
<li><a href="#faq124">(124) Why do I get ‘Message too large or too complex to display’?</a></li>
<li><a href="#faq125">(125) What are the current experimental features?</a></li>
<li><a href="#faq126">(126) Can message previews be sent to my smartwatch?</a></li>
<li><a href="#faq127">(127) How can I fix ‘Syntactically invalid HELO argument(s)’?</a></li>
<li><a href="#faq128">(128) How can I reset asked questions, for example to show images?</a></li>
<li><a href="#faq129">(129) Are ProtonMail, Tutanota, etc supported?</a></li>
<li><a href="#faq130">(130) What does message error … mean?</a></li>
<li><a href="#faq131">(131) Can you change the direction for swiping to previous/next message?</a></li>
<li><a href="#faq132">(132) Why are new message notifications silent?</a></li>
<li><a href="#faq133">(133) Why is ActiveSync ™ not supported?</a></li>
<li><a href="#faq134">(134) Can you add leave messages on the server?</a></li>
<li><a href="#faq135">(135) Why are trashed messages and drafts shown in conversations?</a></li>
<li><a href="#faq136">(136) How can I delete an account/identity/folder?</a></li>
<li><a href="#faq137">(137) How can I reset ‘Don’t ask again’?</a></li>
<li><a href="#faq138">(138) Can you add calendar/contact/tasks/notes management?</a></li>
<li><a href="#faq139">(139) How do I fix ‘User is authenticated but not connected’?</a></li>
<li><a href="#faq140">(140) Why does the message text contain strange characters?</a></li>
<li><a href="#faq141">(141) How can I fix ‘A drafts folder is required to send messages’?</a></li>
<li><a href="#faq142">(142) How can I store sent messages in the inbox?</a></li>
<li><a href="#faq143"><del>(143) Can you add a trash folder for POP3 accounts?</del></a></li>
<li><a href="#faq144">(144) How can I record voice notes?</a></li>
<li><a href="#faq145">(145) How can I set a notification sound for an account, folder, sender or condition?</a></li>
<li><a href="#faq146">(146) How can I fix incorrect message times?</a></li>
<li><a href="#faq147">(147) What should I know about third party versions?</a></li>
<li><a href="#faq148">(148) How can I use an Apple iCloud account?</a></li>
<li><a href="#faq149">(149) How does the unread message count widget work?</a></li>
<li><a href="#faq150">(150) Can you add cancelling calendar invites?</a></li>
<li><a href="#faq151">(151) Can you add backup/restore of messages?</a></li>
<li><a href="#faq152">(152) How can I insert a contact group?</a></li>
<li><a href="#faq153">(153) Why does permanently deleting Gmail message not work?</a></li>
<li><a href="#faq154"><del>(154) Can you add favicons as contact photos?</del></a></li>
<li><a href="#faq155">(155) What is a winmail.dat file?</a></li>
<li><a href="#faq156">(156) How can I set up an Office 365 account?</a></li>
<li><a href="#faq157">(157) How can I set up an Free.fr account?</a></li>
<li><a href="#faq158">(158) Which camera / audio recorder do you recommend?</a></li>
<li><a href="#faq159">(159) What are Disconnect’s tracker protection lists?</a></li>
<li><a href="#faq160">(160) Can you add permanent deletion of messages without confirmation?</a></li>
<li><a href="#faq161">(161) Can you add a setting to change the primary and accent color?</a></li>
<li><a href="#faq162">(162) Is IMAP NOTIFY supported?</a></li>
<li><a href="#faq163">(163) What is message classification?</a></li>
<li><a href="#faq164">(164) Can you add customizable themes?</a></li>
<li><a href="#faq165">(165) Is Android Auto supported?</a></li>
<li><a href="#faq166">(166) Can I snooze a message across multiple devices?</a></li>
<li><a href="#faq167">(167) How can I use DeepL?</a></li>
<li><a href="#faq168">(168) What is a spam block list?</a></li>
<li><a href="#faq169">(169) Why does the app not start automatically?</a></li>
<li><a href="#faq170">(170) Why can’t folders be created with POP3?</a></li>
<li><a href="#faq171">(171) How can I delete a contact?</a></li>
<li><a href="#faq172">(172) How can I import contacts?</a></li>
<li><a href="#faq173">(173) What is the difference between Play store / GitHub / F-Droid version?</a></li>
<li><a href="#faq174">(174) Is auto discovery supported?</a></li>
<li><a href="#faq175">(175) Why should battery optimizations be disabled?</a></li>
<li><a href="#faq176">(176) When will a message be considered safely transported?</a></li>
<li><a href="#faq177">(177) What does ‘Sensitivity’ mean?</a></li>
<li><a href="#faq178">(178) Why are widgets not updating?</a></li>
<li><a href="#faq179">(179) What are reply templates?</a></li>
<li><a href="#faq180">(180) How do I use LanguageTool?</a></li>
<li><a href="#faq181">(181) How do I use VirusTotal?</a></li>
<li><a href="#faq182">(182) How can I select how a link should be opened?</a></li>
<li><a href="#faq183">(183) How do I use Send?</a></li>
<li><a href="#faq184">(184) How do I password protect content?</a></li>
<li><a href="#faq185">(185) Can I install FairEmail on Windows?</a></li>
<li><a href="#faq186">(186) How can I let the app auto store iCalendar invitations?</a></li>
<li><a href="#faq187">(187) Are colored stars synchronized across devices?</a></li>
<li><a href="#faq188">(188) Why is Google backup disabled?</a></li>
<li><a href="#faq189">(189) What is cloud sync?</a></li>
<li><a href="#faq190">(190) How do I use OpenAI (ChatGPT)?</a></li>
<li><a href="#faq191">(191) How do I download and keep older messages on my device?</a></li>
<li><a href="#faq192">(192) How can I resolve ‘Couldn’t connect to host, port: …; timeout …;’ ?</a></li>
<li><a href="#faq193">(193) How can I import Outlook contacts?</a></li>
<li><a href="#faq194">(194) How can I set up automatic deletion of old messages?</a></li>
<li><a href="#faq195">(195) Why are all messages in the archive folder of Gmail?</a></li>
<li><a href="#faq196">(196) Can you add empty trash on leaving the app?</a></li>
<li><a href="#faq197">(197) How can I print a message?</a></li>
<li><a href="#faq198">(198) Can you add spell checking?</a></li>
</ul>
<p><a href="#get-support">I have another question.</a></p>
<p><a name="faq1"></a> <strong>(1) Which permissions are needed and why?</strong></p>
<p>🌎 <a href="https://translate.google.com/translate?sl=en&u=https%3A%2F%2Fm66b.github.io%2FFairEmail%2F%23faq1">Google Translate</a></p>
<p>The following Android permissions are <strong>required</strong>:</p>
<ul>
<li><em>have full network access</em> (INTERNET): to send and receive via the internet</li>
<li><em>view network connections</em> (ACCESS_NETWORK_STATE): to monitor connectivity changes (mobile data, WiFi)</li>
<li><em>run at startup</em> (RECEIVE_BOOT_COMPLETED): to start sending and receiving on device start</li>
<li><em>run foreground service</em> (FOREGROUND_SERVICE/DATA_SYNC): to run a foreground service on Android 9 Pie and later, see also the next question</li>
<li><em>schedule exact alarm</em> (SCHEDULE_EXACT_ALARM): to use exact alarm scheduling (Android 12 and later), for example to snooze messages</li>
<li><em>prevent device from sleeping</em> (WAKE_LOCK): to keep the device awake while performing actions, like synchronization of messages</li>
<li><em>use fingerprint hardware</em> (USE_FINGERPRINT) and <em>use biometric hardware</em> (USE_BIOMETRIC): to use biometric authentication (fingerprint, face unlock, etc)</li>
<li><em>ask to ingore battery optimizations</em> (REQUEST_IGNORE_BATTERY_OPTIMIZATIONS): to disable battery optimizations, please see <a href="#faq175">this FAQ</a> for more information</li>
<li><em>allow the app to show notifications</em> (POST_NOTIFICATIONS): to show new message notifications and (account) warnings and errors (Android 13 and later only)</li>
<li><em>Google Play (in-app) billing service</em> (BILLING): for in-app purchases</li>
</ul>
<p><br /></p>
<p>The following Android permissions are <strong>optional</strong>:</p>
<ul>
<li><em>read your contacts</em> (READ_CONTACTS): to auto complete addresses, to show contact photos and <a href="https://developer.android.com/guide/components/intents-common#PickContactDat">to pick contacts</a></li>
<li><em>find accounts on the device</em> (GET_ACCOUNTS): to select an account when using the Gmail quick setup</li>
<li><em>read the contents of your shared storage (SD card)</em> (READ_EXTERNAL_STORAGE): to accept files from other, outdated apps, see also <a href="#faq49">this FAQ</a></li>
<li>Android 5.1 Lollipop and before: <em>use accounts on the device</em> (USE_CREDENTIALS): to select an account when using the Gmail quick setup (not requested on later Android versions)</li>
<li>Android 5.1 Lollipop and before: <em>Read profile</em> (READ_PROFILE): to read your name when using the Gmail quick setup (not requested on later Android versions)</li>
<li>GitHub version only: <em>read and write calendar data</em> (READ_CALENDAR/WRITE_CALENDAR): to <a href="#faq186">auto-store invitations</a></li>
</ul>
<p><a href="https://developer.android.com/training/permissions/requesting">Optional permissions</a> are supported on Android 6 Marshmallow and later only. On earlier Android versions you will be asked to grant the permissions on installing FairEmail.</p>
<p><br /></p>
<p>The following permissions are needed to show the count of unread messages as a badge (see also <a href="#faq106">this FAQ</a>):</p>
<ul>
<li><em>com.sec.android.provider.badge.permission.READ</em></li>
<li><em>com.sec.android.provider.badge.permission.WRITE</em></li>
<li><em>com.htc.launcher.permission.READ_SETTINGS</em></li>
<li><em>com.htc.launcher.permission.UPDATE_SHORTCUT</em></li>
<li><em>com.sonyericsson.home.permission.BROADCAST_BADGE</em></li>
<li><em>com.sonymobile.home.permission.PROVIDER_INSERT_BADGE</em></li>
<li><em>com.anddoes.launcher.permission.UPDATE_COUNT</em></li>
<li><em>com.majeur.launcher.permission.UPDATE_BADGE</em></li>
<li><em>com.huawei.android.launcher.permission.CHANGE_BADGE</em></li>
<li><em>com.huawei.android.launcher.permission.READ_SETTINGS</em></li>
<li><em>com.huawei.android.launcher.permission.WRITE_SETTINGS</em></li>
<li><em>android.permission.READ_APP_BADGE</em></li>
<li><em>com.oppo.launcher.permission.READ_SETTINGS</em></li>
<li><em>com.oppo.launcher.permission.WRITE_SETTINGS</em></li>
<li><em>me.everything.badger.permission.BADGE_COUNT_READ</em></li>
<li><em>me.everything.badger.permission.BADGE_COUNT_WRITE</em></li>
<li><em>com.vivo.notification.permission.BADGE_ICON</em></li>
</ul>
<p><br /></p>
<p>FairEmail will keep a list of addresses you receive messages from and send messages to and will use this list for contact suggestions when no contacts permissions is granted to FairEmail. This means you can use FairEmail without the Android contacts provider (address book). Note that you can still pick contacts without granting contacts permissions to FairEmail, only suggesting contacts won’t work without contacts permissions.</p>
<p><br /></p>
<p><a name="faq2"></a> <strong>(2) Why is there a permanent notification shown?</strong></p>
<p>🌎 <a href="https://translate.google.com/translate?sl=en&u=https%3A%2F%2Fm66b.github.io%2FFairEmail%2F%23faq2">Google Translate</a></p>
<p><em>If you came here by clicking on the “monitoring” notification, you should know that the next click will open the unified inbox.</em></p>
<p>To reliably receive messages in the background the app needs to start a service, which will let Android display a status bar notification notifying you about potential battery usage.</p>
