Features
Everything work email needs. Written as it is.
A webmail with a layout you already know, calendars and contacts, the clients and phones you use, large files via link. Every feature on this page exists today; the ones in beta say so.
01 — The webmail
Familiar at first glance. Fast from the second.
Search bar at the top, folders on the left, list and reading pane. Coloured labels, drag and drop, keyboard shortcuts. New mail shows up on its own, with no page reload.
A sample scene with made-up data: a message gets the “Invoices” label, then the j, s and / shortcuts.
Folders and subfolders
Create, rename, move and delete them from the webmail. They are real folders, the same ones you see on your phone and in other clients.
Coloured labels
Up to 100 per mailbox, in 9 colours. They are standard IMAP tags: other mail clients see them and can filter on them; the readable name and the colour are the webmail's.
Drag, or use the menu
Messages onto folders and labels by dragging, or from the keyboard and the menu with “Move to…” and “Label”. Star, read and unread, an “Unread only” filter.
Gmail-style shortcuts
j and k move, o opens, u goes back to the list, # deletes, s stars, / searches, c composes; r, a and f reply, reply all and forward. They can be switched off.
Search for “invoices”, find “invoice” too.
Search looks at the subject, the body and text attachments, and understands word forms. In testing, about 5 milliseconds across 10,000 messages.
- Subject, body and text attachments, within the open folder.
- New mail appears without reloading the page.
- No email content is kept in the browser's storage.
02 — Writing
Write, attach, send. Then see where it went.
A rich-text editor, recipients suggested as you type, drafts saved on the server, attachments up to 25 MB per message. For a bigger file, a link straight from the compose window.
- Recipients are suggested from your own address book and your company's directory, never anyone else's.
- Drafts are saved on the server: you find them in your other mail clients too.
- Attachments up to 25 MB per message, stored encrypted for as long as the draft exists. Beyond that, the file travels as a link, up to 2 GiB.
- Once sent, the delivery status sits inside the message itself. If something looks wrong, “Why didn't it arrive?” has an answer, with sources.
- The sender is always you: the address is bound to the signed-in user, nobody can write in someone else's name.
03 — Protected reading
Every email opens in an isolated frame. Tracking pixels stay out.
An email's HTML is code written by somebody else. Before showing it to you, we clean it on the server and seal it in a frame that cannot run code or talk to the network. Remote images stay blocked until you decide otherwise.
Cleaning on the server
Before it reaches the browser, the HTML is cleaned: scripts and deceptive overlays go; links open in a new tab and get flagged when their text shows a different domain from their destination.
Rules of the frame
The message lives in a frame with rules of its own: no scripts, no network, no forms. A tracking pixel never even fires.
Isolated frame
The frame has an origin of its own: it cannot see your cookies or the webmail, and it cannot navigate anywhere. All three layers are needed, and we put them through 38 hostile emails in 3 browsers.
- Remote images are blocked by default, against tracking pixels. If you show them, they go through a proxy that hides your IP address and forwards neither cookies nor referrer.
- A warning when a link's text shows a different domain from its destination: the most common phishing trick.
- No email content is kept in the browser's storage: close the session and nothing is left behind.
- Before it even gets here, every message has been through the antispam and the antivirus. How it works, item by item.
04 — Calendars and contacts
Calendars that answer, rooms that book themselves.
Day, week, month and agenda. Invitations answered from the webmail, colleagues' availability without seeing their details, rooms and equipment that accept or decline on their own. Personal address books with import and export.
Invitations and availability
Invitations to attendees, answered straight from the webmail: accept, maybe, decline. Colleagues' availability shows only the busy slots, never the details. Recurring events (daily, weekly, monthly, yearly) and time zones handled correctly, checked against a set of 222 recurrence rules.
Rooms and equipment
A room or a projector is invited like an attendee: it accepts on its own, or declines when the time overlaps another booking. On-screen reminders.
Sharing and address books
Share a calendar with colleagues on three levels: availability only, read, edit. Personal address books with vCard and CSV import and export; the company directory in suggestions, always limited to your own company.
05 — Mail clients and phones
Works with the mail clients and phones you already use.
Standard protocols, encrypted only: IMAP, POP3, SMTP, CalDAV, CardDAV and Exchange ActiveSync. The server publishes automatic configuration for every domain, and every device gets a password of its own, revocable on its own.
