<stringname="title_advanced_notifications_background">Gunakan layanan latar belakang untuk menyinkronkan pesan</string>
<stringname="title_advanced_notifications_background_hint">Layanan latar belakang dapat dihentikan oleh Android kapan saja, tetapi tidak memerlukan pemberitahuan pada bilah status.</string>
<stringname="title_advanced_badge">Tampilkan ikon peluncur dengan jumlah pesan baru</string>
@ -414,6 +415,7 @@ Akun dan identitas (alias) juga dapat diatur secara manual jika diperlukan. Prot
@ -481,16 +483,36 @@ Akun dan identitas (alias) juga dapat diatur secara manual jika diperlukan. Prot
<stringname="title_advanced_english_hint">Hal ini akan mengulang aplikasi kembali</string>
<stringname="title_advanced_experiments_hint">Daftar fitur eksperimental yang sedang berjalan</string>
<stringname="title_advanced_protocol_hint">Hal ini akan menurunkan penggunaan baterai dan ruang penyimpanan secara signifikan!</string>
<stringname="title_advanced_debug_hint">Aktifkan aktifitas ekstra dan menampilkan informasi debug yang buruk di berbagai tempat</string>
<stringname="title_advanced_cleanup_attachments_hint">Saat membersihkan secara manual, ini menghapus lampiran dari pesan yang tidak lagi disinkronkan</string>
<stringname="title_advanced_cleanup_hint">Hal ini akan menghapus berkas sementara</string>
<stringname="title_advanced_never_favorite">Tidak akan masuk favorit</string>
<stringname="title_advanced_notifications_background">Použiť službu bežiacu na pozadí pre synchronizáciu správ</string>
<stringname="title_advanced_notifications_background_hint">Služba na pozadí môže byť kedykoľvek zastavená systémom, ale nevyžaduje neustále zobrazenú ikonu v oblasti oznámení</string>
<stringname="title_advanced_badge">Zobraziť počet nových správ na ikonke aplikácie</string>
@ -407,6 +408,7 @@
<stringname="title_advanced_notify_remove">Odstrániť oznámenie o novej správe po kliknutí</string>
<stringname="title_advanced_notify_clear">Odstrániť oznámenia o nových správach po zobrazení zoznamu správ</string>
<stringname="title_advanced_wearable_preview">Oznámenia s náhľadom správy posielať len na nositeľné zariadenia</string>
<stringname="title_advanced_notify_messaging">Použiť štýl oznámení správ systému Android</string>
<stringname="title_advanced_biometrics_notify">Zobraziť obsah správy pri použití biometrického overenia</string>
<stringname="title_advanced_light">Zobrazovať LED oznámenia</string>
@ -388,7 +388,15 @@ Operations are processed only when there is a connection to the email server or
You should try to fix this by contacting your provider or by getting a valid security certificate because invalid security certificates are insecure and allow [man-in-the-middle attacks](https://en.wikipedia.org/wiki/Man-in-the-middle_attack). If money is an obstacle, you can get free security certificates from [Let’s Encrypt](https://letsencrypt.org).
Alternatively, you can accept the fingerprint of the invalid server certificate as shown below the error message by ticking a checkbox. In case of an existing account (IMAP, receive) and/or identity (SMTP, send) you will need check/save it via setup step 1 and 2 to get the error message. This will "pin" the server certificate to prevent man-in-the-middle attacks. Note that you should make sure the internet connection you are using is safe if you do this.
Alternatively, you can accept the fingerprint of invalid server certificates like this:
1. Make sure you are using a trusted internet connection (no public Wi-Fi networks, etc)
1. Go to the setup screen via the navigation menu (swipe from the left side inwards)
1. In step 1 and 2 tap *Manage* and tap the faulty account and identity
1. Check/save the account and identity
1. Tick the checkbox below the error message and save again
This will "pin" the server certificate to prevent man-in-the-middle attacks.
Note that older Android versions might not recognize newer certification authorities like Let’s Encrypt causing connections to be considered insecure, see also [here](https://developer.android.com/training/articles/security-ssl).
@ -1463,6 +1471,7 @@ For security reasons the files with the original message texts are not accessibl
* Did you know that you can long press the people's icon to show/hide the CC/BCC fields and remember the visibility state for the next time?
* Did you know that you can insert the email addresses of an Android contact group via the three dots overflow menu?
* Did you know that if you select text and hit reply, only the selected text will be quoted?
* Did you know that you can long press the trash icons (both in the message and the bottom action bar) to permanently delete a message or conversation? (version 1.1368+)
@ -388,7 +388,15 @@ Operations are processed only when there is a connection to the email server or
You should try to fix this by contacting your provider or by getting a valid security certificate because invalid security certificates are insecure and allow [man-in-the-middle attacks](https://en.wikipedia.org/wiki/Man-in-the-middle_attack). If money is an obstacle, you can get free security certificates from [Let’s Encrypt](https://letsencrypt.org).
Alternatively, you can accept the fingerprint of the invalid server certificate as shown below the error message by ticking a checkbox. In case of an existing account (IMAP, receive) and/or identity (SMTP, send) you will need check/save it via setup step 1 and 2 to get the error message. This will "pin" the server certificate to prevent man-in-the-middle attacks. Note that you should make sure the internet connection you are using is safe if you do this.
Alternatively, you can accept the fingerprint of invalid server certificates like this:
1. Make sure you are using a trusted internet connection (no public Wi-Fi networks, etc)
1. Go to the setup screen via the navigation menu (swipe from the left side inwards)
1. In step 1 and 2 tap *Manage* and tap the faulty account and identity
1. Check/save the account and identity
1. Tick the checkbox below the error message and save again
This will "pin" the server certificate to prevent man-in-the-middle attacks.
Note that older Android versions might not recognize newer certification authorities like Let’s Encrypt causing connections to be considered insecure, see also [here](https://developer.android.com/training/articles/security-ssl).
@ -1463,6 +1471,7 @@ For security reasons the files with the original message texts are not accessibl
* Did you know that you can long press the people's icon to show/hide the CC/BCC fields and remember the visibility state for the next time?
* Did you know that you can insert the email addresses of an Android contact group via the three dots overflow menu?
* Did you know that if you select text and hit reply, only the selected text will be quoted?
* Did you know that you can long press the trash icons (both in the message and the bottom action bar) to permanently delete a message or conversation? (version 1.1368+)
@ -388,7 +388,15 @@ Operations are processed only when there is a connection to the email server or
You should try to fix this by contacting your provider or by getting a valid security certificate because invalid security certificates are insecure and allow [man-in-the-middle attacks](https://en.wikipedia.org/wiki/Man-in-the-middle_attack). If money is an obstacle, you can get free security certificates from [Let’s Encrypt](https://letsencrypt.org).
Alternatively, you can accept the fingerprint of the invalid server certificate as shown below the error message by ticking a checkbox. In case of an existing account (IMAP, receive) and/or identity (SMTP, send) you will need check/save it via setup step 1 and 2 to get the error message. This will "pin" the server certificate to prevent man-in-the-middle attacks. Note that you should make sure the internet connection you are using is safe if you do this.
Alternatively, you can accept the fingerprint of invalid server certificates like this:
1. Make sure you are using a trusted internet connection (no public Wi-Fi networks, etc)
1. Go to the setup screen via the navigation menu (swipe from the left side inwards)
1. In step 1 and 2 tap *Manage* and tap the faulty account and identity
1. Check/save the account and identity
1. Tick the checkbox below the error message and save again
This will "pin" the server certificate to prevent man-in-the-middle attacks.
Note that older Android versions might not recognize newer certification authorities like Let’s Encrypt causing connections to be considered insecure, see also [here](https://developer.android.com/training/articles/security-ssl).
@ -1463,6 +1471,7 @@ For security reasons the files with the original message texts are not accessibl
* Did you know that you can long press the people's icon to show/hide the CC/BCC fields and remember the visibility state for the next time?
* Did you know that you can insert the email addresses of an Android contact group via the three dots overflow menu?
* Did you know that if you select text and hit reply, only the selected text will be quoted?
* Did you know that you can long press the trash icons (both in the message and the bottom action bar) to permanently delete a message or conversation? (version 1.1368+)
@ -388,7 +388,15 @@ Operations are processed only when there is a connection to the email server or
You should try to fix this by contacting your provider or by getting a valid security certificate because invalid security certificates are insecure and allow [man-in-the-middle attacks](https://en.wikipedia.org/wiki/Man-in-the-middle_attack). If money is an obstacle, you can get free security certificates from [Let’s Encrypt](https://letsencrypt.org).
Alternatively, you can accept the fingerprint of the invalid server certificate as shown below the error message by ticking a checkbox. In case of an existing account (IMAP, receive) and/or identity (SMTP, send) you will need check/save it via setup step 1 and 2 to get the error message. This will "pin" the server certificate to prevent man-in-the-middle attacks. Note that you should make sure the internet connection you are using is safe if you do this.
Alternatively, you can accept the fingerprint of invalid server certificates like this:
1. Make sure you are using a trusted internet connection (no public Wi-Fi networks, etc)
1. Go to the setup screen via the navigation menu (swipe from the left side inwards)
1. In step 1 and 2 tap *Manage* and tap the faulty account and identity
1. Check/save the account and identity
1. Tick the checkbox below the error message and save again
This will "pin" the server certificate to prevent man-in-the-middle attacks.
