Delegation gives one trusted SipherMail user access to your mailbox without sharing your password. You choose what they can do and for how long. You can end it at any time. It is set up and used on the web. The iPhone and Android apps have no Delegation screen.
Give someone access#
- Open Settings > Delegation.
- Under Give someone access, enter their SipherMail address. They need a SipherMail account.
- Tick what they can do:
- Read mail: open and read your mail.
- Send on your behalf: send mail that shows you as the sender.
- Choose how long access lasts: no expiry, 1, 7, 30 or 90 days. The form starts at 30 days.
- Choose Send offer.
Sending includes reading. Nothing happens until the other person accepts. They get an email and a notice in their security activity. Only you can offer access. An organisation admin cannot grant access to a member’s mailbox.
You can have up to 10 delegations at a time, and one per person. To change someone’s permissions, revoke the delegation and offer a new one.
What the delegate does#
In Settings > Delegation, under Mailboxes you can access, they choose Accept access or Decline. After accepting, Open mailbox opens your inbox in the web app. When they send on your behalf, they pick your name in the From list, marked "(on behalf)".
The message shows you in From and names the delegate in the Sender header. A copy goes to your Sent folder.
A delegate can never change your settings, password, app passwords, keys, identities, filters or other delegations, whatever permissions you give.
Check what they did#
Choose Activity next to a person. The log shows when the offer was made, accepted or revoked, when they opened your mailbox, and each time they read, sent or were blocked, with the time. It never records message content. The log is available while the delegation is waiting or active. Offers, acceptance, revocation and each time a delegate opens your mailbox also appear in your security activity.
End access#
Choose Revoke access. Access stops straight away, including on the mail server. While a delegation is active, the delegate’s access shows in your App passwords list as Delegate- followed by eight characters. Access also ends on the expiry date. The delegate can end it themselves with Stop access.
If the mail server cannot be reached when you revoke, SipherMail blocks the delegate at once and keeps retrying the removal.