Help Center
Security
Security recommendations
Practical steps to keep your mailboxes and links safe.
- Treat every reader URL and API key like a password. Do not post them in public channels, tickets or screenshots.
- Create separate reader links for separate purposes, each with only the mailboxes it needs.
- Rotate a link immediately if you suspect it was exposed, and disable links you are not using.
- Avoid opening reader links on shared or public computers; if you must, rotate the link afterwards.
- Use a strong, unique password for InboxReader and sign out of all sessions from Settings if a device is lost.
- Review Dashboard → Activity for unexpected reader access or sign-ins.
- Remove mailboxes you no longer need, and revoke InboxReader in your Microsoft account if you stop using it.
- Only connect mailboxes you own or are explicitly authorized to access.
See the Security page for how InboxReader protects credentials and what it does not protect against.