[{"data":1,"prerenderedAt":423},["ShallowReactive",2],{"navigation":3,"\u002Fsecurity\u002Foverview":216,"\u002Fsecurity\u002Foverview-surround":420},[4,9,14,40,57,74,95,112,133,150,199,208],{"title":5,"path":6,"stem":7,"icon":8},"Quick start","\u002Fgetting-started","01.getting-started","i-lucide-rocket",{"title":10,"path":11,"stem":12,"icon":13},"Set up from the terminal","\u002Fcli","02.cli","i-lucide-terminal",{"title":15,"path":16,"stem":17,"children":18,"page":39},"Domains & DNS","\u002Fdomains","03.domains",[19,23,27,31,35],{"title":20,"path":21,"stem":22},"Adding a domain","\u002Fdomains\u002Fadding-a-domain","03.domains\u002F01.adding-a-domain",{"title":24,"path":25,"stem":26},"Automatic DNS setup","\u002Fdomains\u002Fautomatic-dns-setup","03.domains\u002F02.automatic-dns-setup",{"title":28,"path":29,"stem":30},"Manual DNS records","\u002Fdomains\u002Fmanual-dns-records","03.domains\u002F03.manual-dns-records",{"title":32,"path":33,"stem":34},"Domain verification","\u002Fdomains\u002Fverification","03.domains\u002F04.verification",{"title":36,"path":37,"stem":38},"Troubleshooting DNS","\u002Fdomains\u002Ftroubleshooting","03.domains\u002F05.troubleshooting",false,{"title":41,"path":42,"stem":43,"children":44,"page":39},"Mailboxes & Aliases","\u002Fmailboxes","04.mailboxes",[45,49,53],{"title":46,"path":47,"stem":48},"Creating mailboxes","\u002Fmailboxes\u002Fcreating-mailboxes","04.mailboxes\u002F01.creating-mailboxes",{"title":50,"path":51,"stem":52},"Aliases","\u002Fmailboxes\u002Faliases","04.mailboxes\u002F02.aliases",{"title":54,"path":55,"stem":56},"Passwords, passkeys & access","\u002Fmailboxes\u002Fpasswords-and-access","04.mailboxes\u002F03.passwords-and-access",{"title":58,"path":59,"stem":60,"children":61,"page":39},"Using Your Mail","\u002Fmail","05.mail",[62,66,70],{"title":63,"path":64,"stem":65},"Webmail","\u002Fmail\u002Fwebmail","05.mail\u002F01.webmail",{"title":67,"path":68,"stem":69},"IMAP & SMTP settings","\u002Fmail\u002Fimap-smtp-settings","05.mail\u002F02.imap-smtp-settings",{"title":71,"path":72,"stem":73},"iPhone setup","\u002Fmail\u002Fios-profile","05.mail\u002F03.ios-profile",{"title":75,"path":76,"stem":77,"children":78,"page":39},"Drive","\u002Fdrive","06.drive",[79,83,87,91],{"title":80,"path":81,"stem":82},"Drive overview","\u002Fdrive\u002Foverview","06.drive\u002F01.overview",{"title":84,"path":85,"stem":86},"Uploading & organising files","\u002Fdrive\u002Ffiles-and-folders","06.drive\u002F02.files-and-folders",{"title":88,"path":89,"stem":90},"Sharing files","\u002Fdrive\u002Fsharing","06.drive\u002F03.sharing",{"title":92,"path":93,"stem":94},"Connect Drive to other apps","\u002Fdrive\u002Fconnect-apps","06.drive\u002F04.connect-apps",{"title":96,"path":97,"stem":98,"children":99,"page":39},"Sending & Campaigns","\u002Fsending","07.sending",[100,104,108],{"title":101,"path":102,"stem":103},"Sending limits","\u002Fsending\u002Flimits","07.sending\u002F01.limits",{"title":105,"path":106,"stem":107},"Campaigns","\u002Fsending\u002Fcampaigns","07.sending\u002F02.campaigns",{"title":109,"path":110,"stem":111},"Deliverability & staying out of spam","\u002Fsending\u002Fdeliverability","07.sending\u002F03.deliverability",{"title":113,"path":114,"stem":115,"children":116,"page":39},"Transactional Email","\u002Ftransactional","08.transactional",[117,121,125,129],{"title":118,"path":119,"stem":120},"Transactional email","\u002Ftransactional\u002Foverview","08.transactional\u002F01.overview",{"title":122,"path":123,"stem":124},"Templates","\u002Ftransactional\u002Ftemplates","08.transactional\u002F02.templates",{"title":126,"path":127,"stem":128},"Sending via the API","\u002Ftransactional\u002Fsend-api","08.transactional\u002F03.send-api",{"title":130,"path":131,"stem":132},"Webhooks","\u002Ftransactional\u002Fwebhooks","08.transactional\u002F04.webhooks",{"title":134,"path":135,"stem":136,"children":137,"page":39},"Migrations","\u002Fmigrations","09.migrations",[138,142,146],{"title":139,"path":140,"stem":141},"Migrating your email","\u002Fmigrations\u002Foverview","09.migrations\u002F01.overview",{"title":143,"path":144,"stem":145},"Migrating from