The Settings Pages
What each tab under Settings is for, grouped by purpose.
Mail Setup
Preferences
Every display, mailbox, composing, contacts, folder, server, encryption, label and calendar option. Covered item by item in Preferences Explained.
Folders
Create, rename, nest, subscribe and delete folders, and see each folder's message count and size. Click a folder to edit it: its name, its parent folder, and its List view mode (list or threads, per folder). The checkbox beside each folder is its subscription; unsubscribed folders stay on the server but disappear from the mail screen. Empty deletes everything in a folder. Full guide: Using Folders.
Identities
One entry per address you send from. Identities are not aliases: receiving mail at an address needs nothing here, and you create an identity only to send or reply as that address. Each has a display name, email address, organization, Reply-To, an automatic Bcc, a signature (plain or HTML), encryption settings, and optionally its own outgoing SMTP server (prefix it with ssl:// or tls://) for sending through another provider, which is how replies from a fetched account stay authentic to it. When you reply, the identity matching the address the message came to is chosen automatically. An identity is also required before Auto-Encryption can encrypt mail to that address. Set default picks the one the composer starts with. Guide: Using Identities.
Responses
Canned texts for the Insert a response button in the composer. Each has a name and a body, plain or HTML.
DAV Server
Sync tokens for connecting phones, tablets and desktop apps to your calendars, tasks, contacts and notes over CalDAV, CardDAV and WebDAV. Each token is a separate random username and password with its own permissions per calendar and address book, so a lost phone is revoked by deleting one token, and permissions and expiry can be changed later without creating a new one. Open Calendar and Tasks once before creating your first token, so the default calendar and task list exist. The username and password are shown once, work only as a pair, and cannot be recovered; copy both while they are on screen. Setup for every platform: Syncing Calendars, Tasks and Contacts and Syncing Notes.
National Holidays
Import the public holidays of any country into a calendar of your choice, with a color and a preview first. Update Currently Imported Holidays refreshes what you imported earlier. Details: National Holidays.
More Calendars
Computed calendar feeds you subscribe to: sun and moon events, religious holidays across many traditions, cultural festivals, calendar-system dates, and daily date labels, each added to a calendar you pick with a color. Update my calendars refreshes your subscriptions. Details: More Calendars.
Account and Addresses
Account Information
Your plan, its expiry date, your storage use, and the server settings (hostnames, ports, encryption) for setting up any mail client. Guide: Account Information.
Random Aliases
Throwaway addresses made of random characters, for sign-ups you do not trust. The page proposes a name (Regenerate for another), you pick the domain, add an optional note to remind you what it is for, and click Add; a copy button puts the alias on your clipboard. New aliases take up to fifteen minutes to become active. A deleted alias is retired for good and can never be reused, so mail to it stops permanently. The number of aliases, and of changes per day, depends on your plan.
Masked Aliases
Your category system: a masked alias is a name you choose at a CodaMail domain, with no visible link to your account, and it comes with its own catch-all subdomain, so anything@alias.domain reaches you and you can give each website its own address without creating anything in advance. An address whose name is a date in YYYYMMDD form expires automatically after that day. The number of masked aliases depends on your plan; deleting one rejects all mail to it and its subdomain. Guides: Alias Types and Using Aliases.
Account Aliases
Your account name at any of the 30-plus CodaMail domains: tick a domain and youraccount@thatdomain delivers to you, together with its catch-all subdomain (anything@youraccount.thatdomain). They do not count against your masked-alias allowance, but they do contain your account name, so use masked aliases where separation matters. See available domains.
Private Domains
Use your own domain with CodaMail at no extra charge: prove ownership with a DNS TXT record, add the MX, SPF and DMARC records the page shows, and every address at the domain reaches you through catch-all addressing. Subdomains of a verified domain verify automatically, and you can route a whole subdomain or individual addresses to other CodaMail accounts, for a family or a team. Blocking, filters and auto-encryption all work on these addresses. Guide: Custom Domains.
Manage Catch-alls
Controls which addresses are accepted at each of your catch-all domains: your masked-alias subdomains, account-wide aliases and private domains. Pick a domain in the View list and set its Goldlist only switch: on means only the addresses you list are accepted and everything else is rejected; off means everything is accepted except the addresses you list. Viewing All domains shows your whole list, with a badge saying which mode each entry's domain is in, and lets you add a bare alias (matched at every domain) or a full address. The Kill Alias button in the mail screen adds the killed address here; delete the entry to accept mail at it again. Turning Goldlist only on with nothing listed blocks all mail to that domain.
Incoming Mail
Mail Delivery Filters
Rules that run on the server as each message arrives, before any client sees it: file into a folder, forward, reply, flag, label, discard, or encrypt with PGP, matched on headers, body, size, date or spam score. Filters run top to bottom (reorder them with the arrows) and most should end with Stop evaluating rules so later filters do not act on the same message. Create filter on any message pre-fills a rule from it. Advanced users can keep several filter sets and edit the raw script. Filters work whether or not the webmail is open. Guide: Understanding Mail Filters.