The webmail on a phone: folders and list on two separate screens, navigation at the bottom. Every screen works at 390 px wide.
| Protocol | Port | Encryption | Used for |
|---|---|---|---|
| IMAP | 993 | TLS | reading mail from clients |
| POP3 | 995 | TLS | downloading mail |
| SMTP | 465 · 587 | TLS · STARTTLS | sending, with authentication |
| CalDAV · CardDAV | HTTPS | TLS | calendars and contacts |
| Exchange ActiveSync | HTTPS | TLS | mail, calendars and contacts on phones |
The unencrypted versions don't exist. Automatic configuration is published by the server for every domain: autoconfig (Thunderbird), Autodiscover (Outlook, XML and JSON), a profile for iPhone, iPad and Mac, SRV records.
App passwords
One per device, generated by the server and shown only once. It has a scope, shows its last use and can be revoked on its own.
- Jane's iPhoneActiveSynclast used today, 09:41
- Office laptopReading maillast used yesterday, 18:20
- Lost tabletRevokedcalendars and contacts · revoked on 14 October
- Every app password covers one scope: reading mail, sending, calendars and contacts, or ActiveSync. Lose your phone and you revoke only its password, not the account.
- The webmail's labels show up in other clients too, as IMAP tags. Folders are the same everywhere.
- The sender is always bound to the signed-in user: no client can send in someone else's name.
06 — Large files
Up to 2 GiB, as a link. Encrypted, scanned, with an expiry.
From the compose window, a file too big for an attachment travels as a link. The recipient opens a page under your brand, sees the name, size, expiry and the date of the last antivirus scan, and downloads.
- Up to 2 GiB per file, sent as a link from the compose window: mail and ordinary attachments don't change. Large-file storage doesn't eat into the mailbox quota.
- The link expires after 14 days, extendable up to 30. You see the files you have shared and can extend, revoke or renew the link.
- Every file is scanned by the antivirus before the link works, and again after 24 hours. It is encrypted in pieces, with a key of its own.
- A download page under the sender's or the reseller's brand: name, size, expiry and date of the last scan. We write “no known malware detected”, never “clean”.
- Whoever receives the file can report it; whoever gets blocked can contest the decision, as the Digital Services Act requires.
Default values: the limits are adjusted from the panel.
07 — Documents beta
A place for your files, right next to your mail.
Personal folders, sharing with colleagues in your company, public links, trash, versions and a quota of its own. From the webmail you save an attachment into Documents and attach a file from Documents.
It is switched on, in beta: the features are there, and we are still testing them all the way through. Desktop sync is coming soon.
08 — Accessible, in two languages
From the keyboard, from a phone, in Italian or in English.
An interface in Italian and English, designed for WCAG 2.1 AA and checked with automated accessibility tests on desktop and mobile.
4.5:1 contrast
Readable text on every background, including the colours of labels and calendars.
ClientsInvoicesPendingAI assistantFull keyboard support
Every action works from the keyboard, with focus always visible. Every drag has an alternative in the menu.
Move to…44 px touch targets
Buttons and menu items big enough for a finger, on phones and tablets.
44Every button and every menu item.Never colour alone
A status can always be read from text or an icon too. Animations stop when the system asks for reduced motion.
DeliveredPendingBounced
The checks are automated (axe), on desktop and mobile; there is no external audit yet. The same rules apply to this website.
Frequently asked
The things people ask before they try it.
Can I use my own mail client and my phone?
Yes, over standard protocols: IMAP, POP3 and SMTP for mail, CalDAV and CardDAV for calendars and contacts, Exchange ActiveSync for phones. Encrypted only. The server publishes automatic configuration for every domain, so most clients set themselves up with the address and an app password.
Do I see labels and folders outside the webmail too?
Yes. Folders are ordinary IMAP folders. Labels are standard IMAP tags: a client that supports them shows them as tags with a technical name; the name and colour you choose apply in the webmail.
How big can an attachment be?
Up to 25 MB per message, by default. Beyond that, the file travels as a link from the same compose window: up to 2 GiB, encrypted, scanned by the antivirus and with an expiry you choose, up to 30 days.
Can I bring my old mailbox over?
Assisted migration is coming soon: from any IMAP mailbox with TLS and from Google Workspace or Microsoft 365, with a trial run, a copy, a final catch-up and a guided DNS switch. What's coming soon.
I deleted an email by mistake: can it be recovered?
The trash is the first place to look. Then there are the encrypted nightly backups: support restores the messages into a “Restored” folder, without touching the rest. Doing the restore from the webmail yourself is coming soon.
Want to see it live?
A walkthrough of the webmail and the panel, with your questions about features and the clients you use.
Write to info@qmail365.com