Storage limits by plan

What happens when I reach my storage limit?

You'll receive a warning email at 80% and 90% usage. At 100%, new incoming emails will be temporarily bounced until you free up space or upgrade your plan.

How do I free up storage?

Delete old emails, empty your trash folder, and remove large attachments. In most email clients, you can sort by size to find the largest messages.

Can I upgrade or downgrade my plan?

Yes — go to Settings → Billing. You can switch plans at any time. When upgrading, you're charged the prorated difference. When downgrading, credit is applied to your next billing cycle.

What happens if my payment fails?

You'll receive an email notification. You have 7 days to update your payment method. After 7 days, your account is suspended (email delivery paused). After 30 days suspended, the account is cancelled with a 30-day data retention grace period.

Do you offer refunds?

We offer a full refund within the first 14 days of a paid subscription. Contact [email protected] to request a refund.

What is an alias?

An alias forwards email from one address to one or more destinations. For example, you can create [email protected] that forwards to [email protected] and [email protected]. Aliases don't need their own mailbox or storage.

How do I set up a catch-all?

A catch-all alias receives all emails sent to any address at your domain that doesn't have a matching mailbox or alias. Go to Aliases → Create Alias → enter * as the local part → set the destination. Now [email protected] will be delivered to your chosen mailbox.

Can I send email from an alias?

Aliases only receive email — they don't have their own mailbox. To send as an alias address, configure it as an "identity" or "send as" address in your email client, using your main mailbox's SMTP credentials.

What are email groups?

Groups are distribution lists — email sent to the group address is delivered to all members. Unlike aliases, groups can have members from different domains and support moderation (messages from non-members need approval).

Two-factor authentication (2FA)

Enable 2FA in Settings → Two-factor authentication. You'll need a TOTP authenticator app (Google Authenticator, Authy, 1Password, etc.). After enabling, you'll receive backup codes — save these somewhere safe in case you lose your authenticator device.

App passwords

Email clients (Thunderbird, Outlook, etc.) can't do TOTP 2FA. Generate an app password in Settings → App passwords. Use this password instead of your main password when configuring your email client. Each app password can be revoked independently.

What if I lose my 2FA device?

Use one of your backup codes to log in. Each backup code can only be used once. If you've used all backup codes and lost your device, contact [email protected] — we'll verify your identity and help you regain access.

Password requirements

Minimum 8 characters. We strongly recommend using a unique password not shared with other services. Consider using a password manager.

"Authentication failed" in email client

Check: (1) You're using the full email address as username (e.g. [email protected], not just "you"). (2) If 2FA is enabled, use an app password, not your main password. (3) Server settings: IMAP port 993 (SSL/TLS), SMTP port 587 (STARTTLS).

"Domain not verified"

DNS records haven't propagated yet. Check your domain's DNS setup page — records auto-check every 30 seconds. Cloudflare propagates in seconds, other providers may take 15-60 minutes. Make sure you copied the record values exactly (no trailing spaces or extra characters).

"Mailbox quota exceeded"

Your mailbox storage is full. Delete old emails and empty the trash in your email client. Changes may take a few minutes to reflect. If you need more space, upgrade your plan in Settings → Billing.

"Connection refused" or "Connection timed out"

Check: (1) You're using the correct server: mail.waxseal.app. (2) Correct ports: IMAP 993, SMTP 587. (3) Your network/firewall isn't blocking these ports. (4) Check status.waxseal.app for any service outages.

"Certificate error" or "SSL error"

Make sure you're connecting to mail.waxseal.app (not an IP address). The TLS certificate is only valid for the domain name. If the error persists, your email client may have an outdated CA certificate bundle — try updating it.

Emails sent but not received by recipient

Check: (1) The recipient address is correct. (2) Check your Analytics page for delivery status (delivered/bounced/deferred). (3) Ask the recipient to check their spam folder. (4) For new domains, deliverability improves over time as sending reputation builds.

Why is my email going to spam?

Check that all DNS records (SPF, DKIM, DMARC) are properly configured and showing "Detected" on your domain's DNS setup page. New domains may need time to build sending reputation.

How do I set up a catch-all address?

Go to Aliases → select your domain → Create alias → check the "Catch-all" checkbox. All emails to non-existent addresses will be forwarded to the destination you specify.

What are app passwords?

App passwords are separate passwords for email clients (Thunderbird, Outlook, etc.) that bypass 2FA. Generate them in Settings → App passwords. Use the generated password instead of your main password in your email client.

What are the plan limits?

Personal: 3 domains, 10 mailboxes, 2 groups, 500 sends/day, 5GB storage. Indie: 10 domains, 50 mailboxes, 10 groups, 2000 sends/day, 20GB. Business: unlimited domains/mailboxes/groups, 10,000 sends/day, 100GB.

How long does DNS verification take?

Depends on your DNS provider. Cloudflare: seconds. Namecheap: 15-30 minutes. Others: up to a few hours. The DNS setup page auto-checks every 30 seconds.

Can I use my own domain with Gmail/Outlook app?

Yes — any email client that supports IMAP works. See the Email Client Setup section above for step-by-step guides.