Out of Office Auto-Reply
An automatic reply with a start and end date and a limit on how often one address is answered. It is a filter underneath, so it runs on the server. Guide: Auto-Reply and Forwarding.
Forwarding
Send a copy of every incoming message to another address, or redirect it there entirely, with an On/Off switch so you can pause it without losing the setting. Like the auto-reply, it is a server-side filter, so it runs whether or not you are logged in. Shown on plans that include forwarding. Guide: Auto-Reply and Forwarding.
Whitelist
Senders and addresses whose mail skips every check (spam filtering, virus scanning, your block list, and your filters) and goes straight to a folder you choose. Use it sparingly: whitelisted mail bypasses everything. Guide: Whitelist.
Block List
Addresses, domains, top-level domains and sending servers you have blocked. Mail from them is refused at the SMTP level with a "User Unknown" error, before it is ever accepted into your account. The Block button in the mail screen adds entries here; you can also add them by hand (addresses, domains, bare top-level domains such as xyz, and server: entries for sending servers, with * and ? wildcards), export the list, import one (merging with or replacing your current entries) and delete all. The number of entries depends on your plan. Guide: Blocking Mail.
Antispam Tools
Your personal spam-filter settings, in six sections: General (the score threshold, the subject tag, and the languages you expect mail in), Internet Based Junk Tests (Razor, Pyzor, DCC and blocklists), Bayes (the learning classifier and its auto-learn thresholds), Message Headers, Report Settings, and Address Rules (accept or reject by sender or recipient, with wildcards). Each section has a Restore Default Settings button. Guide: Antispam Tools.
Fetch Mail
Pull mail from other accounts (any POP3 or IMAP mailbox) into CodaMail on a schedule, optionally leaving copies on the other server. The status of each account's last fetch is shown. Guide: Fetch Mail.
Auto-Encryption
Encrypt incoming mail with PGP as it arrives, so it is stored encrypted even though it was sent in the clear. With Encrypt All Mail on, every message is encrypted to the key for your main address; with it off, only mail to the addresses you list is encrypted, each to its own key. Each address needs an identity and a key in Manage PGP Keys first, or that mail is stored unencrypted. Encrypted mail cannot be searched by content and needs your key password to read, so most people encrypt selected aliases rather than everything. You can keep the private key off the server entirely and read the mail in a desktop client or with Mailvelope. Guide: Automatic PGP Encryption.
Outgoing Mail
Scheduled Messages
Messages waiting to be sent at a time you chose in the composer. Reschedule or cancel any of them until it goes out.
Add/Change Headers
Add your own headers to every message you send, or change the value of a standard one. Rarely needed; useful for mailing-list or organizational conventions. Guide: Custom Headers.
Remove Headers
Strip particular headers from your outgoing mail beyond the ones CodaMail already removes. Most people never need this; the identifying headers are gone by default. Guide: Custom Headers.
Deadman Switch
Messages that are sent automatically if you stop logging in for a period you set. The timer resets on every login, with reminders before it fires. For passing on instructions, passwords or a last word. Guide: Deadman Switch.
Security
Manage PGP Keys
Your PGP key pairs and the public keys of your correspondents. Generate a key pair, import keys from files or from a message, export them, and delete them. The composer's sign and encrypt options use these keys. Guide: Managing PGP Keys.
Password
Change your account password, the one you use for the webmail. Mail programs and phones connecting from outside the service use App Passwords instead, so changing this does not disturb them. Guide: Password, Recovery and Login History.
Password Recovery
Set up self-service recovery for a forgotten password: a security question, its answer, and a recovery email address outside CodaMail. When you use the password recovery page, an email carrying your question and a link valid for 15 minutes goes to that address, and answering the question lets you set a new password. The stored details are encrypted. Without this set up there is no way to recover a lost password. Guide: Password, Recovery and Login History.
App Passwords
Separate passwords for mail programs and phones. Each is a random username and password with its own permitted services (IMAP, POP3, SMTP), optional IP restrictions and an expiry, so your real password never leaves the webmail and any device can be cut off alone. Connections from outside the service require an app password; your account password is for the webmail. Guide: App Passwords.
Security Keys
Hardware keys (YubiKey and other FIDO2 keys) and platform authenticators (Touch ID, Windows Hello) as a second factor at login. Two keys are required before the gate can be turned on, one of them a separate roaming key, so losing one never locks you out; an optional one-time recovery key lets support reset your keys if all of them are lost. Keys cannot be used in text-only mode. Guide: Security Keys.
TOTP Two-Factor
Six-digit codes from an authenticator app as a second factor, set up by scanning a QR code or entering the secret. Save the one-time recovery codes the page generates; they are the way back in if you lose the phone. At login you can choose not to be asked again on a trusted computer for a number of days. Mail programs are unaffected, since they use App Passwords. Security keys and TOTP are alternatives; you use one or the other. Guide: Two-Factor Authentication.
Last login
The last ten logins over the past five days: date and time, IP address (partly masked) and browser. Check it if you suspect someone else has your password. The data is kept only for those five days. Guide: Password, Recovery and Login History.
Next: Contacts.