Find the message you see, or start with Settings → Accounts, where every mailbox shows its own status.
Mailboxes and sync
Nothing shows up after I connect a mailbox
This is expected. Connecting imports nothing from the past. Send yourself a message from another account, then look in the Screener, where new senders wait until you decide about them. To bring in older mail, use Re-sync with an import size (up to 200 messages).
Nothing syncs while running locally
The local development server does not run the background job. Press Sync in Settings → Accounts, or switch to another tab and back.
A mailbox shows a sync problem
Open Settings → Accounts. The message sits next to the mailbox, and the sync log for it is one click away. The messages that matter most:
| Message | Meaning | Fix |
|---|---|---|
Google revoked access (invalid_grant). Please reconnect. | Google ended the sign-in. This happens after a password change, after you remove the app in your Google account, or after 7 days when your Google app is still in "Testing". | Choose Reconnect on the mailbox. To stop the 7-day limit, publish the Google app (see Mailboxes). |
invalid_grant, AADSTS700082 or AADSTS50173 from Microsoft | Microsoft ended the sign-in. | Choose Reconnect. |
Couldn't reach the provider. Check the base URL. | The provider's address is wrong, or the server cannot reach it. | Check the host name. From the server, curl -I https://THE_HOST should connect. |
Stopped syncing | The mailbox was disconnected after repeated failures. | Fix the cause shown, then choose Sync to wake it. |
A timeout in the middle of a large import clears itself on the next good step.
Gmail: "Google doesn't accept this email and app password together"
You connected Gmail over IMAP with a password. imbox says which of Google's three refusals it was:
- Google wants an app password here, not the normal one. Make one at
myaccount.google.com/apppasswords, in the same Google account, with 2-Step Verification on. Paste it whole. Spaces are fine, imbox removes them. - Google doesn't accept this email and app password together. The app password was made in a different Google account, was copied wrongly, or the address is an alias and not the account's main address. If you cannot make app passwords at all, your admin has turned them off.
- Google says IMAP is turned off for this account or domain. On Workspace, an admin turns it on under Admin console → Apps → Google Workspace → Gmail → End user access → POP and IMAP.
Better still, connect Gmail with Connect Gmail, which needs no password. See Mailboxes.
Gmail sign-in says redirect_uri_mismatch or "access blocked"
redirect_uri_mismatch: the redirect address in the Google Cloud console must be exactlyhttps://YOUR_ADDRESS/auth/google/callback, with the same scheme and no trailing slash.- "Access blocked" or "app not verified": your address must be listed under test users on the OAuth consent screen, until you publish the app.
Outlook: AADSTS50011, AADSTS65001, or it stops after about an hour
AADSTS50011: the redirect address in Azure must match exactly, includinghttps, the port and any final slash:https://YOUR_ADDRESS/auth/microsoft/callback.AADSTS65001: the Graph permissions were not added or not saved. AddMail.ReadWrite,Mail.Send,User.Readandoffline_access.- Stops after about an hour:
offline_accessis missing.
See Mailboxes for the whole setup.
IMAP says "Invalid credentials", or SMTP says 535
In order of likelihood: the provider's plan has no IMAP; IMAP is switched off in the provider's own settings; you typed your normal password where an app password is needed; a work or school account is pointed at the personal server names. Test connection before saving shows the provider's own words.
I changed SESSION_SECRET
Everything imbox stored encrypted becomes unreadable: IMAP and SMTP mailbox passwords, AI keys, Google and Microsoft app secrets, the Stalwart key, webhook secrets and two-factor secrets. Gmail and Outlook mailboxes have to be connected again. Put the old secret back and restart. If it is gone for good, sign in with your password, then reconnect Gmail and Outlook, re-enter each mailbox password, your AI key and your app secrets. Two-factor has to be switched off in the database, as shown above.
"Reset done, but the first sync failed"
You chose a fresh start on a mailbox, and the first check failed. The reason follows the colon. Fix that, then press Sync.
Sending
SMTP says smtp_port_25_blocked
Port 25 is for mail between servers, not for sending from a mailbox. Use 465 or 587. Change the SMTP port in the mailbox settings. Use 465 with SSL, or 587 with STARTTLS.
"This mailbox has sent 60 messages in the last hour. Try again later."
imbox caps each mailbox at 60 sends an hour, and 20 recipients on one message. The reply says when to try again. Both limits protect a mailbox from being flagged as a spammer.
Messages leave but arrive in spam
A message goes out through your own mailbox, so its reputation is your provider's, not imbox's. For a domain mailbox, check that SPF, DKIM and DMARC are set for the domain at your DNS host.