<p>The service can’t be started without a notification and the app can’t disable the notification either. However, you can disable the notification yourself, without side effects, via the notification settings of FairEmail:</p>
<ul>
<li>Android 8 Oreo and later: tap the <em>Monitoring channel</em> button and disable the channel via the Android settings (this won’t disable new message notifications)</li>
<li>Android 7 Nougat and before: enabled <em>Use background service to synchronize messages</em>, but be sure to read the remark below the setting first</li>
</ul>
<p>You can also switch to periodically synchronization of messages in the receive settings to remove the notification, but be aware that this might use more battery power. See <a href="#faq39">here</a> for more details about battery usage.</p>
<p>Android 8 Oreo might also show a status bar notification with the text <em>Apps are running in the background</em>. Please see <a href="https://www.reddit.com/r/Android/comments/7vw7l4/psa_turn_off_background_apps_notification/">here</a> about how you can disable this notification.</p>
<p><em>Background</em></p>
<p>The service is a <a href="https://developer.android.com/reference/android/app/Service.html#startForeground(int,%20android.app.Notification)">foreground service</a> and is needed to prevent Android from stopping the service when the device is sleeping (<a href="https://developer.android.com/training/monitoring-device-state/doze-standby">doze mode</a>).</p>
<p>Most, if not all, other email apps don’t show a notification with a “side effect” that new messages are often not or late being reported and that messages are not or late being sent.</p>
<p>Some other email apps download all your messages to their servers first and push messages via <a href="https://firebase.google.com/docs/cloud-messaging/">Firebase Cloud Messaging</a> to your device. For your privacy this is not a nice solution …</p>
<p><br /></p>
<p><a name="faq3"></a> <strong>(3) What are operations and why are they pending?</strong></p>
<p>🌎 <a href="https://translate.google.com/translate?sl=en&u=https%3A%2F%2Fm66b.github.io%2FFairEmail%2F%23faq3">Google Translate</a></p>
<p>The low priority status bar notification shows the number of pending operations, which can be:</p>
<ul>
<li><em>add</em>: add message to remote folder</li>
<li><em>move</em>: move message to another remote folder</li>
<li><em>copy</em>: copy message to another remote folder</li>
<li><em>fetch</em>: fetch changed (pushed) message</li>
<li><em>delete</em>: delete message from remote folder</li>
<li><em>seen</em>: mark message as read/unread in remote folder</li>
<li><em>answered</em>: mark message as answered in remote folder</li>
<li><em>flag</em>: add/remove star in remote folder</li>
<li><em>keyword</em>: add/remove IMAP flag in remote folder</li>
<li><em>label</em>: set/reset Gmail label in remote folder</li>
<li><em>headers</em>: download message headers</li>
<li><em>raw</em>: download raw message</li>
<li><em>body</em>: download message text</li>
<li><em>attachment</em>: download attachment</li>
<li><em>detach</em>: delete attachment</li>
<li><em>sync</em>: synchronize local and remote messages</li>
<li><em>subscribe</em>: subscribe to remote folder</li>
<li><em>purge</em>: delete all messages from remote folder</li>
<li><em>send</em>: send message</li>
<li><em>exists</em>: check if message exists</li>
<li><em>rule</em>: execute rule on body text</li>
<li><em>expunge</em>: permanently delete messages</li>
<li><em>report</em>: process delivery or read receipt (experimental)</li>
</ul>
<p>Operations are processed only when there is a connection to the email server or when manually synchronizing. See also <a href="#faq16">this FAQ</a>.</p>
<p><br /></p>
<p><a name="faq4"></a> <strong>(4) How can I use an invalid security certificate / empty password / plain text connection?</strong></p>
<p>🌎 <a href="https://translate.google.com/translate?sl=en&u=https%3A%2F%2Fm66b.github.io%2FFairEmail%2F%23faq4">Google Translate</a></p>
<p><em>… Untrusted … not in certificate …</em><br /> <em>… Invalid security certificate (Can’t verify identity of server) …</em><br /> <em>… Chain validation failed … timestamp check failed … Certificate expired at …</em><br /></p>
<p>This can be caused by using an incorrect host name, so first double check the host name in the advanced identity/account settings (tap <em>Manual setup and account options</em>). Please see the documentation of the email provider about the right host name. Sometimes the right host name is in the error message.</p>
<p>You should try to fix this by contacting your provider or by getting a valid security certificate because invalid security certificates are insecure and allow <a href="https://en.wikipedia.org/wiki/Man-in-the-middle_attack">man-in-the-middle attacks</a>. If money is an obstacle, you can get free security certificates from <a href="https://letsencrypt.org">Let’s Encrypt</a>.</p>
<p>The quick, but unsafe solution (not advised), is to enable <em>Insecure connections</em> in the advanced identity settings (navigation menu, tap <em>Settings</em>, tap <em>Manual setup</em>, tap <em>Identities</em>, tap the identity, tap <em>Advanced</em>).</p>
<p>Alternatively, you can accept the fingerprint of invalid server certificates like this:</p>
<ol type="1">
<li>Make sure you are using a trusted internet connection (no public Wi-Fi networks, etc)</li>
<li>Go to the setup screen via the navigation menu (swipe from the left side inwards)</li>
<li>Tap Manual setup, tap Accounts/Identities and tap the faulty account and identity</li>
<li>Check/save the account and identity</li>
<li>Tick the checkbox below the error message and save again</li>
</ol>
<p>This will “pin” the server certificate to prevent man-in-the-middle attacks.</p>
<p>Note that older Android versions might not recognize newer certification authorities like Let’s Encrypt causing connections to be considered insecure, see also <a href="https://developer.android.com/training/articles/security-ssl">here</a>.</p>
<p><br /></p>
<p><em>Trust anchor for certification path not found</em></p>
<p><em>… java.security.cert.CertPathValidatorException: Trust anchor for certification path not found …</em> means that the default Android trust manager was not able to verify the server certificate chain.</p>
<p>This could be due to the root certificate not being installed on your device or because intermediate certificates are missing, for example because the email server didn’t send them.</p>
<p>You can fix the first problem by downloading and installing the root certificate from the website of the provider of the certificate.</p>
<p>The second problem should be fixed by changing the server configuration or by importing the intermediate certificates on your device.</p>
<p>You can pin the certificate too, see above.</p>
<p><br /></p>
<p><em>Empty password</em></p>
<p>Your username is likely easily guessed, so this is pretty insecure, unless the SMTP server is available via a restricted local network or a VPN only.</p>
<p><em>Plain text connection</em></p>
<p>Your username and password and all messages will be sent and received unencrypted, which is <strong>very insecure</strong> because a <a href="https://en.wikipedia.org/wiki/Man-in-the-middle_attack">man-in-the-middle attack</a> is very simple on an unencrypted connection.</p>
<p>If you still want to use an invalid security certificate, an empty password or a plain text connection you’ll need to enable insecure connections in the account and/or identity settings. STARTTLS should be selected for plain text connections. If you enable insecure connections, you should connect via private, trusted networks only and never via public networks, like offered in hotels, airports, etc.</p>
<p><br /></p>
<p><a name="faq5"></a> <strong>(5) How can I customize the message view?</strong></p>
<p>🌎 <a href="https://translate.google.com/translate?sl=en&u=https%3A%2F%2Fm66b.github.io%2FFairEmail%2F%23faq5">Google Translate</a></p>
<p>In the three dot overflow menu you can enable or disable or select:</p>
<ul>
<li><em>text size</em>: for three different font sizes</li>
<li><em>compact view</em>: for more condensed message items and a smaller message text font</li>
</ul>
<p>In the display section of the settings you can enable or disable for example:</p>
<ul>
<li><em>Unified inbox</em>: to disable the unified inbox and to list the folders selected for the unified inbox instead</li>
<li><em>Tabular style</em>: to show a linear list instead of cards</li>
<li><em>Group by date</em>: show date header above messages with the same date</li>
<li><em>Conversation threading</em>: to disable conversation threading and to show individual messages instead</li>
<li><em>Conversation action bar</em>: to disable the bottom navigation bar</li>
<li><em>Highlight color</em>: to select a color for the sender of unread messages</li>
<li><em>Show contact photos</em>: to hide contact photos</li>
<li><em>Show names and email addresses</em>: to show names or to show names and email addresses</li>
<li><em>Show subject italic</em>: to show the message subject as normal text</li>
<li><em>Show stars</em>: to hide stars (favorites)</li>
<li><em>Show message preview</em>: to show 1-4 lines of the message text</li>
<li><em>Show address details by default</em>: to expand the addresses section by default</li>
<li><em>Automatically show original message for known contacts</em>: to automatically show original messages for contacts on your device, please read <a href="#faq35">this FAQ</a></li>
<li><em>Automatically show images for known contacts</em>: to automatically show images for contacts on your device, please read <a href="#faq35">this FAQ</a></li>
</ul>
<p>Note that messages can be previewed only when the message text was downloaded. Larger message texts are not downloaded by default on metered (generally mobile) networks. You can change this in the connection settings.</p>
<p>Some people ask:</p>
<ul>
<li>to show the subject bold, but bold is already being used to highlight unread messages</li>
<li>to move the star to the left, but it is much easier to operate the star on the right side</li>
</ul>
<p><br /></p>
<p><a name="faq6"></a> <strong>(6) How can I login to Gmail / G suite?</strong></p>
<p>🌎 <a href="https://translate.google.com/translate?sl=en&u=https%3A%2F%2Fm66b.github.io%2FFairEmail%2F%23faq6">Google Translate</a></p>
<p><strong>FairEmail fully supports OAuth through the quick setup wizard and will continue to work after May 30, please see below what to do if you used your account password to set up an account.</strong></p>
<blockquote>
<p><strong>Important: using your <em>account</em> password <a href="https://support.google.com/accounts/answer/6010255">won’t be possible anymore from May 30, 2022</a>.</strong></p>
<p>“<em>To help keep your account secure, starting May 30, 2022, Google will no longer support the use of third-party apps or devices which ask you to sign in to your Google Account using only your username and password.</em>”</p>
<p>✔ If you authorized your Gmail account with the quick setup wizard or manually with an app password, your account will keep being synchronized after May 30, 2022.</p>