Gmail","\u002Fmigrations\u002Ffrom-gmail","09.migrations\u002F02.from-gmail",{"title":147,"path":148,"stem":149},"Migrating from Microsoft 365","\u002Fmigrations\u002Ffrom-microsoft-365","09.migrations\u002F03.from-microsoft-365",{"title":151,"path":152,"stem":153,"children":154,"page":39},"AI & Developers","\u002Fdevelopers","10.developers",[155,159,163,167,170,174,178,182,187,191,195],{"title":156,"path":157,"stem":158,"icon":8},"Quickstart","\u002Fdevelopers\u002Fquickstart","10.developers\u002F00.quickstart",{"title":160,"path":161,"stem":162},"Connect Claude","\u002Fdevelopers\u002Fconnect-claude","10.developers\u002F01.connect-claude",{"title":164,"path":165,"stem":166},"AI agents & API keys","\u002Fdevelopers\u002Fai-agents","10.developers\u002F02.ai-agents",{"title":130,"path":168,"stem":169},"\u002Fdevelopers\u002Fwebhooks","10.developers\u002F03.webhooks",{"title":171,"path":172,"stem":173},"Partner API","\u002Fdevelopers\u002Fpartners","10.developers\u002F04.partners",{"title":175,"path":176,"stem":177},"Intake and Lens","\u002Fdevelopers\u002Fintake","10.developers\u002F05.intake",{"title":179,"path":180,"stem":181},"Use Faivelo from your coding agent","\u002Fdevelopers\u002Fcoding-agents","10.developers\u002F06.coding-agents",{"title":183,"path":184,"stem":185,"icon":186},"Errors","\u002Fdevelopers\u002Ferrors","10.developers\u002F07.errors","i-lucide-circle-alert",{"title":188,"path":189,"stem":190},"Email your agent","\u002Fdevelopers\u002Femail-your-agent","10.developers\u002F08.email-your-agent",{"title":192,"path":193,"stem":194},"Email agent with Claude","\u002Fdevelopers\u002Fagent-with-claude","10.developers\u002F09.agent-with-claude",{"title":196,"path":197,"stem":198},"Email agent with ChatGPT","\u002Fdevelopers\u002Fagent-with-chatgpt","10.developers\u002F10.agent-with-chatgpt",{"title":200,"path":201,"stem":202,"children":203,"page":39},"Billing","\u002Fbilling","11.billing",[204],{"title":205,"path":206,"stem":207},"Billing & plans","\u002Fbilling\u002Fplans","11.billing\u002F01.plans",{"title":209,"path":210,"stem":211,"children":212,"page":39},"Security","\u002Fsecurity","12.security",[213],{"title":209,"path":214,"stem":215},"\u002Fsecurity\u002Foverview","12.security\u002F01.overview",{"id":217,"title":209,"body":218,"description":413,"extension":414,"links":415,"meta":416,"navigation":417,"path":214,"seo":418,"stem":215,"__hash__":419},"docs\u002F12.security\u002F01.overview.md",{"type":219,"value":220,"toc":400},"minimark",[221,225,230,241,255,261,265,272,276,283,287,294,323,326,330,343,347,350,354,357,384,388],[222,223,224],"p",{},"Email hosting means holding things that matter: your messages, your passwords, and API keys for your domain registrar. Here's concretely how Faivelo protects them — no hand-waving.",[226,227,229],"h2",{"id":228},"encryption-at-rest","Encryption at rest",[222,231,232,236,237,240],{},[233,234,235],"strong",{},"Registrar API keys"," (the Cloudflare, GoDaddy, Namecheap, or Route 53 credentials you provide for automatic DNS setup) are encrypted with ",[233,238,239],{},"AES-256-GCM"," before they're stored. They're decrypted only at the moment Faivelo talks to your registrar, and they're never shown back to you in the dashboard.",[222,242,243,246,247,250,251,254],{},[233,244,245],{},"Mailbox passwords"," are also AES-256-GCM encrypted at rest. They have to be encrypted rather than hashed because the mail server needs the real password to authenticate your email apps — which is why Faivelo shows a mailbox password ",[233,248,249],{},"only when it is created or reset",". The dashboard never displays a stored password. If it's lost, you reset it; you don't recover it. Mailbox users can protect their own mailbox with a passkey and a recovery email — see ",[252,253,54],"a",{"href":55},".",[222,256,257,260],{},[233,258,259],{},"Your account email address"," is encrypted at rest as well, with a separate keyed hash used for login lookups — so even the address you sign in with isn't sitting in the database as plain text.",[226,262,264],{"id":263},"your-account-password","Your account password",[222,266,267,268,271],{},"Your Faivelo login password is ",[233,269,270],{},"hashed with bcrypt (12 rounds)",", never encrypted and never stored in a recoverable form. Faivelo cannot read it, and a database leak would not reveal it. Password resets always issue a new one — there is no \"email me my password.