Email accounts overview
SuperMail is a front-end over the mailboxes you already own. You can connect any combination of these providers:
- Gmail / Google Workspace - OAuth
- Outlook / Microsoft 365 - IMAP + app password (OAuth planned)
- Yahoo Mail - IMAP + app password (OAuth planned)
- iCloud, Fastmail, and any other IMAP/SMTP provider - IMAP + app password
Your plan limits the total number of accounts:
| Plan | Max accounts |
|---|---|
| Starter | 2 |
| Plus | 3 |
| Pro | 6 |
| Business | 11 |
An account is any single connected mailbox - a Gmail / Workspace address, an Outlook / M365 mailbox, a Yahoo mailbox, an IMAP/SMTP account, or a custom domain you own. Custom domains aren’t a separate quota; they use the same account slots. You can fill your slots however you want:
- 3 accounts on Plus could be 2 Gmail + 1 Yahoo, or 1 custom domain + 2 Gmail, or 3 custom domains - whatever fits.
- Aliases and send-as addresses on an existing mailbox don’t count as additional accounts. Only a distinct mailbox or a distinct custom domain consumes a slot.
What happens on sync
When you add an account we:
- Store the credential (Gmail OAuth refresh token, or the IMAP/SMTP app password for everything else) in a dedicated secrets manager.
- Open an IMAP IDLE connection to the provider (Gmail’s IMAP host included), so new mail surfaces in near-real-time without polling.
- Backfill the last 30 days of mail (configurable up to 2 years) into your workspace.
- Start listening for new messages in real time.
Removing an account
Settings → Accounts → [account] → Disconnect. We purge the refresh token (or app password) immediately. Synced mail is removed by our retention sweep on a regular cadence (the sweep daemon ships in v0.6.2 - see the changelog for status). The source mailbox is untouched - your messages still live on Gmail / Outlook / etc.
See Remove an account for the long version (including what happens to tags, sent mail, and drafts).
Reauthentication
Credentials can go stale - Gmail OAuth tokens get invalidated on password change or security review, and IMAP app passwords stop working if you regenerate them on the provider side. When that happens we surface a Reauthenticate banner on the affected account. See Reauthentication.