<p>❌ If you enabled <em>Less secure apps</em> in the Google account settings and authorized your Gmail account manually with your normal account password, your account can’t be synchronized from May 30, 2022 anymore. The app will show the error <strong>Invalid credentials (Failure)</strong>.</p>
<p>How to check:</p>
<ul>
<li>Go to the <em>Settings</em> via the navigation menu (left side menu)</li>
<li>Tap on <em>Manual setup and account options</em></li>
<li>Tap on <em>Accounts</em></li>
<li>Find the account in the list</li>
<li>If there is a shield icon before the account name (=OAuth), the account will keep working</li>
</ul>
<p>How to fix:</p>
<ul>
<li>Go to the <em>Settings</em> via the navigation menu (left side menu)</li>
<li>Tap on the <em>Wizard</em> button and select <em>Gmail (OAuth)</em></li>
<li>Tick the checkbox to authenticate an existing account (else you’ll create a new account!)</li>
<li>Fill in the fields and follow the steps</li>
<li>Repeat for each account</li>
</ul>
<p>Note that this won’t work on devices without Google Play Store/Services, such as recent Huawei devices. In this case you will need to use an app password, see below.</p>
<p><strong>Note that other email apps, possibly on other devices, which still use your account password could cause your account to be blocked!</strong></p>
</blockquote>
<p>If you use the Play store or GitHub version of FairEmail, you can use the quick setup wizard to easily setup a Gmail account and identity. The Gmail quick setup wizard is not available for third party builds, like the F-Droid build because Google approved the use of OAuth for official builds only. OAuth is also not available on devices without Google services, such as recent Huawei devices, in which case selecting an account will fail.</p>
<p>The Gmail quick setup wizard won’t work if the Android account manager doesn’t work or doesn’t support Google accounts, which is typically the case if the account selection is being <em>canceled</em> right away.</p>
<p>If you don’t want to use or can’t use an on-device Google account, for example on recent Huawei devices, you can <del>either enable access for “less secure apps” and use your account password (not advised)</del> or enable two factor authentication and use an app specific password. To use a password you can use the quick setup wizard and select <em>Other provider</em>.</p>
<p><strong>Important</strong>: sometimes Google issues this alert:</p>
<p><em>[ALERT] Please log in via your web browser: https://support.google.com/mail/accounts/answer/78754 (Failure)</em></p>
<p>This Google security check is triggered more often with <em>less secure apps</em> enabled, less with an app password, and hardly when using an on-device account (OAuth). You might see the error <em>OAUTH2 asked for more</em>, which basically says the connection is temporarily blocked, until you confirm it is you.</p>
<p>Note that an app specific password is required when two factor authentication is enabled. After enabling two factor authentication there will be this error message:</p>
<p><em>[ALERT] Application-specific password required: https://support.google.com/mail/accounts/answer/185833 (Failure)</em></p>
<p>The error message “<em>Authentication failed - Invalid credentials</em>” or <em>Token refresh required</em> means that the Android account manager was not able to refresh the access token, or that getting an access token was not allowed, for example when the account is a <a href="https://support.google.com/families/answer/7101025">Family Link</a> account, in which case you can use the Gmail app only. A common cause for this problem is using a VPN, a firewall app or an ad blocker which blocks internet access for the Android account manager. Please make sure permissions were granted to the app via setup step 2. You can try to workaround this issue by using the quick setup wizard <em>Gmail (Oauth)</em> or by using an app password.</p>
<p><br /></p>
<p><a name="faq6-app"></a></p>
<p><em>App specific password</em></p>
<p>See <a href="https://support.google.com/accounts/answer/185833">here</a> about how to generate an app specific password.</p>
<p>To configure a new Gmail account with an app password, please tap on the wizard button in the main settings screen and select <em>Other provider</em> (not Gmail!) and follow the steps (paste the app password in the password field).</p>
<p>To configure an existing Gmail account with an app password, please tap on <em>Manual setup and account options</em> in the main settings screen, tap on <em>Accounts</em>, tap on the account and tap on the pencil icon after the password and select <em>Switch to password authentication</em> and paste the app password.</p>
<p><br /></p>
<p><del><em>Enable “Less secure apps”</em></del></p>
<p><del><strong>Important</strong>: using this method is not recommended because it is less reliable.</del></p>
<p><del><strong>Important</strong>: Gsuite accounts authorized with a username/password will stop working <a href="https://gsuiteupdates.googleblog.com/2019/12/less-secure-apps-oauth-google-username-password-incorrect.html">in the near future</a>.</del></p>
<p><del>See <a href="https://support.google.com/accounts/answer/6010255">here</a> about how to enable “less secure apps”</del> <del>or go <a href="https://www.google.com/settings/security/lesssecureapps">directy to the setting</a>.</del></p>
<p><del>If you use multiple Gmail accounts, make sure you change the “less secure apps” setting of the right account(s).</del></p>
<p><del>Be aware that you need to leave the “less secure apps” settings screen by using the back arrow to apply the setting.</del></p>
<p><del>If you use this method, you should use a <a href="https://en.wikipedia.org/wiki/Password_strength">strong password</a> for your Gmail account, which is a good idea anyway.</del> <del>Note that using the <a href="https://tools.ietf.org/html/rfc3501">standard</a> IMAP protocol in itself is not less secure.</del></p>
<p><del>When “less secure apps” is not enabled,</del> <del>you’ll get the error <em>Authentication failed - invalid credentials</em> for accounts (IMAP)</del> <del>and <em>Username and Password not accepted</em> for identities (SMTP).</del></p>
<p><br /></p>
<p><em>General</em></p>
<p>You might get the alert “<em>Please log in via your web browser</em>”. This happens when Google considers the network that connects you to the internet (this could be a VPN) to be unsafe. This can be prevented by using the Gmail quick setup wizard or an app specific password.</p>
<p>See <a href="https://support.google.com/mail/answer/7126229">here</a> for Google’s instructions and <a href="https://support.google.com/mail/accounts/answer/78754">here</a> for troubleshooting.</p>
<p><br /></p>
<p><a name="faq7"></a> <strong>(7) Why are sent messages not appearing (directly) in the sent folder?</strong></p>
<p>🌎 <a href="https://translate.google.com/translate?sl=en&u=https%3A%2F%2Fm66b.github.io%2FFairEmail%2F%23faq7">Google Translate</a></p>
<p>Sent messages are normally moved from the outbox to the sent folder as soon as your provider adds sent messages to the sent folder. This requires a sent folder to be selected in the account settings and the sent folder to be set to synchronizing.</p>
<p>Some providers do not keep track of sent messages or the used SMTP server might not be related to the provider. In these cases FairEmail, will automatically add sent messages to the sent folder on synchronizing the sent folder, which will happen after a message have been sent. Note that this will result in extra internet traffic.</p>
<p><del>If this doesn’t happen, your provider might not keep track of sent messages or you might be using an SMTP server not related to the provider.</del> <del>In these cases you can enable the advanced identity setting <em>Store sent messages</em> to let FairEmail add sent messages to the sent folder right after sending a message.</del> <del>Note that enabling this setting might result in duplicate messages if your provider adds sent messages to the sent folder too.</del> <del>Also beware that enabling this setting will result in extra data usage, especially when when sending messages with large attachments.</del></p>
<p><del>If sent messages in the outbox are not found in the sent folder on a full synchronize, they will be moved from the outbox to the sent folder too.</del> <del>A full synchronize happens when reconnecting to the server or when synchronizing periodically or manually.</del> <del>You’ll likely want to enable the advanced setting <em>Store sent messages</em> instead to move messages to the sent folder sooner.</del></p>
<p><br /></p>
<p><a name="faq8"></a> <strong>(8) Can I use a Microsoft Exchange account?</strong></p>
<p>🌎 <a href="https://translate.google.com/translate?sl=en&u=https%3A%2F%2Fm66b.github.io%2FFairEmail%2F%23faq8">Google Translate</a></p>
<p>Firstly, Exchange <em>protocol</em> (EWS) is not the same as Exchange <em>server</em> or Exchange <em>account</em>.</p>
<p>The Microsoft Exchange Web Services ™ (EWS) protocol <a href="https://techcommunity.microsoft.com/t5/Exchange-Team-Blog/Upcoming-changes-to-Exchange-Web-Services-EWS-API-for-Office-365/ba-p/608055">is being phased out</a>. Microsoft stopped updating the EWS libraries <a href="https://github.com/OfficeDev/ews-java-api">in 2016</a>. So, it makes little sense to add this protocol anymore. Moreover, Microsoft announced that <a href="https://techcommunity.microsoft.com/t5/exchange-team-blog/retirement-of-exchange-web-services-in-exchange-online/ba-p/3924440">EWS will be retired on October 1, 2026</a>.</p>
<p>You can use a Microsoft Exchange account if it is accessible via IMAP, which is almost always the case because all Exchange servers support the standard IMAP protocol. See <a href="https://support.office.com/en-us/article/what-is-a-microsoft-exchange-account-47f000aa-c2bf-48ac-9bc2-83e5c6036793">here</a> for more information.</p>
<p>Note that the desciption of FairEmail starts with the remark that non-standard protocols, like Microsoft Exchange Web Services ™ and Microsoft ActiveSync ™ are not supported.</p>
<p>Please see <a href="https://support.office.com/en-us/article/pop-imap-and-smtp-settings-for-outlook-com-d088b986-291d-42b8-9564-9c414e2aa040">here</a> for the Microsoft documentation about configuring an email client. There is also a section about common connection errors and solutions.</p>
<p>Some older Exchange server versions have a bug causing empty message and corrupt attachments. Please see <a href="#faq110">this FAQ</a> for a workaround.</p>
<p>Please see <a href="#faq133">this FAQ</a> about ActiveSync ™ support.</p>
<p>Please see <a href="#faq111">this FAQ</a> about OAuth support.</p>
<p><br /></p>
<p><a name="faq9"></a> <strong>(9) What are identities / how do I add an alias / configure a default CC or BCC address?</strong></p>
<p>🌎 <a href="https://translate.google.com/translate?sl=en&u=https%3A%2F%2Fm66b.github.io%2FFairEmail%2F%23faq9">Google Translate</a></p>
<p>Identities represent email addresses you are sending <em>from</em> via an email (SMTP) server.</p>
<p>Some providers allow you to have multiple aliases. The easiest way to create an alias is to copy the main identity, and change the email address and perhaps the (display) name. You should not change the username! For this, please go to the settings via the navigation menu (left side menu), tap on <em>Manual setup and account options</em>, tap on <em>Identities</em>, long press the main identity, and select to copy it.</p>
