Connecting mailboxes

Astreo is a client, not a provider. Connect your existing mailboxes via OAuth or IMAP.

Astreo connects existing mailboxes. Preferably via OAuth (Microsoft 365/Outlook) — more secure and with no password in Astreo — or via IMAP/SMTP for any other provider. You can run as many accounts in parallel as you like.

Connect Gmail (OAuth) — currently unavailable

Note: The Gmail connection is currently unavailable. Astreo does not request any Gmail permissions at this time; Google's approval for Gmail access is still pending. Until then, please connect a Google mailbox via IMAP/SMTP using an app password. Once available, it will work like this:

• Open account settings → Connect mailbox → Google.
• You're redirected to Google and confirm access to email.
• Back in Astreo the account is ready immediately; the first sync starts automatically.

Astreo then only stores an encrypted access token, never a password.

Connect Microsoft (OAuth)

• Account settings → Connect mailbox → Microsoft.
• Sign in and consent in your Microsoft / Microsoft 365 account, then return to Astreo.
• Works for Outlook.com and business Microsoft 365 mailboxes.

Connect IMAP/SMTP

For providers without OAuth (or your own mail servers):

• IMAP (receiving): host, port and whether TLS/SSL.
• SMTP (sending): host, port, encryption.
• Credentials: username and password — stored encrypted at rest, never logged in plaintext.

Many providers require an app password instead of your normal password — check their security settings.

Multiple accounts & account colours

Connect as many mailboxes as you need. In the left column, "All mailboxes" bundles the shared inbox; each account also appears individually below. You can assign each account a colour — so in the combined list you can tell at a glance which address a mail went to.

Synchronisation & status

• Astreo syncs incrementally in the background; new mail appears automatically.
• Use "Fetch now" to trigger an immediate sync.
• Per account you see the last sync time and any sync errors (e.g. expired credentials). For OAuth accounts, re-authorising is then enough.