Note that older Android versions might not recognize newer certification authorities like Let’s Encrypt causing connections to be considered insecure, see also [here](https://developer.android.com/training/articles/security-ssl).
@ -1463,6 +1471,7 @@ For security reasons the files with the original message texts are not accessibl
* Did you know that you can long press the people's icon to show/hide the CC/BCC fields and remember the visibility state for the next time?
* Did you know that you can insert the email addresses of an Android contact group via the three dots overflow menu?
* Did you know that if you select text and hit reply, only the selected text will be quoted?
* Did you know that you can long press the trash icons (both in the message and the bottom action bar) to permanently delete a message or conversation? (version 1.1368+)
@ -388,7 +388,15 @@ Operations are processed only when there is a connection to the email server or
You should try to fix this by contacting your provider or by getting a valid security certificate because invalid security certificates are insecure and allow [man-in-the-middle attacks](https://en.wikipedia.org/wiki/Man-in-the-middle_attack). If money is an obstacle, you can get free security certificates from [Let’s Encrypt](https://letsencrypt.org).
Alternatively, you can accept the fingerprint of the invalid server certificate as shown below the error message by ticking a checkbox. In case of an existing account (IMAP, receive) and/or identity (SMTP, send) you will need check/save it via setup step 1 and 2 to get the error message. This will "pin" the server certificate to prevent man-in-the-middle attacks. Note that you should make sure the internet connection you are using is safe if you do this.
Alternatively, you can accept the fingerprint of invalid server certificates like this:
1. Make sure you are using a trusted internet connection (no public Wi-Fi networks, etc)
1. Go to the setup screen via the navigation menu (swipe from the left side inwards)
1. In step 1 and 2 tap *Manage* and tap the faulty account and identity
1. Check/save the account and identity
1. Tick the checkbox below the error message and save again
This will "pin" the server certificate to prevent man-in-the-middle attacks.
Note that older Android versions might not recognize newer certification authorities like Let’s Encrypt causing connections to be considered insecure, see also [here](https://developer.android.com/training/articles/security-ssl).
@ -1463,6 +1471,7 @@ For security reasons the files with the original message texts are not accessibl
* Did you know that you can long press the people's icon to show/hide the CC/BCC fields and remember the visibility state for the next time?
* Did you know that you can insert the email addresses of an Android contact group via the three dots overflow menu?
* Did you know that if you select text and hit reply, only the selected text will be quoted?
* Did you know that you can long press the trash icons (both in the message and the bottom action bar) to permanently delete a message or conversation? (version 1.1368+)
@ -388,7 +388,15 @@ Operations are processed only when there is a connection to the email server or
You should try to fix this by contacting your provider or by getting a valid security certificate because invalid security certificates are insecure and allow [man-in-the-middle attacks](https://en.wikipedia.org/wiki/Man-in-the-middle_attack). If money is an obstacle, you can get free security certificates from [Let’s Encrypt](https://letsencrypt.org).
Alternatively, you can accept the fingerprint of the invalid server certificate as shown below the error message by ticking a checkbox. In case of an existing account (IMAP, receive) and/or identity (SMTP, send) you will need check/save it via setup step 1 and 2 to get the error message. This will "pin" the server certificate to prevent man-in-the-middle attacks. Note that you should make sure the internet connection you are using is safe if you do this.
Alternatively, you can accept the fingerprint of invalid server certificates like this:
1. Make sure you are using a trusted internet connection (no public Wi-Fi networks, etc)
1. Go to the setup screen via the navigation menu (swipe from the left side inwards)
1. In step 1 and 2 tap *Manage* and tap the faulty account and identity
1. Check/save the account and identity
1. Tick the checkbox below the error message and save again
This will "pin" the server certificate to prevent man-in-the-middle attacks.
Note that older Android versions might not recognize newer certification authorities like Let’s Encrypt causing connections to be considered insecure, see also [here](https://developer.android.com/training/articles/security-ssl).
@ -1463,6 +1471,7 @@ For security reasons the files with the original message texts are not accessibl
* Did you know that you can long press the people's icon to show/hide the CC/BCC fields and remember the visibility state for the next time?
* Did you know that you can insert the email addresses of an Android contact group via the three dots overflow menu?
* Did you know that if you select text and hit reply, only the selected text will be quoted?
* Did you know that you can long press the trash icons (both in the message and the bottom action bar) to permanently delete a message or conversation? (version 1.1368+)
@ -388,7 +388,15 @@ Operations are processed only when there is a connection to the email server or
You should try to fix this by contacting your provider or by getting a valid security certificate because invalid security certificates are insecure and allow [man-in-the-middle attacks](https://en.wikipedia.org/wiki/Man-in-the-middle_attack). If money is an obstacle, you can get free security certificates from [Let’s Encrypt](https://letsencrypt.org).
Alternatively, you can accept the fingerprint of the invalid server certificate as shown below the error message by ticking a checkbox. In case of an existing account (IMAP, receive) and/or identity (SMTP, send) you will need check/save it via setup step 1 and 2 to get the error message. This will "pin" the server certificate to prevent man-in-the-middle attacks. Note that you should make sure the internet connection you are using is safe if you do this.
Alternatively, you can accept the fingerprint of invalid server certificates like this:
1. Make sure you are using a trusted internet connection (no public Wi-Fi networks, etc)
1. Go to the setup screen via the navigation menu (swipe from the left side inwards)
1. In step 1 and 2 tap *Manage* and tap the faulty account and identity
1. Check/save the account and identity
1. Tick the checkbox below the error message and save again
This will "pin" the server certificate to prevent man-in-the-middle attacks.
Note that older Android versions might not recognize newer certification authorities like Let’s Encrypt causing connections to be considered insecure, see also [here](https://developer.android.com/training/articles/security-ssl).
@ -1463,6 +1471,7 @@ For security reasons the files with the original message texts are not accessibl
* Did you know that you can long press the people's icon to show/hide the CC/BCC fields and remember the visibility state for the next time?
* Did you know that you can insert the email addresses of an Android contact group via the three dots overflow menu?
* Did you know that if you select text and hit reply, only the selected text will be quoted?
* Did you know that you can long press the trash icons (both in the message and the bottom action bar) to permanently delete a message or conversation? (version 1.1368+)
@ -388,7 +388,15 @@ Operations are processed only when there is a connection to the email server or
You should try to fix this by contacting your provider or by getting a valid security certificate because invalid security certificates are insecure and allow [man-in-the-middle attacks](https://en.wikipedia.org/wiki/Man-in-the-middle_attack). If money is an obstacle, you can get free security certificates from [Let’s Encrypt](https://letsencrypt.org).
Alternatively, you can accept the fingerprint of the invalid server certificate as shown below the error message by ticking a checkbox. In case of an existing account (IMAP, receive) and/or identity (SMTP, send) you will need check/save it via setup step 1 and 2 to get the error message. This will "pin" the server certificate to prevent man-in-the-middle attacks. Note that you should make sure the internet connection you are using is safe if you do this.
Alternatively, you can accept the fingerprint of invalid server certificates like this:
1. Make sure you are using a trusted internet connection (no public Wi-Fi networks, etc)
1. Go to the setup screen via the navigation menu (swipe from the left side inwards)
1. In step 1 and 2 tap *Manage* and tap the faulty account and identity
1. Check/save the account and identity
1. Tick the checkbox below the error message and save again
This will "pin" the server certificate to prevent man-in-the-middle attacks.
Note that older Android versions might not recognize newer certification authorities like Let’s Encrypt causing connections to be considered insecure, see also [here](https://developer.android.com/training/articles/security-ssl).
@ -1463,6 +1471,7 @@ For security reasons the files with the original message texts are not accessibl
* Did you know that you can long press the people's icon to show/hide the CC/BCC fields and remember the visibility state for the next time?
* Did you know that you can insert the email addresses of an Android contact group via the three dots overflow menu?
* Did you know that if you select text and hit reply, only the selected text will be quoted?
* Did you know that you can long press the trash icons (both in the message and the bottom action bar) to permanently delete a message or conversation? (version 1.1368+)
@ -388,7 +388,15 @@ Operations are processed only when there is a connection to the email server or
You should try to fix this by contacting your provider or by getting a valid security certificate because invalid security certificates are insecure and allow [man-in-the-middle attacks](https://en.wikipedia.org/wiki/Man-in-the-middle_attack). If money is an obstacle, you can get free security certificates from [Let’s Encrypt](https://letsencrypt.org).
Alternatively, you can accept the fingerprint of the invalid server certificate as shown below the error message by ticking a checkbox. In case of an existing account (IMAP, receive) and/or identity (SMTP, send) you will need check/save it via setup step 1 and 2 to get the error message. This will "pin" the server certificate to prevent man-in-the-middle attacks. Note that you should make sure the internet connection you are using is safe if you do this.
Alternatively, you can accept the fingerprint of invalid server certificates like this:
1. Make sure you are using a trusted internet connection (no public Wi-Fi networks, etc)
1. Go to the setup screen via the navigation menu (swipe from the left side inwards)
1. In step 1 and 2 tap *Manage* and tap the faulty account and identity
1. Check/save the account and identity
1. Tick the checkbox below the error message and save again
This will "pin" the server certificate to prevent man-in-the-middle attacks.
Note that older Android versions might not recognize newer certification authorities like Let’s Encrypt causing connections to be considered insecure, see also [here](https://developer.android.com/training/articles/security-ssl).