<p><strong>In many cases, an alias address must first be verified via the website of the mail provider</strong></p>
<p>Alternatively, you can enable <em>Allow editing sender address</em> in the advanced settings of an existing identity to edit the username when composing a new message, if your provider allows this. Considering the email address test@example.org you can use these special username formats:</p>
<ul>
<li>“<em>+extra</em>” will result in the email address “<em>test+extra@example.org</em>”</li>
<li>“<em><span class="citation" data-cites="extra">@extra</span></em>” will result in the email address “<em>test@extra.example.org</em>”</li>
<li>“<em>Some name, username</em>” will result in the email address “<em>Some name, <username@example.org></em>” (since version 1.2032)</li>
</ul>
<p>You can configure a default CC or BCC address in the advanced identity settings.</p>
<p>FairEmail will automatically update the passwords of related identities when you update the password of the associated account or a related identity.</p>
<p>See <a href="#faq33">this FAQ</a> on editing the username of email addresses.</p>
<p><br /></p>
<p><a name="faq10"></a> <strong><del>(10) What does ‘UIDPLUS not supported’ mean?</del></strong></p>
<p>🌎 <a href="https://translate.google.com/translate?sl=en&u=https%3A%2F%2Fm66b.github.io%2FFairEmail%2F%23faq10">Google Translate</a></p>
<p><del>The error message <em>UIDPLUS not supported</em> means that your email provider does not provide the IMAP <a href="https://tools.ietf.org/html/rfc4315">UIDPLUS extension</a>. This IMAP extension is required to implement two way synchronization, which is not an optional feature. So, unless your provider can enable this extension, you cannot use FairEmail for this provider.</del></p>
<p><br /></p>
<p><a name="faq11"></a> <strong><del>(11) Why is POP not supported?</del></strong></p>
<p>🌎 <a href="https://translate.google.com/translate?sl=en&u=https%3A%2F%2Fm66b.github.io%2FFairEmail%2F%23faq11">Google Translate</a></p>
<p>POP3 is supported!</p>
<p><del>Besides that any decent email provider supports <a href="https://en.wikipedia.org/wiki/Internet_Message_Access_Protocol">IMAP</a> these days,</del> <del>using <a href="https://en.wikipedia.org/wiki/Post_Office_Protocol">POP</a> will result in unnecessary extra battery usage and delayed new message notifications.</del> <del>Moreover, POP is unsuitable for two way synchronization and more often than not people read and write messages on different devices these days.</del></p>
<p><del>Basically, POP supports only downloading and deleting messages from the inbox.</del> <del>So, common operations like setting message attributes (read, starred, answered, etc), adding (backing up) and moving messages is not possible.</del></p>
<p><del>See also <a href="https://support.google.com/mail/answer/7104828">what Google writes about it</a>.</del></p>
<p><del>For example <a href="https://support.google.com/mail/answer/21289">Gmail can import messages</a> from another POP account,</del> <del>which can be used as a workaround for when your provider doesn’t support IMAP.</del></p>
<p><del>tl;dr; consider to switch to IMAP.</del></p>
<p><br /></p>
<p><a name="faq12"></a> <strong>(12) How does encryption/decryption work?</strong></p>
<p>🌎 <a href="https://translate.google.com/translate?sl=en&u=https%3A%2F%2Fm66b.github.io%2FFairEmail%2F%23faq12">Google Translate</a></p>
<p>Communication with email servers is always encrypted, unless you explicitly turned this off. This question is about optional end-to-end encryption with PGP or S/MIME. The sender and recipient should first agree on this and exchange signed messages to transfer their public key to be able to send encrypted messages.</p>
<p><br /></p>
<p><em>General</em></p>
<p>Please <a href="https://en.wikipedia.org/wiki/Public-key_cryptography">see here</a> about how public/private key encryption works.</p>
<p>Encryption in short:</p>
<ul>
<li><strong>Outgoing</strong> messages are encrypted with the <strong>public key</strong> of the recipient</li>
<li><strong>Incoming</strong> messages are decrypted with the <strong>private key</strong> of the recipient</li>
</ul>
<p>Signing in short:</p>
<ul>
<li><strong>Outgoing</strong> messages are signed with the <strong>private key</strong> of the sender</li>
<li><strong>Incoming</strong> messages are verified with the <strong>public key</strong> of the sender</li>
</ul>
<p>To sign/encrypt a message, just select the appropriate method in the send dialog. The simplest way to show the send dialog (again) is to long press the <em>Send</em> button in the bottom action bar. It might be necessary to disable signing/encryption with the padlock icon in the top action bar first, to prevent the select key dialog, etc. from being in the way. The encryption method will be remembered for the selected identity (at the top of the message editor).</p>
<p>To verify a signature or to decrypt a received message, open the message and just tap the gesture or padlock icon just below the message action bar.</p>
<p>The first time you send a signed/encrypted message, you might be asked for a sign key. FairEmail will automatically store the selected sign key in the used identity for the next time. If you need to reset the sign key, just save the identity or long press the identity in the list of identities and select <em>Reset sign key</em>. The selected sign key is visible in the list of identities. If need to select a key on a case by case basis, you can create multiple identities for the same account with the same email address.</p>
<p>In the encryption settings, you can select the default encryption method (PGP or S/MIME), enable <em>Sign by default</em>, <em>Encrypt by default</em> and <em>Automatically decrypt messages</em>, but be aware that automatic decryption is not possible if user interaction is required, like selecting a key or reading a security token.</p>
<p>The to be encrypted message text/attachments and the decrypted message text/attachments are stored locally only and will never be added to the remote server. If you want to undo decryption, you can tap on the “close” padlock icon.</p>
<p><br /></p>
<p><em>PGP</em></p>
<p>You’ll need to install and configure <a href="https://f-droid.org/en/packages/org.sufficientlysecure.keychain/">OpenKeychain</a> first. FairEmail was tested with OpenKeychain version 5.4. Later versions will most likely be compatible, but earlier versions might not be.</p>
<p><strong>Important</strong>: the OpenKeychain app is known to (silently) crash when the calling app (FairEmail) is not authorized yet and is getting an existing public key. You can workaround this by trying to send a signed/encrypted message to a sender with an unknown public key.</p>
<p><strong>Important</strong>: if the OpenKeychain app cannot find a key (anymore), you might need to reset a previously selected key. This can be done by long pressing an identity in the list of identities (Settings, tap Manual setup, tap Identities).</p>
<p><strong>Important</strong>: to let apps like FairEmail reliably connect to the OpenKeychain service to encrypt/decrypt messages, it might be necessary to disable battery optimizations for the OpenKeychain app.</p>
<p><strong>Important</strong>: the OpenKeychain app reportedly needs contacts permission to work correctly.</p>
<p><strong>Important</strong>: on some Android versions / devices it is necessary to enable <em>Show popups while running in background</em> in the additional permissions of the Android app settings of the OpenKeychain app. Without this permission the draft will be saved, but the OpenKeychain popup to confirm/select might not appear.</p>
<p>FairEmail will send the <a href="https://autocrypt.org/">Autocrypt</a> header for use by other email clients, but only for signed and encrypted messages because too many email servers have problems with the often long Autocrypt header. Note that the most secure way to start an encrypted email exchange is by sending signed messages first. There is an encryption option to send signed messages by default. Alternatively, this can enabled for a specific identity in the advanced identity settings. Received Autocrypt headers will be sent to the OpenKeychain app for storage on verifying a signature or decrypting a message.</p>
<p>Although this shouldn’t be necessary for most email clients, you can attach your public key to a message and if you use <em>.key</em> as extension, the mime type will correctly be <em>application/pgp-keys</em>.</p>
<p>All key handling is delegated to the OpenKey chain app for security reasons. This also means that FairEmail does not store PGP keys.</p>
<p>Inline encrypted PGP in received messages is supported, but inline PGP signatures and inline PGP in outgoing messages is not supported, see <a href="https://josefsson.org/inline-openpgp-considered-harmful.html">here</a> about why not.</p>
<p>If you wish to verify a signature manually, check <em>Show inline attachments</em> and save the files <em>content.asc</em> (the signed content) and <em>signature.asc</em> (the digital signature). Install <a href="https://www.gnupg.org/">GnuPG</a> on your preferred operating system and execute this command:</p>
<p><code>gpg --verify signature.asc.pgp content.asc</code></p>
<p>Signed-only or encrypted-only messages are not a good idea, please see here about why not:</p>
<ul>
<li><a href="https://www.openkeychain.org/openpgp-considerations-part-i">OpenPGP Considerations Part I</a></li>
<li><a href="https://www.openkeychain.org/openpgp-considerations-part-ii">OpenPGP Considerations Part II</a></li>
<li><a href="https://www.openkeychain.org/openpgp-considerations-part-iii-autocrypt">OpenPGP Considerations Part III Autocrypt</a></li>
</ul>
<p>Signed-only messages are supported, and encrypted-only messages are supported since version 1.2053.</p>
<p>Common errors:</p>
<ul>
<li><em>No key</em>: there is no PGP key available for one of the listed email addresses</li>
<li><em>No key found!</em>: the PGP key stored in the identity probably doesn’t exist anymore. Resetting the key (see above) will probably fix this problem.</li>
<li><em>Missing key for encryption</em>: there is probably a key selected in FairEmail that does not exist in the OpenKeychain app anymore. Resetting the key (see above) will probably fix this problem.</li>
<li><em>Key for signature verification is missing</em>: the public key for the sender is not available in the OpenKeychain app. This can also be caused by Autocrypt being disabled in the encryption settings or by the Autocrypt header not being sent.</li>
<li><em>OpenPgp error 0: null</em> / <em>OpenPgp error 0: General error</em>: please check the key in the OpenKeychain app and make sure there are no conflicting identities for the key and make sure the email address exactly matches the key, including lower/upper case. Also, make sure the key can be used to sign/encrypt and isn’t for encrypting/signing only.</li>