\"",[226,273,275],{"id":274},"sessions","Sessions",[222,277,278,279,282],{},"Signing in issues a signed session token stored in an ",[233,280,281],{},"httpOnly cookie",". \"httpOnly\" means the browser withholds it from any JavaScript running on the page, so a script injected into your browser can't steal your session. The cookie is scoped to Faivelo and expires on its own.",[226,284,286],{"id":285},"api-keys","API keys",[222,288,289,290,293],{},"Developer API keys are shown ",[233,291,292],{},"once at creation",", then only an HMAC-SHA256 hash is stored — Faivelo can verify a key but can never display it again. Keys support:",[295,296,297,304,310],"ul",{},[298,299,300,303],"li",{},[233,301,302],{},"Scopes"," — a key gets only the permissions you grant it.",[298,305,306,309],{},[233,307,308],{},"Mailbox restriction"," — a key can be limited to specific mailboxes instead of your whole account, which is the right setup for AI agents and third-party tools.",[298,311,312,315,316,322],{},[233,313,314],{},"Expiry and revocation"," — set an expiry date, see when each key was last used, and revoke any key instantly from ",[252,317,321],{"href":318,"rel":319},"https:\u002F\u002Ffaivelo.com\u002Fsettings\u002Fdevelopers",[320],"nofollow","Settings → Developers",". A revoked key stops working immediately.",[222,324,325],{},"If a tool or agent you connected no longer needs access, revoke its key. That's the whole off-switch.",[226,327,329],{"id":328},"connected-apps","Connected apps",[222,331,332,333,336,337,342],{},"Apps you connect with OAuth — like ",[252,334,335],{"href":161},"Claude via the MCP connector"," — never see a long-lived key at all. They get short-lived access tokens (about an hour) that rotate automatically, scoped to exactly the mailboxes you picked on the consent screen. Every connection is listed under ",[252,338,341],{"href":339,"rel":340},"https:\u002F\u002Ffaivelo.com\u002Fsettings\u002Fconnected-apps",[320],"Settings → Connected apps",", and disconnecting one instantly revokes all of its tokens.",[226,344,346],{"id":345},"audit-log","Audit log",[222,348,349],{},"Faivelo keeps a per-account audit log of significant actions — what was done, to what, from which IP address, and when. If something looks off in your account, there's a trail to check rather than guesswork.",[226,351,353],{"id":352},"what-you-should-do-on-your-end","What you should do on your end",[222,355,356],{},"Security is shared. The short list:",[358,359,360,366,372,378],"ol",{},[298,361,362,365],{},[233,363,364],{},"Use a strong, unique password"," for your Faivelo account — it's the key to everything else.",[298,367,368,371],{},[233,369,370],{},"Save mailbox passwords in a password manager"," when they're shown at creation; they won't be shown again.",[298,373,374,377],{},[233,375,376],{},"Give API keys the narrowest scope that works",", and revoke keys you no longer use.",[298,379,380,383],{},[233,381,382],{},"Use registrar API tokens with limited permissions"," where your registrar supports it (for example, a Cloudflare token scoped to DNS on one zone), rather than a global account key.",[226,385,387],{"id":386},"next-steps","Next steps",[295,389,390,396],{},[298,391,392],{},[252,393,395],{"href":318,"rel":394},[320],"Manage your API keys",[298,397,398],{},[252,399,205],{"href":206},{"title":401,"searchDepth":402,"depth":403,"links":404},"",1,2,[405,406,407,408,409,410,411,412],{"id":228,"depth":403,"text":229},{"id":263,"depth":403,"text":264},{"id":274,"depth":403,"text":275},{"id":285,"depth":403,"text":286},{"id":328,"depth":403,"text":329},{"id":345,"depth":403,"text":346},{"id":352,"depth":403,"text":353},{"id":386,"depth":403,"text":387},"How Faivelo protects your mail.","md",null,{},true,{"title":209,"description":413},"Ul8huWWFopHCEOelC0xQGMjqStmhlZu7fOXS8Pp-IyY",[421,415],{"title":205,"path":206,"stem":207,"description":422,"children":-1},"Plans, pricing, storage, and trials.",1792109926806]