@ -1463,6 +1471,7 @@ For security reasons the files with the original message texts are not accessibl
* Did you know that you can long press the people's icon to show/hide the CC/BCC fields and remember the visibility state for the next time?
* Did you know that you can insert the email addresses of an Android contact group via the three dots overflow menu?
* Did you know that if you select text and hit reply, only the selected text will be quoted?
* Did you know that you can long press the trash icons (both in the message and the bottom action bar) to permanently delete a message or conversation? (version 1.1368+)
@ -388,7 +388,15 @@ Operations are processed only when there is a connection to the email server or
You should try to fix this by contacting your provider or by getting a valid security certificate because invalid security certificates are insecure and allow [man-in-the-middle attacks](https://en.wikipedia.org/wiki/Man-in-the-middle_attack). If money is an obstacle, you can get free security certificates from [Let’s Encrypt](https://letsencrypt.org).
Alternatively, you can accept the fingerprint of the invalid server certificate as shown below the error message by ticking a checkbox. In case of an existing account (IMAP, receive) and/or identity (SMTP, send) you will need check/save it via setup step 1 and 2 to get the error message. This will "pin" the server certificate to prevent man-in-the-middle attacks. Note that you should make sure the internet connection you are using is safe if you do this.
Alternatively, you can accept the fingerprint of invalid server certificates like this:
1. Make sure you are using a trusted internet connection (no public Wi-Fi networks, etc)
1. Go to the setup screen via the navigation menu (swipe from the left side inwards)
1. In step 1 and 2 tap *Manage* and tap the faulty account and identity
1. Check/save the account and identity
1. Tick the checkbox below the error message and save again
This will "pin" the server certificate to prevent man-in-the-middle attacks.
Note that older Android versions might not recognize newer certification authorities like Let’s Encrypt causing connections to be considered insecure, see also [here](https://developer.android.com/training/articles/security-ssl).
@ -1463,6 +1471,7 @@ For security reasons the files with the original message texts are not accessibl
* Did you know that you can long press the people's icon to show/hide the CC/BCC fields and remember the visibility state for the next time?
* Did you know that you can insert the email addresses of an Android contact group via the three dots overflow menu?
* Did you know that if you select text and hit reply, only the selected text will be quoted?
* Did you know that you can long press the trash icons (both in the message and the bottom action bar) to permanently delete a message or conversation? (version 1.1368+)
@ -225,7 +225,7 @@ Designet er baseret på mange debatter, og er du interesseret, kan du også deba
* [(105) Hvordan fungere indstillingen roam-som-på-hjemadressen?](#user-content-faq105)
* [(106) Hvilke launchere kan vise et badge-tal for antallet af ulæste beskeder?](#user-content-faq106)
* [(107) Hvordan anvendes farvede stjerner?](#user-content-faq107)
* [~~(108) Can you add permanently delete messages from any folder?~~](#user-content-faq108)
* [~~(108) Vil mulighed for permanent slettede beskeder fra enhver mappe blive tilføjet?~~](#user-content-faq108)
* [~~(109) Hvorfor er 'vælg konto' kun tilgængelig i officielle versioner?~~](#user-content-faq109)
* [(110) Hvorfor er (nogle) beskeder tomme og/eller vedhæftninger ødelagte?](#user-content-faq110)
* [(111) Er OAuth understøttet?](#user-content-faq111)
@ -388,39 +388,47 @@ Operationer behandles kun, såfremt en forbindelse til e-mailserveren findes, el
Du bør forsøge at løse dette ved at kontakte din udbyder eller ved at få et gyldigt sikkerhedscertifikat, da ugyldige sikkerhedscertifikater er usikre og tillader [mand-i-midten-angreb](https://en.wikipedia.org/wiki/Man-in-the-middle_attack). Er penge en hindring, kan du få gratis sikkerhedscertifikater fra [Let's Encrypt](https://letsencrypt.org).
Alternatively, you can accept the fingerprint of the invalid server certificate as shown below the error message by ticking a checkbox. In case of an existing account (IMAP, receive) and/or identity (SMTP, send) you will need check/save it via setup step 1 and 2 to get the error message. This will "pin" the server certificate to prevent man-in-the-middle attacks. Note that you should make sure the internet connection you are using is safe if you do this.
Alternatively, you can accept the fingerprint of invalid server certificates like this:
Bemærk, at ældre Android-versioner muligvis ikke genkender nyere certificeringsmyndigheder såsom Let’s Encrypt, hvorfor forbindelser kan blive betragtet som usikre, se også [hér](https://developer.android.com/training/articles/security-ssl).
1. Make sure you are using a trusted internet connection (no public Wi-Fi networks, etc)
1. Go to the setup screen via the navigation menu (swipe from the left side inwards)
1. In step 1 and 2 tap *Manage* and tap the faulty account and identity
1. Check/save the account and identity
1. Tick the checkbox below the error message and save again
*Trust anchor til certificeringsstien ikke fundet*
This will "pin" the server certificate to prevent man-in-the-middle attacks.
*... java.security.cert.CertPathValidatorException: Trust anchor til certificeringsstien ikke fundet...* betyder, at Androids standard trust manager ikke var i stand til at bekræfte servercertifikatkæden.
Note that older Android versions might not recognize newer certification authorities like Let’s Encrypt causing connections to be considered insecure, see also [here](https://developer.android.com/training/articles/security-ssl).
Du bør enten rette serveropsætningen eller acceptere fingeraftrykket vist neden for fejlmeddelelsen.
*Trust anchor for certification path not found*
Bemærk, at dette problem kan skyldes af, at serveren ikke sender alle mellemliggende certifikater.
*... java.security.cert.CertPathValidatorException: Trust anchor for certification path not found ...* means that the default Android trust manager was not able to verify the server certificate chain.
*Kryptere adgangskode*
You should either fix the server configuration or accept the fingerprint shown below the error message.
Dit brugernavn er sandsynligvis let at gætte og er dermed ikke sikkert.
Note that this problem can be caused by the server not sending all intermediate certificates too.
*Simpel tekst-forbindelse*
*Empty password*
Dit brugernavn og adgangskode samt alle beskeder sendes og modtages ukrypteret, hvilket er **meget usikkert**, da et [mand-i-midten angreb](https://en.wikipedia.org/wiki/Man-in-the-middle_attack) nemt udføres på en ikke-krypteret forbindelse.
Your username is likely easily guessed, so this is insecure.
Vil du fortsat bruge et ugyldigt sikkerhedscertifikat, en tom adgangskode eller en almindelig tekstforbindelse, så skal usikre forbindelser aktiveres i konto- og/eller identitetsindstillingerne. STARTTLS bør vælges til simpel tekst-forbindelser. Aktiverer du usikre forbindelser, bør du kun oprette forbindelse via private, betroede netværk og aldrig via offentlige netværk på f.eks. hoteller, lufthavne mv.
*Plain text connection*
Your username and password and all messages will be sent and received unencrypted, which is **very insecure** because a [man-in-the-middle attack](https://en.wikipedia.org/wiki/Man-in-the-middle_attack) is very simple on an unencrypted connection.
If you still want to use an invalid security certificate, an empty password or a plain text connection you'll need to enable insecure connections in the account and/or identity settings. STARTTLS should be selected for plain text connections. If you enable insecure connections, you should connect via private, trusted networks only and never via public networks, like offered in hotels, airports, etc.
<br/>
<aname="faq5"></a>
**(5) Hvordan tilpasses beskedvisningen?**
**(5) How can I customize the message view?**
I menuen med tre prikker kan du aktivere/deaktivere eller vælge:
In the three dot overflow menu you can enable or disable or select:
* *tekststørrelse*: Til tre forskellige skriftstørrelser
* *kompakt visning*: Til flere kondenserede beskedelementer og en mindre beskedtekst skrifttype
I visningsafsnittet i indstillingerne kan du aktivere eller deaktivere:
In the display section of the settings you can enable or disable:
* *Fælles indbakke*: For at deaktivere den fælles indbakke og i stedet vise de valgte mapper fra den fælles indbakke
* *Gruppér efter dato*: Vis datooverskrift over beskeder med den samme dato
@ -437,199 +445,199 @@ I visningsafsnittet i indstillingerne kan du aktivere eller deaktivere:
* *Vis automatisk billeder for kendte kontakter*: Se venligst [denne FAQ](#user-content-faq35) for automatisk at få vist billeder for kontakter på din enhed
* *Samtalehandlingsbjælke*: For at deaktivere navigeringsbjælken nederst
Bemærk, at beskeder kun kan forhåndsvises, når beeskedteksten er blevet downloadet. Større beskedtekster downloades som standard ikke på afregnede (hovedsaligt mobile) netværk. Du kan ændre dette i indstillingerne.
Note that messages can be previewed only when the message text was downloaded. Larger message texts are not downloaded by default on metered (generally mobile) networks. You can change this in the settings.
Er listen over adresser lang, kan du sammenfolde adresseafsnittet vha. *mindre*-ikonet øverst i adresseseafsnittet.
If the list of addresses is long, you can collapse the addresses section with the *less* icon at the top of the addresses section.
Nogle har bedt om:
Some people ask:
* at få emnet vist med fed tekst, men fed benyttes allerede til fremhævelse af ulæste beskeder
* at få adresse- eller emnevisningen gjort større/mindre, men dette vil forstyrre indstillingen for tekststørrelse
* at få stjernen flyttet til venstre, men det er meget lettere at betjene stjernen på højre side
Desværre er det umuligt at stille alle tilpas, og at tilføje mange indstillinger ville ikke kun være forvirrende, men heller aldrig være tilstrækkeligt.