<li><em>OpenPgp error 0: Encountered an error reading input data!</em>: your public key has the <a href="https://en.wikipedia.org/wiki/Authenticated_encryption">AEAD</a> flag set, but the message was encrypted in the older MDC (Modification Detection Code) mode by the sender. For example the Posteo email server does this erroneously. Workaround: <a href="https://github.com/keybase/keybase-issues/issues/4025#issuecomment-853933127">remove the AEAD flag</a> from the public key.</li>
</ul>
<p><strong>Important</strong>: if <em>Don’t keep activities</em> is enabled in the Android developer options, FairEmail and the OpenKeychain app cannot run at the same time, causing PGP operations to fail. If needed, please <a href="https://developer.android.com/studio/debug/dev-options#enable">see here</a> about how to enable the developer options.</p>
<p><strong>Important</strong>: Android 8.1.0 on Tecno CF8 Camon 11 Pro devices blocks communication between apps with the message “<em>AutoStart limited</em>” in the system logcat. So, FairEmail (or any other app) can’t communicate with the OpenKeychain app.</p>
<p><br /></p>
<p><em>S/MIME</em></p>
<p>Encrypting a message requires the public key(s) of the recipient(s). Signing a message requires your private key.</p>
<p>Private keys are stored by Android and can be imported via the Android advanced security settings (Encryption & credentials, Install a certificate, VPN & app user certificate). There is a shortcut (button) for this in the encryption settings for Android version 10 and before. Android will ask you to set a PIN, pattern, or password if you didn’t before. If you have a Nokia device with Android 9, please <a href="https://nokiamob.net/2019/08/10/a-bug-prevents-nokia-1-owners-from-unlocking-their-screen-even-with-right-pin-pattern/">read this first</a>.</p>
<p><strong>Important</strong>: If Android doesn’t accept the password of a certificate, it probably means it doesn’t support the certificate’s encryption method. The solution is to convert the certificate like this:</p>
<pre><code>openssl pkcs12 -nodes <your.p12 >certbag.pem
openssl pkcs12 -export -legacy -in certbag.pem >legacy.p12</code></pre>
<p>Note that .p12 and .pfx are interchangeable. You can find more information about this issue <a href="https://stackoverflow.com/questions/71872900/installing-pcks12-certificate-in-android-wrong-password-bug">here</a></p>
<p><br></p>
<p>Note that certificates can contains multiple keys for multiple purposes, for example for authentication, encryption and signing. Android only imports the first key, so to import all the keys, the certificate must first be split. This is not very trivial and you are advised to ask the certificate supplier for support.</p>
<p>If you renewed a certificate, you should import the renewed certificate and reset the key. This can be done by long pressing an identity in the list of identities (Settings, tap Manual setup, tap Identities).</p>
<p>Note that S/MIME signing with other algorithms than RSA is supported, but be aware that other email clients might not support this. S/MIME encryption is possible with asymmetric algorithms only, which means in practice using RSA.</p>
<p>The default encryption method is PGP, but the last used encryption method will be remembered for the selected identity for the next time. You can long press on the send button to change the encryption method for an identity. If you use both PGP and S/MIME encryption for the same email address, it might be useful to copy the identity, so you can change the encryption method by selecting one of the two identities. You can long press an identity in the list of identities (via manual setup in the main setup screen) to copy an identity.</p>
<p>To allow different private keys for the same email address, FairEmail will always let you select a key when there are multiple identities with the same email address for the same account.</p>
<p>Public keys are stored by FairEmail and can be imported when verifying a signature for the first time or via the encryption settings (PEM or DER format).</p>
<p>FairEmail verifies both the signature and the complete certificate chain.</p>
<p>Common errors:</p>
<ul>
<li><em>No certificate found matching targetContraints</em>: this likely means you are using an old version of FairEmail</li>
<li><em>unable to find valid certification path to requested target</em>: basically this means one or more intermediate or root certificates were not found</li>
<li><em>Private key does not match any encryption keys</em>: the selected key cannot be used to decrypt the message, probably because it is the incorrect key</li>
<li><em>No private key</em>: no certificate was selected or no certificate was available in the Android keystore</li>
<li><em>Memory allocation failed</em>: Android supports keys up to 4096 bits only (Android <a href="https://issuetracker.google.com/issues/199605614">issue 199605614</a>)</li>
<li><em>message-digest attribute value does not match calculated value</em>: the signature doesn’t match the message, possibly because the message was changed, or because an incorrect or key was used</li>
</ul>
<p>In case the certificate chain is incorrect, you can tap on the little info button to show the all certificates. After the certificate details the issuer or “selfSign” is shown. A certificate is self signed when the subject and the issuer are the same. Certificates from a certificate authority (CA) are marked with “<a href="https://tools.ietf.org/html/rfc5280#section-4.2.1.3">keyCertSign</a>”. Certificates found in the Android key store are marked with “Android”.</p>
<p>A valid chain looks like this:</p>
<pre><code>Your certificate > zero or more intermediate certificates > CA (root) certificate marked with "Android"</code></pre>
<p>Note that a certificate chain will always be invalid when no anchor certificate can be found in the Android key store, which is fundamental to S/MIME certificate validation.</p>
<p>Please see <a href="https://support.google.com/pixelphone/answer/2844832?hl=en">here</a> how you can import certificates into the Android key store.</p>
<p>The use of expired keys, inline encrypted/signed messages and hardware security tokens is not supported.</p>
<p>If you are looking for a free (test) S/MIME certificate, see <a href="http://kb.mozillazine.org/Getting_an_SMIME_certificate">here</a> for the options. Please be sure to <a href="https://davidroessli.com/logs/2019/09/free-smime-certificates-in-2019/#update20191219">read this first</a> if you want to request an S/MIME Actalis certificate.</p>
<p>S/MIME certificates can for example be purchased via <a href="https://www.xolphin.com/">Xolphin</a>.</p>
<p>How to extract a public key from a S/MIME certificate:</p>
<pre><code>openssl pkcs12 -in filename.pfx/p12 -clcerts -nokeys -out cert.pem</code></pre>
<p>You can verify the signature of a raw message file (EML file) like this:</p>
<pre><code>openssl smime -verify <xxx.eml</code></pre>
<p>You can decode S/MIME signatures, etc, <a href="https://lapo.it/asn1js/">here</a>.</p>
<p><br /></p>
<p><em>pretty Easy privacy</em></p>
<p>There is still <a href="https://tools.ietf.org/id/draft-birk-pep-00.html">no approved standard</a> for pretty Easy privacy (p≡p) and not many people are using it.</p>
<p>However, FairEmail can send and receive PGP encrypted messages, which are compatible with p≡p. Also, FairEmail understands incoming p≡p messages since version 1.1519, so the encrypted subject will be shown and the embedded message text will be shown more nicely.</p>
<p><br /></p>
<p>S/MIME sign/encrypt is a pro feature, but all other PGP and S/MIME operations are free to use.</p>
<p><br /></p>
<p><a name="faq13"></a> <strong>(13) How does search on device/server work?</strong></p>
<p>🌎 <a href="https://translate.google.com/translate?sl=en&u=https%3A%2F%2Fm66b.github.io%2FFairEmail%2F%23faq13">Google Translate</a></p>
<p>You can start searching for messages on sender (from), recipient (to, cc, bcc), subject, keywords or message text by using the magnify glass in the action bar of a folder. You can also search from any app by selecting <em>Search email</em> in the copy/paste popup menu.</p>
<p>Searching in the unified inbox will search in all folders of all accounts, searching in the folder list will search in the associated account only and searching in a folder will search in that folder only.</p>
<p>Messages will be searched for on the device first. You can download more messages on the device via the three-dots overflow menu in the start screen. There will be an action button with a search again icon at the bottom to continue searching on the server. You can select in which folder to continue the search.</p>
<p>The IMAP protocol doesn’t support searching in more than one folder at the same time. Searching on the server is an expensive operation, therefore it is not possible to select multiple folders.</p>
<p>The POP3 protocol doesn’t support searching on the server at all.</p>
<p>Searching local messages is case insensitive and on partial text. The message text of local messages will not be searched if the message text was not downloaded yet. Searching on the server might be case sensitive or case insensitive and might be on partial text or whole words, depending on the provider.</p>
<p>Some servers cannot handle searching in the message text when there are a large number of messages. For this case there is an option to disable searching in the message text. Since version 1.1888 a popup message will be shown and the search will automatically be retried without searching in the message text.</p>
<p>It is possible to use Gmail search operators by prefixing a search command with <em>raw:</em>. If you configured just one Gmail account, you can start a raw search directly on the server by searching from the unified inbox. If you configured multiple Gmail accounts, you’ll first need to navigate to the folder list or the archive (all messages) folder of the Gmail account you want to search in. Please <a href="https://support.google.com/mail/answer/7190">see here</a> for the possible search operators. For example:</p>
<p><code>raw:larger:10M</code></p>
<p>Searching through a large number of messages on the device is not very fast because of two limitations:</p>
<ul>
<li><a href="https://www.sqlite.org/">sqlite</a>, the database engine of Android has a record size limit, preventing message texts from being stored in the database</li>
<li>Android apps get only limited memory to work with, even if the device has plenty memory available</li>
</ul>
<p>This means that searching for a message text requires that files containing the message texts need to be opened one by one to check if the searched text is contained in the file, which is a relatively expensive process.</p>
<p>In the <em>miscellaneous settings</em> you can enable <em>Build search index</em> to significantly increase the speed of searching on the device, but be aware that this will increase battery and storage space usage. The search index is based on words in all message parts, so searching for partial text and searching in specific messages parts (from, subject, text, etc) is not possible.</p>
<p>Note that only messages for which the message text was downloaded will be indexed. In the connection settings can be configured up to which size messages texts will be downloaded automatically when using a metered connection (generally mobile data or paid WiFi). In the folder properties (long press on a folder in the folder list of an account) downloading of messages texts can be enabled/disabled.</p>
