Mật khẩu ứng dụng cho ứng dụng thư khác
Connect a desktop mail client to Aster by running Aster Bridge and giving the client its own app password.
Your mail is encrypted with keys that only your devices hold, so a standard mail client can’t read it from Aster’s servers. Aster Bridge runs on your computer, decrypts your mail there, and offers local mail servers that your client connects to.
Before you begin
- Aster Bridge requires the Star plan or higher.
- Download Aster Bridge from astermail.org/download and install it on the computer where your mail client runs.
- Sign in to Aster Mail in a browser on any device. You use it to approve the link.
Link Bridge to your account
- Open Aster Bridge and select Get started. Bridge shows a code.
- In a browser where you’re signed in to Aster Mail, go to
app.astermail.org/link-deviceand enter the code. - Wait for Bridge to confirm the link. The code expires after five minutes. If you see Code expired, select Get new code and enter the new one.
Create an app password
- In Aster Bridge, open the App Passwords tab.
- Optional: Enter a label that names the client, such as the name of the app.
- Select Generate.
- Copy the password and store it somewhere safe. Bridge shows it only once.
Bridge keeps only a hash of each app password, on your computer. App passwords aren’t sent to Aster’s servers. Create a separate password for each client so that you can delete one without affecting the others.
Set up your mail client
- In Aster Bridge, open the Configuration tab.
- In your mail client, add a new account.
- Copy the Hostname, Port, Connection security, and Username values from Configuration into the client.
- For the password, enter the app password you created.
Bridge listens only on your computer, at 127.0.0.1. The default ports are:
| Protocol | Default port |
|---|---|
| IMAP (STARTTLS) | 1143 |
| IMAP (implicit TLS) | 1993 |
| SMTP (STARTTLS) | 1025 |
| SMTP (implicit TLS) | 1465 |
| POP3 | 1110 |
| POP3 (implicit TLS) | 1995 |
| JMAP | 1080 |
| CardDAV | 1081 |
If another program already uses one of these ports, Bridge reports that the port is in use and asks you to quit that program or choose a different port in its settings. Always copy the ports from Configuration instead of this table.
Bridge secures the connection with a self-signed certificate, so your mail client shows a warning the first time it connects. To confirm that the certificate belongs to Bridge, compare it with the Certificate SHA-256 value in the TLS section of Configuration, and then accept it in your client.
Delete an app password
- In Aster Bridge, open the App Passwords tab.
- Find the password and select Delete.
- In Delete App Password, confirm.
Any mail client that uses the password loses access. Delete a password when you stop using its client or lose the computer it runs on.
Disconnect a Bridge installation
- In Aster Mail, go to Settings > Bridge.
- In Connected installations, select Revoke next to the installation. To disconnect all of them, select Revoke all.
Revoking an installation disconnects every mail client that uses it. To use it again, link Bridge to your account again.
Send from an app with an SMTP token
To send mail from a script, device, or service that can’t run Bridge, create a send-only SMTP token. Tokens require the Star plan or higher and a verified custom domain.
- In Aster Mail, go to Settings > Bridge.
- In SMTP, IMAP, POP3 & JMAP, select Generate token.
- Enter a Name, and in Send from, choose a verified address on your custom domain.
- Copy the settings shown in Token created. The password appears only once.
Each address can have one active token. To replace a token, revoke the old one first. Mail sent with a token uses standard SMTP, so it’s protected by TLS in transit but isn’t end-to-end encrypted.
Troubleshooting
- The code doesn’t work: The code expires after five minutes. Select Get new code in Bridge and enter the new code.
- Your client can’t connect: Make sure Bridge is running, and copy the current ports from Configuration.
- Your client rejects the certificate: Compare it with Certificate SHA-256 in Bridge, and then accept it in the client.
- A client lost access: Check whether its app password was deleted or the installation was revoked, and then generate a new password.
Related articles
Bài viết này có hữu ích không?