Unfortunately, it is impossible to make everybody happy and adding lots of settings would not only be confusing, but also never be sufficient.
<br/>
<aname="faq6"></a>
**(6) Hvordan logges ind på Gmail/G suite?**
**(6) How can I login to Gmail / G suite?**
Du kan benytte hurtig opsætnings-guiden til nemt at opsætte en Gmail-konto og -identitet.
You can use the quick setup wizard to easily setup a Gmail account and identity.
Vil du ikke benytte en Gmail-konto på enheden, kan du enten aktivere adgang for "mindre sikre apps" og benytte din kontoadgangskode (ikke anbefalet) eller aktivere tofaktorgodkendelse og benytte en app-specifik adgangskode. For brug af en adgangskode skal du opsætte en konto og identitet via opsætningstrin 1 og 2 i stedet for via hurtigopsætningsguiden.
If you don't want to use an on-device Gmail account, you can either enable access for "less secure apps" and use your account password (not advised) or enable two factor authentication and use an app specific password. To use a password you'll need to setup an account and identity via setup step 1 and 2 instead of via the quick setup wizard.
Tjek [denne FAQ](#user-content-faq111) vedr., hvorfor kun konti på enheden kan benyttes.
Please see [this FAQ](#user-content-faq111) on why only on-device accounts can be used.
Bemærk, at en app-specifik adgangskode kræves, når tofaktorgodkendelse er aktiveret.
Note that an app specific password is required when two factor authentication is enabled.
<br/>
*App-specifik adgangskode*
*App specific password*
Tjek [hér](https://support.google.com/accounts/answer/185833), hvordan en app-specifik adgangskode genereres.
See [here](https://support.google.com/accounts/answer/185833) about how to generate an app specific password.
<br/>
*Aktivér "Mindre sikre apps"*
*Enable "Less secure apps"*
**Vigtigt**: Brug af denne metode anbefales ikke, da den er mindre pålidelig.
**Important**: using this method is not recommended because it is less reliable.
**Vigtigt**: Brugernavn-/adgangskode-godkendte Gsuite-konti vil [i nærmeste fremtid](https://gsuiteupdates.googleblog.com/2019/12/less-secure-apps-oauth-google-username-password-incorrect.html) ophøre med at fungere.
**Important**: Gsuite accounts authorized with a username/password will stop working [in the near future](https://gsuiteupdates.googleblog.com/2019/12/less-secure-apps-oauth-google-username-password-incorrect.html).
Tjek [hér](https://support.google.com/accounts/answer/6010255), hvordan "mindre sikre apps"aktiveres eller gå [direkte til indstillingerne](https://www.google.com/settings/security/lesssecureapps).
See [here](https://support.google.com/accounts/answer/6010255) about how to enable "less secure apps" or go [directy to the setting](https://www.google.com/settings/security/lesssecureapps).
Benytter du flere Gmail-konti, så sørg for at ændre indstillingen "mindre sikre apps" på de relevante konti.
If you use multiple Gmail accounts, make sure you change the "less secure apps" setting of the right account(s).
Bemærk, at du er nødt til at forlade "mindre sikre apps"-indstillingsskærmen vha. Tilbage-pilen, for at effektuere indstillingen.
Be aware that you need to leave the "less secure apps" settings screen by using the back arrow to apply the setting.
Benytter du denne metode, bør du anvende en [stærk adgangskode](https://en.wikipedia.org/wiki/Password_strength) til din Gmail-konto, hvilket i øvrigt altid er en god idé. Bemærk, at brug af [standard](https://tools.ietf.org/html/rfc3501) IMAP-protokollen ikke i sig selv er mindre sikker.
If you use this method, you should use a [strong password](https://en.wikipedia.org/wiki/Password_strength) for your Gmail account, which is a good idea anyway. Note that using the [standard](https://tools.ietf.org/html/rfc3501) IMAP protocol in itself is not less secure.
Når "mindre sikre apps" ikke er aktiveret, får du fejlen *Godkendelse mislykkedes - ugyldige akkreditiver* for konti (IMAP) og *Brugernavn og adgangskode ikke accepteret* for identiteter (SMTP).
When "less secure apps" is not enabled, you'll get the error *Authentication failed - invalid credentials* for accounts (IMAP) and *Username and Password not accepted* for identities (SMTP).
<br/>
*Generelt*
*General*
Du ser muligvis advarslen "*Log ind via din webbrowser*". Dette sker, når Google anser det netværk, hvormed du forbinder til Internet (hvilket kan være et VPN), som ikke-sikkert. Dette kan forhindres vha. Gmails hurtig opsætningsguide eller en app-specifik adgangskode.
You might get the alert "*Please log in via your web browser*". This happens when Google considers the network that connects you to the internet (this could be a VPN) to be unsafe. This can be prevented by using the Gmail quick setup wizard or an app specific password.
Tjek [hér](https://support.google.com/mail/answer/7126229) for Googles vejledning, og [hér](https://support.google.com/mail/accounts/answer/78754) for fejlfinding.
See [here](https://support.google.com/mail/answer/7126229) for Google's instructions and [here](https://support.google.com/mail/accounts/answer/78754) for troubleshooting.
<br/>
<aname="faq7"></a>
**(7) Hvorfor vises sendte beskeder ikke (direkte) i Sendt-mappen?**
**(7) Why are sent messages not appearing (directly) in the sent folder?**
Sendte beskeder flyttes normalt fra udbakken til Sendt-mappen, så snart din udbyder føjer sendte beskeder til Sendt-mappen. Dette kræver, at en Sendt-mappe vælges i kontoindstillingerne, og at Sendt-mappen ligeledes opsættes til synkronisering.
Sent messages are normally moved from the outbox to the sent folder as soon as your provider adds sent messages to the sent folder. This requires a sent folder to be selected in the account settings and the sent folder to be set to synchronizing.
Visse udbydere holder ikke styr på sendte beskeder, eller den anvendte SMTP-server er muligvis ikke relateret til udbyderen. I så tilfælde tilføjer FairEmail automatisk sendte beskeder til Sendt-mappen under synkronisering af denne, hvilket vil ske, efter at en besked er afsendt. Bemærk, at dette vil forøge Internettrafikken.
Some providers do not keep track of sent messages or the used SMTP server might not be related to the provider. In these cases FairEmail, will automatically add sent messages to the sent folder on synchronizing the sent folder, which will happen after a message have been sent. Note that this will result in extra internet traffic.
~~Sker dette ikke, holder din udbyder muligvis ikke styr på sendte beskeder, eller du anvender muligvis en ikke-udbyderrelateret SMTP-server.~~ ~~I så tilfælde kan du aktivere den avancerede identitetsindstilling *Gem sendte beskeder* for at lade FairEmail føje sendte beskeder til Sendt-mappen umiddelbart efter afsendelse heraf.~~~~Bemærk, at aktivering af denne indstilling kan resultere i dubletbeskeder, hvis din udbyder føjer sendte beskeder til Sendt-mappen.~~ ~~Bemærk også, at aktivering af indstillingen vil resultere i forøget dataforbrug, især når du sender beskeder med store vedhæftninger.~~
~~If this doesn't happen, your provider might not keep track of sent messages or you might be using an SMTP server not related to the provider.~~ ~~In these cases you can enable the advanced identity setting *Store sent messages* to let FairEmail add sent messages to the sent folder right after sending a message.~~~~Note that enabling this setting might result in duplicate messages if your provider adds sent messages to the sent folder too.~~ ~~Also beware that enabling this setting will result in extra data usage, especially when when sending messages with large attachments.~~
~~Hvis sendte beskeder i udbakken ikke findes i Sendt-mappen ved en fuld synkronisering, flyttes disse også fra udbakken til Sendt-mappen.~~ ~~En fuld synkronisering sker, når der genforbindes til serveren, eller ved periodisk eller manuel synkronisering.~~ ~~Du ønsker sandsynligvis i stedet at aktivere den avancerede indstilling *Gem sendte beskeder* for at flytte beskeder til Sendt-mappen hurtigere.~~
~~If sent messages in the outbox are not found in the sent folder on a full synchronize, they will be moved from the outbox to the sent folder too.~~ ~~A full synchronize happens when reconnecting to the server or when synchronizing periodically or manually.~~ ~~You'll likely want to enable the advanced setting *Store sent messages* instead to move messages to the sent folder sooner.~~
<br/>
<aname="faq8"></a>
**(8) Kan en Microsoft Exchange-konto benyttes?**
**(8) Can I use a Microsoft Exchange account?**
En Microsoft Exchange-konto kan benyttes, såfremt den er tilgængelig via IMAP, hvilket plejer at være tilfældet. Tjek [hér](https://support.office.com/en-us/article/what-is-a-microsoft-exchange-account-47f000aa-c2bf-48ac-9bc2-83e5c6036793) for yderligere oplysninger.
You can use a Microsoft Exchange account if it is accessible via IMAP, which is mostly the case. See [here](https://support.office.com/en-us/article/what-is-a-microsoft-exchange-account-47f000aa-c2bf-48ac-9bc2-83e5c6036793) for more information.
Tjek [hér](https://support.office.com/en-us/article/pop-imap-and-smtp-settings-for-outlook-com-d088b986-291d-42b8-9564-9c414e2aa040) for Microsoft-dokumentation vedr. opsætning af email klient. Der er også et afsnit om almindelige forbindelsesfejl og løsninger heraf.