<p>Searching using the search index is by default AND, so searching for <em>apple orange</em> will search for apple AND orange. Words separated by commas result in searching for OR, so for example <em>apple, orange</em> will search for apple OR orange. Both can be combined, so searching for <em>apple, orange banana</em> will search for apple OR (orange AND banana). Using the search index is a pro feature.</p>
<p>Since version 1.1315 it is possible to use search expressions like this:</p>
<pre><code>apple +banana -cherry ?nuts</code></pre>
<p>This will result in searching in the subject or text (only) like this:</p>
<pre><code>("apple" AND "banana" AND NOT "cherry") OR "nuts"</code></pre>
<p>Since version 1.1980 it is possible to use these prefixes as a search expression:</p>
<pre><code>from:<email address>
to:<email address>
cc:<email address>
bcc:<email address>
keyword:<keyword></code></pre>
<p>There should be no space between the prefix and the search term, which will be applied as an AND-condition.</p>
<p>Only AND conditions (+) and NOT conditions (-) can be used for on-device searching (since version 1.1981). If you try to use other search expressions, you get the error <em>Select a folder for a complex search</em>, which means that a folder in an account’s folder list must be selected in order to perform the search on the server.</p>
<p>Since version 1.1733 it is possible to save searches, which means that a named entry in the navigation menu will be created to repeat the same search later. You can save a search after searching by tapping on the save button in the top action bar. After repeating a search there will be a delete button at the same place to delete a saved search again. A saved search might be useful to quickly search for starred messages, or for messages from a specific email address, etc.</p>
<p>Using the search index is a pro feature.</p>
<p><br /></p>
<p><a name="faq14"></a> <strong>(14) How can I set up an Outlook / Live / Hotmail account?</strong></p>
<p>🌎 <a href="https://translate.google.com/translate?sl=en&u=https%3A%2F%2Fm66b.github.io%2FFairEmail%2F%23faq14">Google Translate</a></p>
<blockquote>
<p><strong>Important</strong>: Basic Authentication (=password authentication) <a href="https://techcommunity.microsoft.com/t5/exchange-team-blog/basic-authentication-deprecation-in-exchange-online-may-2022/ba-p/3301866">will be turned off from October 1, 2022</a>.</p>
<p>✔ If you authorized your Outlook/Office 365 account with the quick setup wizard, your account will keep being synchronized after October 1, 2022.</p>
<p>❌ If you authorized your Outlook/Office 365 account manually with a password, your account can’t be synchronized from October 1, 2022 anymore.</p>
<p>How to check:</p>
<ul>
<li>Go to the <em>Settings</em> via the navigation menu (left side menu)</li>
<li>Tap on <em>Manual setup and account options</em></li>
<li>Tap on <em>Accounts</em></li>
<li>Find the account in the list</li>
<li>If there is a shield icon before the account name (=OAuth), the account will keep working</li>
</ul>
<p>How to fix:</p>
<ul>
<li>Go to the <em>Settings</em> via the navigation menu (left side menu)</li>
<li>Tap on the <em>Wizard</em> button and select <em>Outlook/Office365 (OAuth)</em></li>
<li>Tick the checkbox to authenticate an existing account (else you’ll create a new account!)</li>
<li>Fill in the fields and follow the steps</li>
<li>Repeat for each account</li>
</ul>
</blockquote>
<p>An Outlook / Live / Hotmail account can be set up via the quick setup wizard and selecting <em>Outlook/Office 365</em>.</p>
<p><strong>Important</strong>: a personal and a business account can have the same email address, but have different mailboxes (folders). So, please make sure you select the right option.</p>
<p>Microsoft said “<em>We have turned off SMTP AUTH for millions of tenants not using it</em>”, which can result in this error message:</p>
<pre><code>535 5.7.139 Authentication unsuccessful, SmtpClientAuthentication is disabled for the Tenant.
Visit https://aka.ms/smtp_auth_disabled for more information.</code></pre>
<p>SMTP AUTH is necessary for third party email clients, which is also documented in <a href="https://aka.ms/smtp_auth_disabled">the referenced article</a>. So, basically this means that Microsoft is pushing you to their own products. Isn’t this a bit of a monopoly?</p>
<p>To use an Outlook, Live or Hotmail account with two factor authentication enabled, you might need to create an app password. See <a href="https://support.microsoft.com/en-us/help/12409/microsoft-account-app-passwords-two-step-verification">here</a> for the details.</p>
<p>See <a href="https://support.office.com/en-us/article/pop-imap-and-smtp-settings-for-outlook-com-d088b986-291d-42b8-9564-9c414e2aa040">here</a> for Microsoft’s instructions.</p>
<p>Please see <a href="#faq139">this FAQ</a> for possible causes of the error <em>… User is authenticated but not connected …</em>.</p>
<p>For unknown reasons, some Outlook/Hotmail accounts cannot send messages because of the server error ‘<em>535 5.7.3 Authentication unsuccessful</em>’. This can be resolved by authenticating the account with an (app) password (see above) instead of with OAuth. You should use the “<em>Other provider</em>” wizard instead of “<em>Outlook / Office 365 (OAuth)</em>” in this case.</p>
<p>For setting up an Office 365 account, please see <a href="#faq156">this FAQ</a>.</p>
<p><br /></p>
<p><a name="faq15"></a> <strong>(15) Why does the message text keep loading?</strong></p>
<p>🌎 <a href="https://translate.google.com/translate?sl=en&u=https%3A%2F%2Fm66b.github.io%2FFairEmail%2F%23faq15">Google Translate</a></p>
<p>The message header and message body are fetched separately from the server. The message text of larger messages is not being pre-fetched on metered connections and will be fetched on demand on expanding a message. The message text will keep loading if there is no connection to the account, see also the next question, or if there other operations, like synchronizing messages, are being executed.</p>
<p>You can check the account and folder list for the account and folder state (see the legend for the meaning of the icons) and the operation list accessible via the main navigation menu for pending operations (see <a href="#faq3">this FAQ</a> for the meaning of the operations).</p>
<p>If FairEmail is holding off because of prior connectivity issues, please see <a href="#faq123">this FAQ</a>, you can force synchronization via the three dots menu.</p>
<p>In the receive settings you can set the maximum size for automatically downloading of messages on metered connections.</p>
<p>Mobile connections are almost always metered and some (paid) Wi-Fi hotspots are too.</p>
<p><br /></p>
<p><a name="faq16"></a> <strong>(16) Why are messages not being synchronized?</strong></p>
<p>🌎 <a href="https://translate.google.com/translate?sl=en&u=https%3A%2F%2Fm66b.github.io%2FFairEmail%2F%23faq16">Google Translate</a></p>
<p>Possible causes of messages not being synchronized (sent or received) are:</p>
<ul>
<li>The account or folder(s) are not set to synchronize</li>
<li>The number of days to synchronize message for is set too low</li>
<li>There is no usable internet connection</li>
<li>The email server is temporarily not available</li>
<li>Battery optimizations were not disable via setup step 3</li>
<li>Android stopped the synchronization service</li>
<li>A memory management app stopped the synchronization service</li>
</ul>
<p>So, check your account and folder settings and check if the accounts/folders are connected (see the legend in the navigation menu for the meaning of the icons).</p>
<p>If there are any error messages, please see <a href="#faq22">this FAQ</a>.</p>
<p>On some devices, where there are lots of applications competing for memory, Android may stop the synchronization service as a last resort.</p>
<p>Some Android versions, especially those of Samsung, OnePlus, Huawei and Xiaomi, stop apps and services too aggressively. See <a href="https://dontkillmyapp.com/">this dedicated website</a> “<em>Don’t kill my app</em>” for solutions, and <a href="https://issuetracker.google.com/issues/122098785">this Android issue</a> (requires logging in with a Google account) for more information.</p>
<p>If you have a Doogee device, please <a href="https://android.stackexchange.com/questions/214639/background-apps-get-killed-by-something-other-than-battery-optimization">see here</a>.</p>
<p>Disabling battery optimizations (setup step 3) reduces the chance Android will stop the synchronization service.</p>
<p>In case of successive connection errors, FairEmail will hold off increasingly longer to not drain the battery of your device. This is described in <a href="#faq123">this FAQ</a>.</p>
<p><br /></p>
<p><a name="faq17"></a> <strong><del>(17) Why does manual synchronize not work?</del></strong></p>
<p>🌎 <a href="https://translate.google.com/translate?sl=en&u=https%3A%2F%2Fm66b.github.io%2FFairEmail%2F%23faq17">Google Translate</a></p>
<p><del>If the <em>Synchronize now</em> menu is dimmed, there is no connection to the account.</del></p>
<p><del>See the previous question for more information.</del></p>
<p><br /></p>
<p><a name="faq18"></a> <strong>(18) Why is the message preview not always shown?</strong></p>
<p>🌎 <a href="https://translate.google.com/translate?sl=en&u=https%3A%2F%2Fm66b.github.io%2FFairEmail%2F%23faq18">Google Translate</a></p>
<p>The preview of the message text cannot be shown if the message body has not been downloaded yet. See also <a href="#faq15">this FAQ</a>.</p>
<p><br /></p>
<p><a name="faq19"></a> <strong>(19) Why are the pro features so expensive?</strong></p>
<p>🌎 <a href="https://translate.google.com/translate?sl=en&u=https%3A%2F%2Fm66b.github.io%2FFairEmail%2F%23faq19">Google Translate</a></p>
<p><strong>FairEmail is basically free to use</strong> and only some advanced features need to be purchased.</p>
<p><strong>FairEmail ist grundsätzlich kostenlos</strong> und nur einige erweiterte Funktionen müssen gekauft werden.</p>
<p><strong>FairEmail est au fond gratuit</strong> et seulement quelques fonctionnalités avancées doivent être achetés.</p>
<p>Please see the Play store description of the app or <a href="https://email.faircode.eu/#pro">see here</a> for a complete list of pro features.</p>
<p>The right question is “<em>why are there so many taxes and fees?</em>”:</p>
<ul>
<li>VAT: 25 % (depending on your country)</li>
<li>Google fee: 15-30 %</li>
<li>Income tax: 50 %</li>
<li><sub>Paypal fee: 5-10 % depending on the country/amount</sub></li>
</ul>
<p>So, what is left for the developer is just a fraction of what you pay.</p>
<p>Also note that most free apps will appear not to be sustainable in the end, whereas FairEmail is properly maintained and supported, and that free apps may have a catch, like sending privacy sensitive information to the internet. There are no privacy violating ads in the app either.</p>
<p>I have been working on FairEmail almost every day for more than four years, so I think the price is more than reasonable. For this reason there won’t be discounts either.</p>
<p><br /></p>
<p><a name="faq20"></a> <strong>(20) Can I get a refund?</strong></p>