Please see [here](https://support.office.com/en-us/article/pop-imap-and-smtp-settings-for-outlook-com-d088b986-291d-42b8-9564-9c414e2aa040) for the Microsoft documentation about configuring an email client. There is also a section about common connection errors and solutions.
Visse ældre Exchange-serverversioner har en fejl, der forårsager tomme beskeder og ødelagte vedhæftninger. Tjek [denne FAQ](#user-content-faq110) for en løsning.
Some older Exchange server versions have a bug causing empty message and corrupt attachments. Please see [this FAQ](#user-content-faq110) for a workaround.
Please see [this FAQ](#user-content-faq111) about OAuth support.
<br/>
<aname="faq9"></a>
**(9) Hvad er identiteter/hvordan tilføjes et alias?**
**(9) What are identities / how do I add an alias?**
Identiteter repræsenterer e-mailadresser, du sender *fra* via en e-mailserver (SMTP).
Identities represent email addresses you are sending *from* via an email (SMTP) server.
Visse udbydere tillader brug af flere aliaser. Du kan opsætte disse ved at indstille e-mailadressefeltet fra en ekstra identitet til aliasadressen og indstille brugernavnefeltet til din hoved e-mailadresse.
Some providers allow you to have multiple aliases. You can configure these by setting the email address field of an additional identity to the alias address and setting the user name field to your main email address.
Bemærk, at en identitet kan kopieres vha. et langt tryk på den.
Note that you can copy an identity by long pressing it.
Alternativt kan *Tillad redigering af afsenderadresse* aktiveres i de avancerede indstillinger for en eksisterende identitet for at redigere brugernavnet, når du skriver en ny besked, forudsat din udbyder tillader dette.
Alternatively, you can enable *Allow editing sender address* in the advanced settings of an existing identity to edit the username when composing a new message, if your provider allows this.
FairEmail opdaterer automatisk adgangskoder til relaterede identiteter, når adgangskoden til den tilknyttede konto/relaterede identitet opdateres.
FairEmail will automatically update the passwords of related identities when you update the password of the associated account or a related identity.
Tjek [denne FAQ](#user-content-faq33) vedr. redigering af brugernavnet til e-mailadresser.
See [this FAQ](#user-content-faq33) on editing the username of email addresses.
<br/>
<aname="faq10"></a>
**~~(10) Hvad betyder 'UIDPLUS ikke understøttet'?~~**
**~~(10) What does 'UIDPLUS not supported' mean?~~**
~~Fejlmeddelelsen *UIDPLUS ikke understøttet * betyder, at din e-mailudbyder ikke tilbyder IMAP-udvidelsen [UIDPLUS](https://tools.ietf.org/html/rfc4315). Denne IMAP-udvidelse kræves for at implementere tovejssynkronisering, der ikke er en valgfri funktion. Så medmindre din udbyder kan aktivere denne udvidelse, kan du ikke benytte FairEmail til denne udbyder.~~
~~The error message *UIDPLUS not supported* means that your email provider does not provide the IMAP [UIDPLUS extension](https://tools.ietf.org/html/rfc4315). This IMAP extension is required to implement two way synchronization, which is not an optional feature. So, unless your provider can enable this extension, you cannot use FairEmail for this provider.~~
<br/>
<aname="faq11"></a>
**~~(11) Hvorfor understøttes POP ikke'?~~**
**~~(11) Why is POP not supported?~~**
~~Udover at enhver anstændig e-mail-udbyder i dag understøtter [IMAP](https://en.wikipedia.org/wiki/Internet_Message_Access_Protocol),~~ ~~vil brug af [POP](https://en.wikipedia.org/wiki/Post_Office_Protocol) resultere i unødvendig ekstra batteriforbrug samt forsinkede notifikationer om nye beskeder.~~ ~~Desuden er POP uegnet til tovejssynkronisering, og oftere end ikke, læser og skriver folk beskeder på forskellige enheder i dag.~~
~~Besides that any decent email provider supports [IMAP](https://en.wikipedia.org/wiki/Internet_Message_Access_Protocol) these days,~~ ~~using [POP](https://en.wikipedia.org/wiki/Post_Office_Protocol) will result in unnecessary extra battery usage and delayed new message notifications.~~ ~~Moreover, POP is unsuitable for two way synchronization and more often than not people read and write messages on different devices these days.~~
~~Grundlæggende understøtter POP kun download og sletning af beskeder fra indbakken.~~ ~~Dvs., at almindelige operationer, såsom indstilling af besekedattributter (læst, stjernemarkeret, besvaret mv.), tilføjelse (sikkerhedskopiering) og flytning af beskeder ikke er mulige.~~
~~Basically, POP supports only downloading and deleting messages from the inbox.~~ ~~So, common operations like setting message attributes (read, starred, answered, etc), adding (backing up) and moving messages is not possible.~~
~~Tjek også, [hvad Google skriver om dette](https://support.google.com/mail/answer/7104828).~~
~~See also [what Google writes about it](https://support.google.com/mail/answer/7104828).~~
~~F.eks. kan [Gmail importere beskeder](https://support.google.com/mail/answer/21289) fra en anden POP-konto,~~ ~~hvilket kan anvendes som en løsning ifm. udbydere, som ikke understøtter IMAP.~~
~~For example [Gmail can import messages](https://support.google.com/mail/answer/21289) from another POP account,~~ ~~which can be used as a workaround for when your provider doesn't support IMAP.~~
~~tl;dr; overvej at skifte til IMAP.~~
~~tl;dr; consider to switch to IMAP.~~
<br/>
<aname="faq12"></a>
**(12) Hvordan fungerer kryptering/dekryptering?**
**(12) How does encryption/decryption work?**
*Generelt*
*General*
[Tjek hér](https://en.wikipedia.org/wiki/Public-key_cryptography), hvordan kryptering vha. offentlige/private nøgler fungerer.
Please [see here](https://en.wikipedia.org/wiki/Public-key_cryptography) about how public/private key encryption works.
For at signere/kryptere en besked, vælg den passende metode i Send-dialogen. Har du tidliger valgt *Vis ikke igen*, kan du altid åbne Send-dialogen igen vha. trepunktsmenuen.
To sign/encrypt a message, just select the appropriate method in the send dialog. You can always open the send dialog using the three-dots overflow menu in case you selected *Don't show again* before.
For at bekræfte en signatur eller dekryptere en modtaget besked, så åbn beskeden og tryk blot på gestus- eller hængelåsikonet umiddelbart under beskedhandlingsbjælken.
To verify a signature or to decrypt a received message, open the message and just tap the gesture or padlock icon just below the message action bar.
Første gang du sender en signeret/krypteret besked, bliver du muligvis bedt om en signaturnøgle. Mhp. efterfølgende brug gemmer FairEmail automatisk den valgte signeringsnøgle i den anvendte identitet. Har du behov for at nulstille signeringsnøglen, så gem blot identiteten eller brug et langt tryk på identiteten på identitetslisten og vælg *Nulstil signeringsnøgle*. Den valgte signeringsnøgle er synlig på identitetslisten. Skal en nøgle kunne vælges fra gang til gang, kan du oprette flere identiteter for den samme konto med den samme e-mailadresse.
The first time you send a signed/encrypted message you might be asked for a sign key. FairEmail will automatically store the selected sign key in the used identity for the next time. If you need to reset the sign key, just save the identity or long press the identity in the list of identities and select *Reset sign key*. The selected sign key is visible in the list of identities. If need to select a key on a case by case basis, you can create multiple identities for the same account with the same email address.
I fortrolighedsindstillingerne kan du vælge standardkrypteringsmetoden (PGP eller S/MIME), aktivere *Signér som standard*, *Kryptér som standard* samt *Dekryptér automatisk beskeder*, men vær opmærksom på, at automatisk dekryptering ikke er mulig, hvis brugerinteraktion kræves, såsom valg af en nøgle eller læsning af et sikkerhedstoken.
In the privacy settings you can select the default encryption method (PGP or S/MIME), enable *Sign by default*, *Encrypt by default* and *Automatically decrypt messages*, but be aware that automatic decryption is not possible if user interaction is required, like selecting a key or reading a security token.
Beskedtekster/vedhæftninger, som skal krypteres, samt dekrypterede beskedtekster/vedhæftninger gemmes kun lokalt og blive aldrig føjet til fjernservere. Vil du fortryde dekryptering, kan du benytte menupunktet *Gensynk* fra trepunktsmenuen på beskedhandlingsbjælken.
The to be encrypted message text/attachments and the decrypted message text/attachments are stored locally only and will never be added to the remote server. If you want to undo decryption, you can use the *resync* menu item in the three-dots menu of the message action bar.
*PGP*
[OpenKeychain](https://f-droid.org/en/packages/org.sufficientlysecure.keychain/) skal først installere og opsættes. FairEmail er aftestet med OpenKeychain version 5.4. Senere versioner er sansynligvis kompatible, men tidligere versioner er muligvis ikke.
You'll need to install and configure [OpenKeychain](https://f-droid.org/en/packages/org.sufficientlysecure.keychain/) first. FairEmail was tested with OpenKeychain version 5.4. Later versions will most likely be compatible, but earlier versions might not be.
**Vigtigt**: OpenKeychain-appen er kendt for at gå ned (upåagtet), når den kaldende app (FairEmail) endnu ikke er godkendt og er ved at få en eksisterende offentlig nøgle. Dette kan løse dette ved at prøve at sende en signeret/krypteret besked til en afsender med en ukendt offentlig nøgle.
**Important**: the OpenKeychain app is known to (silently) crash when the calling app (FairEmail) is not authorized yet and is getting an existing public key. You can workaround this by trying to send a signed/encrypted message to a sender with an unknown public key.
**Vigtigt**: Kan OpenKeychain-appen ikke (længere) finde en nøgle, skal en tidligere valgt nøgle muligvis nulstille. Dette kan gøres via et langt tryk på en identitet i identitetsoversigten (Opsætning, trin 2, Håndtér).
**Important**: if the OpenKeychain app cannot find a key (anymore), you might need to reset a previously selected key. This can be done by long pressing an identity in the list of identities (Setup, step 2, Manage).
**Vigtigt **: For at lade apps som FairEmail pålideligt oprette forbindelse til OpenKeychain-tjenesten for at kryptere/dekryptere beskeder, kan deaktivering af batterioptimering af OpenKeychain-appen være nødvendig.
**Important**: to let apps like FairEmail reliably connect to the OpenKeychain service to encrypt/decrypt messages, it might be necessary to disable battery optimizations for the OpenKeychain app.
**Vigtigt**: OpenKeychain-appen har angiveligt behov for kontaktpersontilladelse for at fungere korrekt.
**Important**: the OpenKeychain app reportedly needs contacts permission to work correctly.
**Vigtigt**: På visse Android-versioner/-enheder er det nødvendigt at aktivere *Vis popups i baggrundstilstand * i de udvidede tilladelser til Android-app indstillingerne i OpenKeychain-appen. Uden denne tilladelse, gemmes udkastet, men OpenKeychain-popup'en til bekræftelse/valg vises muligvis ikke.
**Important**: on some Android versions / devices it is necessary to enable *Show popups while running in background* in the additional permissions of the Android app settings of the OpenKeychain app. Without this permission the draft will be saved, but the OpenKeychain popup to confirm/select might not appear.
FairEmail vil sende [Autocrypt](https://autocrypt.org/)-headeren til brug for andre e-mailklienter, men kun for signerede og krypterede beskeder, da for mange e-mailservere har problemer med den ofte lange Autocrypt-header. Bemærk, at den mest sikre måde at starte en krypteret e-mailudveksling på er ved først at sende signerede beskeder. Modtagne Autocrypt-headers sendes til og lagres af OpenKeychain-appen til brug for fremtidige signaturbekræftelser eller beskeddekrypteringer.
FairEmail will send the [Autocrypt](https://autocrypt.org/) header for use by other email clients, but only for signed and encrypted messages because too many email servers have problems with the often long Autocrypt header. Note that the most secure way to start an encrypted email exchange is by sending signed messages first. Received Autocrypt headers will be sent to the OpenKeychain app for storage on verifying a signature or decrypting a message.
Al nøglehåndtering uddelegeres af sikkerhedsårsager til OpenKeychain appen. Dette betyder også, at FairEmail ikke gemmer PGP-nøgler.
All key handling is delegated to the OpenKey chain app for security reasons. This also means that FairEmail does not store PGP keys.
Inline-krypteret PGP i modtagne beskeder understøttes, men inline PGP-signaturer og inline PGP i udgående beskeder understøttes ikke. Tjek [hér](https://josefsson.org/inline-openpgp-considered-harmful.html) vedr. årsag.
Inline encrypted PGP in received messages is supported, but inline PGP signatures and inline PGP in outgoing messages is not supported, see [here](https://josefsson.org/inline-openpgp-considered-harmful.html) about why not.
Kun signerede eller kun krypterede beskeder er ikke en god idé. Tjek her vedr. årsagen:
Signed-only or encrypted-only messages are not a good idea, please see here about why not:
* [Overvejelser vedr. OpenPGP, del I](https://k9mail.github.io/2016/11/24/OpenPGP-Considerations-Part-I.html)
* [Overvejelser vedr. OpenPGP, del II](https://k9mail.github.io/2017/01/30/OpenPGP-Considerations-Part-II.html)
* [Overvejelser vedr. OpenPGP, del III, Autocrypt](https://k9mail.github.io/2018/02/26/OpenPGP-Considerations-Part-III-Autocrypt.html)
Kun signarede beskeder understøttes, kun krypterede beskeder understøttes ikke.
Signed-only messages are supported, encrypted-only messages are not supported.
Almindelige fejl:
Common errors:
* *Ingen nøgle*: Ingen PGP-nøgle tilgængelig for en af de angivne e-mailadresser
* *Manglende krypteringsnøgle*: Der er sandsynligvis valgt en nøgle i FairEmail, der ikke længere forefindes i OpenKeychain-appen. Nulstilling af nøglen (se ovenfor) løser sandsynligvis dette problem.
*S/MIME*
Den/de offentlige modtagernøgle(r) kræves ved beskedkryptering. Beskedsignering kræver brug af din private nøgle.
Encrypting a message requires the public key(s) of the recipient(s). Signing a message requires your private key.
Private nøgler gemmes af Android og kan importeres via Androids avancerede sikkerhedsindstillinger. Der er en genvej (knap) til dette under fortrolighedsindstillingerne. Android anmoder om opsætning af PIN-kode, mønster eller adgangskode, hvis dette ikke allerede er gjort. Har du en Nokia-enhed med Android 9, så [læs først dette](https://nokiamob.net/2019/08/10/a-bug-prevents-nokia-1-owners-from-unlocking-their-screen-even-with-right-pin-pattern/).
Private keys are stored by Android and can be imported via the Android advanced security settings. There is a shortcut (button) for this in the privacy settings. Android will ask you to set a PIN, pattern, or password if you didn't before. If you have a Nokia device with Android 9, please [read this first](https://nokiamob.net/2019/08/10/a-bug-prevents-nokia-1-owners-from-unlocking-their-screen-even-with-right-pin-pattern/).
Bemærk, at certifikater kan indeholde flere nøgler til flere formål, f.eks. til godkendelse, kryptering og signering. Android importerer kun den første nøgle, så for at importere alle nøgler, skal certifikatet først opdeles. Dette er ikke en almindelig forekommende handling, så du rådes til at bede certifikatleverandøren om support.
Note that certificates can contains multiple keys for multiple purposes, for example for authentication, encryption and signing. Android only imports the first key, so to import all the keys, the certificate must first be split. This is not very trivial and you are advised to ask the certificate supplier for support.
Note that S/MIMEsigning with other algorithms than RSA is supported, but be aware that other email clients might not support this. S/MIME encryption is possible with symmetric algorithms only, which means in practice using RSA.
@ -739,7 +747,7 @@ For setting up an Office 365 account, please see [this FAQ](#user-content-faq156
<aname="faq15"></a>
**(15) Why does the message text keep loading?**
The message header and message body are fetched separately from the server. The message text of larger messages is not being pre-fetched on metered connections and will be fetched on demand on expanding a message. Kontinuerlig genindlæsning af beskedteksten vil blive ved, hvis der ikke er forbindelse til kontoen. Se også næste spørgsmål, eller hvorvidt andre operationer, såsom beskedsynkronisering, afvikles.
The message header and message body are fetched separately from the server. The message text of larger messages is not being pre-fetched on metered connections and will be fetched on demand on expanding a message. The message text will keep loading if there is no connection to the account, see also the next question, or if there other operations, like synchronizing messages, are being executed.
You can check the account and folder list for the account and folder state (see the legend for the meaning of the icons) and the operation list accessible via the main navigation menu for pending operations (see [this FAQ](#user-content-faq3) for the meaning of the operations).
@ -1168,9 +1176,9 @@ It is inevitable that synchronizing messages will use battery power because it r
If you are comparing the battery usage of FairEmail with another email client, please make sure the other email client is setup similarly. For example comparing always sync (push messages) and (infrequent) periodic checking for new messages is not a fair comparison.
Reconnecting to an email server will use extra battery power, so an unstable internet connection will result in extra battery usage. Visse e-mailservere afslutter også ikke-aktive forbindelser for tidligt, selvom [standarden](https://tools.ietf.org/html/rfc2177) dikterer, at en ikke-aktiv forbindelse bør holdes åben i 29 minutter. I sådanne tilfælde vil du måske kun synkronisere periodisk, f.eks. hver time, i stedet for kontinuerligt. Bemærk, at hyppig polling (udover hvert ca. 30.-60. min) antageligt vil forbruge mere strøm end kontinuerlig synkronisering, da serverforbindelsesoprettelsen samt lokal-/fjernbeskeds matchning kræver ressourcer.
Reconnecting to an email server will use extra battery power, so an unstable internet connection will result in extra battery usage. Also, some email servers prematurely terminate idle connections, while [the standard](https://tools.ietf.org/html/rfc2177) says that an idle connection should be kept open for 29 minutes. In these cases you might want to synchronize periodically, for example each hour, instead of continuously. Note that polling frequently (more than every 30-60 minutes) will likely use more battery power than synchronizing always because connecting to the server and comparing the local and remote messages are expensive operations.
Det er [på visse enheder](https://dontkillmyapp.com/) nødvendigt at *deaktivere* batterioptimering (opsætningstrin 4) for at holde e-mailserverforbinndelser åbne. Faktisk kan aktiv batterioptimering resultere i ekstra strømforbrug på alle enheder, selvom det lyder selvmodsigende!