<p>🌎 <a href="https://translate.google.com/translate?sl=en&u=https%3A%2F%2Fm66b.github.io%2FFairEmail%2F%23faq20">Google Translate</a></p>
<p>If a purchased pro feature doesn’t work as intended and this isn’t caused by a problem in the free features and I cannot fix the problem in a timely manner, you can get a refund. In all other cases there is no refund possible. In no circumstances there is a refund possible for any problem related to the free features, since there wasn’t paid anything for them and because they can be evaluated without any limitation. I take my responsibility as seller to deliver what has been promised and I expect that you take responsibility for informing yourself of what you are buying.</p>
<p><a name="faq21"></a> <strong>(21) How do I enable the notification light?</strong></p>
<p>🌎 <a href="https://translate.google.com/translate?sl=en&u=https%3A%2F%2Fm66b.github.io%2FFairEmail%2F%23faq21">Google Translate</a></p>
<p>Before Android 8 Oreo: there is an advanced option in the notification settings of the app for this.</p>
<p>Android 8 Oreo and later: please see <a href="https://developer.android.com/training/notify-user/channels">here</a> about how to configure notification channels. You can use the button <em>Default channel</em> in the notification settings of the app to directly go to the right Android notification channel settings.</p>
<p>Note that apps cannot change notification settings, including the notification light setting, on Android 8 Oreo and later anymore.</p>
<p>Sometimes it is necessary to disable the setting <em>Show message preview in notifications</em> or to enable the settings <em>Show notifications with a preview text only</em> to workaround bugs in Android. This might apply to notification sounds and vibrations too.</p>
<p>Setting a light color before Android 8 is not supported and on Android 8 and later not possible.</p>
<p>Some apps create a notification channel for each selectable color and let you (indirectly) select these channels when selecting a color. Since FairEmail uses notification channels for configurable notification properties for accounts, folders and senders (<a href="#faq145">see this FAQ</a>), this is not a feasible solution for FairEmail because it would result in an unmanageable number of notification channels.</p>
<p><br /></p>
<p><a name="faq22"></a> <strong>(22) What does account/folder error … mean?</strong></p>
<p>🌎 <a href="https://translate.google.com/translate?sl=en&u=https%3A%2F%2Fm66b.github.io%2FFairEmail%2F%23faq22">Google Translate</a></p>
<p>FairEmail does not hide errors like similar apps often do, so it is easier to diagnose problems.</p>
<p>FairEmail will automatically try to connect again after a delay. This delay will be doubled after each failed attempt to prevent draining the battery and to prevent from being locked out permanently. Please see <a href="#faq123">this FAQ</a> for more information about this.</p>
<p>There are general errors and errors specific to Gmail accounts (see below).</p>
<p><strong>General errors</strong></p>
<p><a name="authfailed"></a> The error <em>… <strong>Authentication failed</strong> …</em> or <em>… AUTHENTICATE failed …</em> likely means that your username or password was incorrect. Some providers expect as username just <em>username</em> and others your full email address <em>username@example.com</em>. When copying/pasting to enter a username or password, invisible characters might be copied, which could cause this problem as well. Some password managers are known to do this incorrectly too. The username might be case sensitive, so try lowercase characters only. The password is almost always case sensitive. Some providers require using an app password instead of the account password, so please check the documentation of the provider. Sometimes it is necessary to enable external access (IMAP/SMTP) on the website of the provider first. Other possible causes are that the account is blocked or that logging in has been administratively restricted in some way, for example by allowing to login from certain networks / IP addresses only.</p>
<ul>
<li><strong>Free.fr</strong>: please see <a href="#faq157">this FAQ</a></li>
<li><strong>Gmail / G suite</strong>: please see <a href="#faq6">this FAQ</a></li>
<li><strong>iCloud</strong>: please see <a href="#faq148">this FAQ</a></li>
<li><strong>Posteo</strong>: please check if <a href="https://posteo.de/en/help/activating-additional-email-account-protection">additional email account protection</a> isn’t enabled.</li>
<li><strong>Yahoo, AOL and Sky</strong>: please see <a href="#faq88">this FAQ</a></li>
</ul>
<p>If needed, you can update a password in the account settings: navigation menu (left side menu), tap <em>Settings</em>, tap <em>Manual setup</em>, tap <em>Accounts</em> and tap on the account. Changing the account password will in most cases automatically change the password of related identities too. If the account was authorized with OAuth via the quick setup wizard instead of with a password, you can run the quick setup wizard again and tick <em>Authorize existing account again</em> to authenticate the account again. Note that this requires a recent version of the app.</p>
<p>The error <em>… Too many bad auth attempts …</em> likely means that you are using a Yahoo account password instead of an app password. Please see <a href="#faq88">this FAQ</a> about how to set up a Yahoo account.</p>
<p>The message <em>… +OK …</em> likely means that a POP3 port (usually port number 995) is being used for an IMAP account (usually port number 993).</p>
<p>The errors <em>… invalid greeting …</em>, <em>… requires valid address …</em> and <em>… Parameter to HELO does not conform to RFC syntax …</em> can likely be solved by changing the advanced identity setting <em>Use local IP address instead of host name</em>.</p>
<p>The error <em>… Couldn’t connect to host …</em> means that there was no response from the email server within a reasonable time (20 seconds by default). Mostly this indicates internet connectivity issues, possibly caused by a VPN or by a firewall app. You can try to increase the connection timeout in the connection settings of FairEmail, for when the email server is really slow. Some devices have a firewall, which you can access like this:</p>
<p>Android <em>Settings, Data usage, Three-dots overflow menu, Data usage control</em></p>
<p>The error <em>… Connection refused …</em> (ECONNREFUSED) means that the email server or something between the email server and the app, like a firewall, actively refused the connection.</p>
<p>The error <em>… Network unreachable …</em> means that the email server was not reachable via the current internet connection, for example because internet traffic is restricted to local traffic only.</p>
<p>The error <em>… Host is unresolved …</em>, <em>… Unable to resolve host …</em> or <em>… No address associated with hostname …</em> means that the address of the email server could not be resolved into an IP address. This might be caused by a VPN, ad blocking or an unreachable or not properly working (local) <a href="https://en.wikipedia.org/wiki/Domain_Name_System">DNS</a> server.</p>
<p>The error <em>… Software caused connection abort …</em> means that the email server or something between FairEmail and the email server actively terminated an existing connection. This can for example happen when connectivity was abruptly lost. A typical example is turning on flight mode.</p>
<p>The errors <em>… BYE Logging out …</em>, <em>… Connection reset …</em> mean that the email server or something between the email server and the app, for example a router or a firewall (app), actively terminated an existing connection.</p>
<p>The error <em>… Connection closed by peer …</em> means that the email server actively closed the connection. This might be caused by a not updated Exchange server, see <a href="https://blogs.technet.microsoft.com/pki/2010/09/30/sha2-and-windows/">here</a> for more information.</p>
<p>The errors <em>… Read error …</em>, <em>… Write error …</em>, <em>… Read timed out …</em>, <em>… Broken pipe …</em> mean that the email server is not responding anymore or that the internet connection is bad.</p>
<p><a name="connectiondropped"></a> The error <em>… Connection dropped by server? …</em> means that the email server unexpectedly terminated the connection. This sometimes happen when there were too many (simultaneous) connections in a too short time or when a wrong password was used too often. In this case, please make sure your password is correct and disable receiving in the receive settings for about 30 minutes and try again. If needed, see <a href="#faq23">this FAQ</a> about how you can reduce the number of connections.</p>
<p>The error <em>… Unexpected end of zlib input stream …</em> means that not all data was received, possibly due to a bad or interrupted connection.</p>
<p>The error <em>… connection failure …</em> could indicate <a href="#faq23">Too many simultaneous connections</a>.</p>
<p>The warning <em>… Unsupported encoding …</em> means that the character set of the message is unknown or not supported. FairEmail will assume ISO-8859-1 (Latin1), which will in most cases result in showing the message correctly.</p>
<p>The error <em>… Login Rate Limit Hit …</em> means that there were too many login attempts with an incorrect password. Please double check your password or authenticate the account again with the quick setup wizard (OAuth only).</p>
<p>The error <em>… NO mailbox selected READ-ONLY …</em> indicates <a href="https://sebastian.marsching.com/wiki/Network/Zimbra#Mailbox_Selected_READ-ONLY_Error_in_Thunderbird">this Zimbra problem</a>.</p>
<p>The Outlook specific error <em>… Command Error. 10 …</em> probably means that the OAuth token expired or was invalidated. Authenticating the account again with the quick setup wizard will probably resolve this condition. Another possible cause is a bug in an older Exchange version, please <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=886261">see here</a>. In this case the system administrator needs to update the server software.</p>
<p>Please <a href="#faq4">see here</a> for the errors <em>… Untrusted … not in certificate …</em>, <em>… Invalid security certificate (Can’t verify identity of server) …</em> or <em>… Trust anchor for certification path not found …</em></p>
<p>Please <a href="#faq127">see here</a> for the error <em>… Syntactically invalid HELO argument(s) …</em>.</p>
<p>Please <a href="#faq41">see here</a> for the error <em>… Handshake failed …</em>.</p>
<p>See <a href="https://linux.die.net/man/3/connect">here</a> for what error codes like EHOSTUNREACH and ETIMEDOUT mean.</p>
<p>The error <em>… connect failed: EACCES (Permission denied) …</em> means that <em>Restrict data usage</em> was disabled in the Android MIUI app settings for FairEmail. On Samsung, and possible other devices, also check: Android settings > Battery > Battery manager / Unmonitored apps.</p>
<p>Possible causes are:</p>
<ul>
<li>A firewall or router is blocking connections to the server</li>
<li>The host name or port number is invalid</li>
<li>There are problems with the internet connection</li>
<li>There are problems with resolving domain names (Yandex: try to disable private DNS in the Android settings)</li>