[On some devices](https://dontkillmyapp.com/) it is necessary to *disable* battery optimizations (setup step 4) to keep connections to email servers open. In fact, leaving battery optimizations enabled can result in extra battery usage for all devices, even though this sounds contradictory!
Most of the battery usage, not considering viewing messages, is due to synchronization (receiving and sending) of messages. So, to reduce the battery usage, set the number of days to synchronize message for to a lower value, especially if there are a lot of recent messages in a folder. Long press a folder name in the folders list and select *Edit properties* to access this setting.
@ -1402,13 +1410,13 @@ There are almost no providers offering the [JMAP](https://jmap.io/) protocol, so
<br/>
<aname="faq57"></a>
**(57) Kan HTML benyttes i signaturer?**
**(57) Can I use HTML in signatures?**
Ja, [HTML](https://en.wikipedia.org/wiki/HTML) kan benyttes. I signaturredigeringsværktøjet kan du via trepriksmenuen skifte til HTML-tilstand.
Yes, you can use [HTML](https://en.wikipedia.org/wiki/HTML). In the signature editor you can switch to HTML mode via the three-dots menu.
Bemærk, at skifter du tilbage til teksredigeringsværktøjet, vil alt HTML måske fremstå korrekt, da Android-teksredigeringsværktøjet ikke kan håndtere alt HTML. Tilsvarende, hvis du bruger tekstredigerinsværktøjet, kan HTML blive ændret på uventede måder.
Note that if you switch back to the text editor that not all HTML might be rendered as-is because the Android text editor is not able to render all HTML. Similarly, if you use the text editor, the HTML might be altered in unexpected ways.
Ønsker su at bruge præformateret tekst, såsom [ASCII art](https://en.wikipedia.org/wiki/ASCII_art), bør du ombryde teksten i et *præelement* således:
If you want to use preformatted text, like [ASCII art](https://en.wikipedia.org/wiki/ASCII_art), you should wrap the text in a *pre* element, like this:
```
<pre>
@ -1463,6 +1471,7 @@ For security reasons the files with the original message texts are not accessibl
* Did you know that you can long press the people's icon to show/hide the CC/BCC fields and remember the visibility state for the next time?
* Did you know that you can insert the email addresses of an Android contact group via the three dots overflow menu?
* Did you know that if you select text and hit reply, only the selected text will be quoted?
* Did you know that you can long press the trash icons (both in the message and the bottom action bar) to permanently delete a message or conversation? (version 1.1368+)
<br/>
@ -2329,7 +2338,7 @@ Directly after the first step new messages will be notified. However, only until
Since there is no guarantee that a message text will always be fetched directly after a message header, it is not possible to guarantee that a new message notification with a preview text will always be sent to a wearable.
Mener du, at dette er tilstrækkeligt, du kan aktivere notifikationsindstillingen *Send kun notifikationer med beskedforhåndsvisning til wearables*, og fungerer dette ikke, du kan prøve at aktivere notifikationsindstillingen *Vis kun notifikationer med forhåndsvisningstekst*. Note that this applies to wearables not showing a preview text too, even when the Android Wear app says the notification has been sent (bridged).
If you think this is good enough, you can enable the notification option *Only send notifications with a message preview to wearables* and if this does not work, you can try to enable the notification option *Show notifications with a preview text only*. Note that this applies to wearables not showing a preview text too, even when the Android Wear app says the notification has been sent (bridged).
If you want to have the full message text sent to your wearable, you can enable the notification option *Preview all text*. Note that some wearables are known to crash with this option enabled.
@ -2604,7 +2613,7 @@ There is **only support** on the latest Play store version, the latest GitHub re
F-Droid builds irregularly, which can be problematic when there is an important update. Therefore you are advised to switch to the GitHub release.
The F-Droid version is built from the same source code, but signed differently. Dvs., at alle funktioner også er tilgængelige i F-Droid versionen bortset brug af Gmail-hurtigopsætningsguiden, da Google har godkendt (og alee tillader) én app-signatur. For alle andre e-mailudbydere, er OAuth-adgang kun tilgængelig i Play Butik- og Github-versioner, da e-mailudbydere kun tillader brug af OAuth for officielle builds.
The F-Droid version is built from the same source code, but signed differently. This means that all features are available in the F-Droid version too, except for using the Gmail quick setup wizard because Google approved (and allows) one app signature only. For all other email providers, OAuth access is only available in Play Store versions and Github releases, as the email providers only permit the use of OAuth for official builds.
Note that you'll need to uninstall the F-Droid build first before you can install a GitHub release because Android refuses to install the same app with a different signature for security reasons.
@ -2710,87 +2719,87 @@ An Office 365 account can be set up via the quick setup wizard and selecting *Of
If the wizard ends with *AUTHENTICATE failed*, IMAP and/or SMTP might be disabled for the account. In this case you should ask the administrator to enable IMAP and SMTP. The procedure is documented [here](https://docs.microsoft.com/en-in/exchange/troubleshoot/configure-mailboxes/pop3-imap-owa-activesync-office-365).
Er *sikkerhedsstandarder* aktiveret i din organisation, kan du være nødt til at aktivere SMTP AUTH-protokollen. Tjek [hér](https://docs.microsoft.com/en-us/exchange/clients-and-mobile-in-exchange-online/authenticated-client-smtp-submission) ang. hvordan.
If you've enabled *security defaults* in your organization, you might need to enable the SMTP AUTH protocol. Please [see here](https://docs.microsoft.com/en-us/exchange/clients-and-mobile-in-exchange-online/authenticated-client-smtp-submission) about how to.
<br/>
<aname="faq157"></a>
**(157) Hvordan opsættes en Free.fr-konto?**
**(157) How can I set up an Free.fr account?**
Tjek [hér](https://free.fr/assistance/597.html) ang. instruktioner.
Veuillez [voir ici](https://free.fr/assistance/597.html) pour les instructions.
** SMTP er som standard deaktiveret **, tjek [hér](https://free.fr/assistance/2406.html) ang. aktivering af den.
**SMTP est désactivé par défaut**, veuillez [voir ici](https://free.fr/assistance/2406.html) comment il peut être activé.
Tjek [hér](http://jc.etiemble.free.fr/abc/index.php/trucs-astuces/configurer-smtp-free-fr) ang. detaljeret vejledning.
Veuillez [voir ici](http://jc.etiemble.free.fr/abc/index.php/trucs-astuces/configurer-smtp-free-fr) pour un guide détaillé.
For at optage stemmenotater mv., skal lydoptageren understøtte [MediaStore.Audio.Media.RECORD_SOUND_ACTION](https://developer.android.com/reference/android/provider/MediaStore.Audio.Media#RECORD_SOUND_ACTION). Mærkværdigvis synes de fleste lydoptagere ikke at understøtte denne standard Android-handling.
To record voice notes, etc, the audio recorder needs to support [MediaStore.Audio.Media.RECORD_SOUND_ACTION](https://developer.android.com/reference/android/provider/MediaStore.Audio.Media#RECORD_SOUND_ACTION). Oddly, most audio recorders seem not to support this standard Android action.
<br/>
<aname="faq159"></a>
**(159) Hvad er Disconnect's tracker-beskyttelseslister?**
**(159) What are Disconnect's tracker protection lists?**
Tjek [hér](https://disconnect.me/trackerprotection) for yderligere oplysninger om Disconnect's tracker-beskyttelseslister.
Please see [here](https://disconnect.me/trackerprotection) for more information about Disconnect's tracker protection lists.
Efter download af listerne via fortrolighedsindstillingerne, kan disse anvendes:
After downloading the lists in the privacy settings, the lists can optionally be used:
* to warn about tracking links on opening links
* to recognize tracking images in messages
Trackingsbilleder deaktiveres kun, såfremt den tilsvarende hovedindstilling 'deaktivere' er slået til.
Tracking images will be disabled only if the corresponding main 'disable' option is enabled.
Tracking-billeder genkendes ikke, såfremt domænet er klassificeret som '*Indhold*', tjek [hér](https://disconnect.me/trackerprotection#trackers-we-dont-block) for yderligere oplysninger.
Tracking images will not be recognized when the domain is classified as '*Content*', see [here](https://disconnect.me/trackerprotection#trackers-we-dont-block) for more information.
Denne kommando kan sendes til FairEmail fra en automatiserings-app for at opdatere beskyttelseslisterne:
This command can be sent to FairEmail from an automation app to update the protection lists:
```
(adb shell) am startservice -a eu.faircode.email.DISCONNECT.ME
```
Én ugentligt opdatering er formentlig tilstrækkeligt, tjek [hér](https://github.com/disconnectme/disconnect-tracking-protection/commits/master) for seneste listeændringer.
Updating once a week will probably be sufficient, please see [here](https://github.com/disconnectme/disconnect-tracking-protection/commits/master) for recent lists changes.