<li>The email server is refusing to accept (external) connections</li>
<li>The email server is refusing to accept a message, for example because it is too large or contains unacceptable links</li>
<li>There are too many connections to the server, see also the next question</li>
</ul>
<p>Many public Wi-Fi networks block outgoing email to prevent spam. Sometimes you can workaround this by using another SMTP port. See the documentation of the provider for the usable port numbers.</p>
<p>If you are using a <a href="https://en.wikipedia.org/wiki/Virtual_private_network">VPN</a>, the VPN provider might block the connection because it is too aggressively trying to prevent spam. Similarly, the email server might block connections via a VPN because it was misused for sending spam. Some VPN providers have “cleaner” IP addresses than others, so switching to another VPN provider might be useful. Note that <a href="https://fi.google.com/">Google Fi</a> is using a VPN too.</p>
<p><strong>Send errors</strong></p>
<p>SMTP servers can reject messages for <a href="https://en.wikipedia.org/wiki/List_of_SMTP_server_return_codes">a variety of reasons</a>. Too large messages and triggering the spam filter of an email server are the most common reasons.</p>
<ul>
<li>The error <em>… Socket is closed …</em> might be caused by sending a too large message / attachments</li>
<li>The attachment size limit for Gmail <a href="https://support.google.com/mail/answer/6584">is 25 MB</a></li>
<li>The attachment size limit for Outlook and Office 365 <a href="https://support.microsoft.com/en-us/help/2813269/attachment-size-exceeds-the-allowable-limit-error-when-you-add-a-large">is 20 MB</a></li>
<li>The attachment size limit for Yahoo <a href="https://help.yahoo.com/kb/SLN5673.html">is 25 MB</a></li>
<li><em>554 5.7.1 Service unavailable; Client host xxx.xxx.xxx.xxx blocked</em>, please <a href="https://docs.gandi.net/en/gandimail/faq/error_types/554_5_7_1_service_unavailable.html">see here</a></li>
<li><em>501 Syntax error - line too long</em> is often caused by using a long Autocrypt header</li>
<li><em>503 5.5.0 Recipient already specified</em> mostly means that an address is being used both as TO and CC address</li>
<li><em>554 5.7.1 … not permitted to relay</em> means that the email server does not recognize the username/email address. Please double check the host name and username/email address in the identity settings.</li>
<li><em>550 Spam message rejected because IP is listed by …</em> means that the email server rejected to send a message from the current (public) network address because it was misused to send spam by (hopefully) somebody else before. Please try to enable flight mode for 10 minutes to acquire a new network address.</li>
<li><em>550 We’re sorry, but we can’t send your email. Either the subject matter, a link, or an attachment potentially contains spam, or phishing or malware.</em> means that the email provider considers an outgoing message as harmful.</li>
<li><em>550 …</em>, <a href="https://www.crazydomains.com.au/help/550-blocked-error-explained/">see here</a> for a list of possible causes</li>
<li><em>571 5.7.1 Message contains spam or virus or sender is blocked …</em> means that the email server considered an outgoing message as spam. This probably means that the spam filters of the email server are too strict. You’ll need to contact the email provider for support on this.</li>
<li><em>451 4.7.0 Temporary server error. Please try again later. PRX4 …</em> indicates a server configuration problem, please <a href="https://www.limilabs.com/blog/office365-temporary-server-error-please-try-again-later-prx4">see here</a> or <a href="https://judeperera.wordpress.com/2019/10/11/fixing-451-4-7-0-temporary-server-error-please-try-again-later-prx4/">see here</a>.</li>
<li><em>451 4.7.0 Temporary server error. Please try again later. PRX5 …</em> indicates a server configuration problem, please <a href="https://www.limilabs.com/qa/4471/451-4-7-0-temporary-server-error-please-try-again-later-prx5">see here</a></li>
<li><em>571 5.7.1 Relay access denied</em>: please double check the username and email address in the advanced identity settings (via the manual setup).</li>
<li>Please <a href="https://support.google.com/a/answer/3726730">see here</a> for more information and other SMTP error codes</li>
</ul>
<p>If you want to use the Gmail SMTP server to workaround a too strict outgoing spam filter or to improve delivery of messages:</p>
<ul>
<li>Verify your email address <a href="https://mail.google.com/mail/u/0/#settings/accounts">here</a> (you’ll need to use a desktop browser for this)</li>
<li>Change the identity settings like this (Settings, tap Manual setup, tap Identities, tap identity):</li>
</ul>
<p> Username: <em>your Gmail address</em><br /> Password: <em><a href="#faq6">an app password</a></em><br /> Host: <em>smtp.gmail.com</em><br /> Port: <em>465</em><br /> Encryption: <em>SSL/TLS</em><br /> Reply to address: <em>your email address</em> (advanced identity settings)<br /></p>
<p><br /></p>
<p><strong>Gmail errors</strong></p>
<p>The authorization of Gmail accounts setup with the quick wizard needs to be periodically refreshed via the <a href="https://developer.android.com/reference/android/accounts/AccountManager">Android account manager</a>. This requires contact/account permissions and internet connectivity.</p>
<p>In case of errors it is possible to authorize/restore a Gmail account again via the Gmail quick setup wizard.</p>
<p>The error <em>… Authentication failed … Account not found …</em> means that a previously authorized Gmail account was removed from the device.</p>
<p>The errors <em>… Authentication failed … No token …</em> means that the Android account manager failed to refresh the authorization of a Gmail account.</p>
<p>The error <em>… Authentication failed … network error …</em> means that the Android account manager was not able to refresh the authorization of a Gmail account due to problems with the internet connection</p>
<p>The error <em>… Authentication failed … Invalid credentials …</em> could be caused by changing the account password or by having revoked the required account/contacts permissions. In case the account password was changed, you’ll need to authenticate the Google account in the Android account settings again. In case the permissions were revoked, you can start the Gmail quick setup wizard to grant the required permissions again (you don’t need to setup the account again).</p>
<p>The eror <em>… ServiceDisabled …</em> might be caused by enrolling in the <a href="https://landing.google.com/advancedprotection/">Advanced Protection Program</a>: “<em>To read your email, you can (must) use Gmail - You won’t be able to use your Google Account with some (all) apps & services that require access to sensitive data like your emails</em>”, see <a href="https://support.google.com/accounts/answer/7519408?hl=en&ref_topic=9264881">here</a>.</p>
<p>The error <em>… 334 … OAUTH2 asked for more …</em> probably means that the account needs to be authorized again, which you can do with the quick setup wizard in the settings.</p>
<p>When in doubt, you can ask for <a href="#get-support">support</a>.</p>
<p><br /></p>
<p><a name="faq23"></a> <strong>(23) Why do I get alert …?</strong></p>
<p>🌎 <a href="https://translate.google.com/translate?sl=en&u=https%3A%2F%2Fm66b.github.io%2FFairEmail%2F%23faq23">Google Translate</a></p>
<p><em>General</em></p>
<p>Alerts are warning messages sent by email servers.</p>
<p><em>Too many simultaneous connections</em> or <em>Maximum number of connections exceeded</em></p>
<p>This alert will be sent when there are too many folder connections for the same email account at the same time.</p>
<p>Possible causes are:</p>
<ul>
<li>There are multiple email clients connected to the same account</li>
<li>The same email client is connected multiple times to the same account</li>
<li>Previous connections were terminated abruptly for example by abruptly losing internet connectivity</li>
</ul>
<p>First try to wait some time to see if the problem resolves itself, else:</p>
<ul>
<li>either switch to periodically checking for messages in the receive settings, which will result in opening folders one at a time</li>
<li>or set some folders to poll instead of synchronize (long press folder in the folder list, edit properties)</li>
</ul>
<p>An easy way to configure periodically checking for messages for all folders except the inbox is to use <em>Apply to all …</em> in the three-dots menu of the folder list and to tick the bottom two advanced checkboxes.</p>
<p>The maximum number of simultaneous folder connections for Gmail is 15, so you can synchronize at most 15 folders simultaneously on <em>all</em> your devices at the same time. For this reason Gmail <em>user</em> folders are set to poll by default instead of synchronize always. When needed or desired, you can change this by long pressing a folder in the folder list and selecting <em>Edit properties</em>. See <a href="https://support.google.com/mail/answer/7126229">here</a> for details.</p>
<p>When using a Dovecot server, you might want to change the setting <a href="https://doc.dovecot.org/settings/dovecot_core_settings/#mail-max-userip-connections">mail_max_userip_connections</a>.</p>
<p>Note that it will take the email server a while to discover broken connections, for example due to going out of range of a network, which means that effectively only half of the folder connections are available. For Gmail this would be just 7 connections.</p>
<p><br /></p>
<p><a name="faq24"></a> <strong>(24) What is browse messages on the server?</strong></p>
<p>🌎 <a href="https://translate.google.com/translate?sl=en&u=https%3A%2F%2Fm66b.github.io%2FFairEmail%2F%23faq24">Google Translate</a></p>
<p>Browse messages on the server will fetch messages from the email server in real time when you reach the end of the list of synchronized messages, even when the folder is set to not synchronize. You can disable this feature in the advanced account settings.</p>
<p><br /></p>
<p><a name="faq25"></a> <strong>(25) Why can’t I select/open/save an image, attachment or a file?</strong></p>
<p>🌎 <a href="https://translate.google.com/translate?sl=en&u=https%3A%2F%2Fm66b.github.io%2FFairEmail%2F%23faq25">Google Translate</a></p>
<p>When a menu item to select/open/save a file is disabled (dimmed) or when you get the message <em>Storage access framework not available</em>, the <a href="https://developer.android.com/guide/topics/providers/document-provider">storage access framework</a>, a standard Android component, is probably not present. This might be because your custom ROM does not include it or because it was actively removed (debloated).</p>
<p>FairEmail does not request storage permissions, so this framework is required to select files and folders. No app, except maybe file managers, targeting Android 4.4 KitKat or later should ask for storage permissions because it would allow access to <em>all</em> files.</p>
<p>The storage access framework is provided by the package <em>com.android.documentsui</em>, which is visible as <em>Files</em> app on some Android versions (notable OxygenOS).</p>
<p>You can enable the storage access framework (again) with this adb command:</p>
<pre><code>pm install -k --user 0 com.android.documentsui</code></pre>