<br/>
<aname="faq160"></a>
**(160) Kan der blive tilføjet permanent sletning af beskeder uden bekræftelse?**
**(160) Can you add permanent deletion of messages without confirmation?**
Permanent sletning af beskeder er en *irreversibel handling*, så for at forhindre utilsigtet tab af beskeder, skal sletning altid bekræftes. Selv med en bekræftelse, har nogle meget vrede personer, som mistede nogle af deres beskeder grundet egne fejl, kontaktede mig, hvilket var en ret ubehagelig oplevelse :-(
Permanent deletion means that messages will *irreversibly* be lost, and to prevent this from happening accidentally, this always needs to be confirmed. Even with a confirmation, some very angry people who lost some of their messages through their own fault contacted me, which was a rather unpleasant experience :-(
<br/>
<aname="faq161"></a>
**(161) Kan der blive tilføjet en indstilling til ændring af primær- og accentfarverne?***
**(161) Can you add a setting to change the primary and accent color?***
Om muligt blev der med det samme tilføjet en indstilling til valg af primær- og accentfarver, men Android-temaer er desværre statiske, tjek f.eks. [hér](https://stackoverflow.com/a/26511725/1794097), så dette er ikke muligt.
If I could, I would add a setting to select the primary and accent color right away, but unfortunately Android themes are fixed, see for example [here](https://stackoverflow.com/a/26511725/1794097), so this is not possible.
<br/>
## Support
Kun seneste Play Butik- og GitHub-versioner understøttes. Dette betyder også, at nedgradering ikke understøttes.
Only the latest Play store version and latest GitHub release are supported. This also means that downgrading is not supported.
Ønskede funktioner skal:
Requested features should:
* be usefulto most people
* not complicate the usage of FairEmail
* fit within the philosophy of FairEmail (privacy oriented, security minded)
* comply with common standards (IMAP, SMTP, etc)
Funktioner, som ikke opfylder disse krav, afvises sandsynligvis. Dette er også for at muliggøre vedligeholdelse og support i det lange løb.
Features not fulfilling these requirements will likely be rejected. This is also to keep maintenance and support in the long run feasible.
Har du spørgsmål, ønsker til en funktion eller vil indrapportere en fejl, så benyt venligst [denne formular](https://contact.faircode.eu/?product=fairemailsupport).
If you have a question, want to request a feature or report a bug, please use [this form](https://contact.faircode.eu/?product=fairemailsupport).
GitHub-problemstillinger er deaktiveret grundet hyppigt misbrug.
GitHub issues are disabled due to frequent misusage.
@ -388,39 +388,47 @@ Operationen werden nur bearbeitet, wenn eine Verbindung zum E-Mail-Server besteh
Kontaktieren Sie Ihren Provider, um dieses Problem zu beheben oder besorgen Sie sich ein gültiges Sicherheitszertifikat, da ungültige und dadurch unsichere Sicherheitszertifikate [Man-in-the-Middle-Angriffe](https://en.wikipedia.org/wiki/Man-in-the-middle_attack) ermöglichen. Falls Sie die Kosten hierfür scheuen, dann können Sie kostenlose Sicherheitszertifikate von [Let's Encrypt](https://letsencrypt.org) beziehen.
Alternatively, you can accept the fingerprint of the invalid server certificate as shown below the error message by ticking a checkbox. In case of an existing account (IMAP, receive) and/or identity (SMTP, send) you will need check/save it via setup step 1 and 2 to get the error message. This will "pin" the server certificate to prevent man-in-the-middle attacks. Note that you should make sure the internet connection you are using is safe if you do this.
Alternatively, you can accept the fingerprint of invalid server certificates like this:
Beachten Sie, dass ältere Android-Versionen neuere Zertifizierungsbehörden wie Let’s Encrypt möglicherweise nicht akzeptieren, wodurch Internetverbindungen als unsicher eingestuft werden können, siehe auch [hier](https://developer.android.com/training/articles/security-ssl).
1. Make sure you are using a trusted internet connection (no public Wi-Fi networks, etc)
1. Go to the setup screen via the navigation menu (swipe from the left side inwards)
1. In step 1 and 2 tap *Manage* and tap the faulty account and identity
1. Check/save the account and identity
1. Tick the checkbox below the error message and save again
*Vertrauensanker für Zertifizierungspfad nicht gefunden*
This will "pin" the server certificate to prevent man-in-the-middle attacks.
*... java.security.cert.CertPathValidatorException: Vertrauensanker für Zertifizierungspfad nicht gefunden ...* bedeutet, dass der standardmäßige Android Trust Manager die Server-Zertifikatskette nicht überprüfen konnte.
Note that older Android versions might not recognize newer certification authorities like Let’s Encrypt causing connections to be considered insecure, see also [here](https://developer.android.com/training/articles/security-ssl).
Sie sollten entweder die Serverkonfiguration korrigieren oder den unten angezeigten Fingerabdruck akzeptieren.
*Trust anchor for certification path not found*
Beachten Sie, dass dieses Problem dadurch verursacht werden kann, dass der Server nicht alle Zwischenzertifikate sendet.
*... java.security.cert.CertPathValidatorException: Trust anchor for certification path not found ...* means that the default Android trust manager was not able to verify the server certificate chain.
*Leeres Passwort*
You should either fix the server configuration or accept the fingerprint shown below the error message.
Ihr Benutzername ist möglicherweise leicht zu erraten, daher ist dies unsicher.
Note that this problem can be caused by the server not sending all intermediate certificates too.
*Klartext-Verbindung*
*Empty password*
Benutzername und Passwort, sowie alle Nachrichten, werden unverschlüsselt gesendet und empfangen, was im **höchsten Maße unsicher** ist, weil eine [Man-in-the-Middle-Attacke](https://en.wikipedia.org/wiki/Man-in-the-middle_attack) auf einer unverschlüsselten Verbindung sehr einfach ist.
Your username is likely easily guessed, so this is insecure.
Wenn Sie dennoch ein ungültiges Sicherheitszertifikat, ein leeres Passwort oder eine Klartext-Verbindung verwenden möchten, dann müssen Sie unsichere Verbindungen in den Konto- und/oder Identitätseinstellungen aktivieren. STARTTLS sollte für Klartext-Verbindungen ausgewählt werden. Wenn Sie unsichere Verbindungen aktivieren, sollten Sie sich nur über private, vertrauenswürdige Netzwerke verbinden und niemals über öffentliche Netzwerke, wie sie in Hotels, Flughäfen usw. angeboten werden.
*Plain text connection*
Your username and password and all messages will be sent and received unencrypted, which is **very insecure** because a [man-in-the-middle attack](https://en.wikipedia.org/wiki/Man-in-the-middle_attack) is very simple on an unencrypted connection.
If you still want to use an invalid security certificate, an empty password or a plain text connection you'll need to enable insecure connections in the account and/or identity settings. STARTTLS should be selected for plain text connections. If you enable insecure connections, you should connect via private, trusted networks only and never via public networks, like offered in hotels, airports, etc.
<br/>
<aname="faq5"></a>
**(5) Wie kann ich die Nachrichtenansicht anpassen?**
**(5) How can I customize the message view?**
Im Drei-Punkte-Überlaufmenü können Sie die folgenden Optionen aktivieren/deaktivieren bzw. wählen:
In the three dot overflow menu you can enable or disable or select:
* *Textgröße*: für drei verschiedene Schriftgrößen
* *kompakte Ansicht*: für eine mehr verdichtete Nachrichtendarstellung und eine kleinere Text-Schriftart
Im Anzeigebereich der Einstellungen können Sie ein- oder ausschalten:
In the display section of the settings you can enable or disable:
* *Einheitlicher Posteingang*: Schalten Sie diese Option aus, um stattdessen die Ordner separat aufzulisten, die für den einheitlichen Posteingang ausgewählt wurden
* *Nach Datum gruppieren*: Zeigt eine Kopfzeile für alle Nachrichten mit dem gleichen Datum anzeigen
@ -437,119 +445,119 @@ Im Anzeigebereich der Einstellungen können Sie ein- oder ausschalten:
* *Bilder von bekannten Kontakten anzeigen*: Wenn Sie Bilder von bekannten Kontakten automatisch anzeigen lassen möchten, dann lesen Sie bitte [diese FAQ](#user-content-faq35)
* *Konversations-Aktionsleiste*: Blendet die untere Navigationsleiste ein oder aus
Beachten Sie, dass Nachrichten nur angezeigt werden können, wenn der Nachrichtentext heruntergeladen wurde. Größere Nachrichtentexte werden standardmäßig nicht bei getakteten Datenverbindungen (Mobile Daten) heruntergeladen. Sie können dies in den Einstellungen ändern.
Note that messages can be previewed only when the message text was downloaded. Larger message texts are not downloaded by default on metered (generally mobile) networks. You can change this in the settings.
Wenn die Liste der Adressaten sehr lang ist, dann können Sie den Adressbereich mit dem *Weniger* Symbol oben im Adressbereich einklappen.
If the list of addresses is long, you can collapse the addresses section with the *less* icon at the top of the addresses section.
Einige Benutzer fragten:
Some people ask:
* wie man den Betreff fett anzeigen lassen kann, obwohl eine fette Schrift bereits verwendet wird, um ungelesene Nachrichten hervorzuheben
* wie man die Adresse oder den Betreff unabhängig von der Textgröße-Option in den Einstellungen größer/kleiner anzeigen lassen kann
* um den Stern nach links zu bewegen, aber es ist viel einfacher, den Stern auf der rechten Seite zu bedienen
Leider ist es unmöglich, alle glücklich zu machen und viele Einstellungen wären nicht nur verwirrend, sondern auch nie ausreichend.
Unfortunately, it is impossible to make everybody happy and adding lots of settings would not only be confusing, but also never be sufficient.
<br/>
<aname="faq6"></a>
**(6) Wie kann ich mich bei Gmail / G Suite anmelden?**
**(6) How can I login to Gmail / G suite?**
Sie können den Schnelleinrichtungsassistenten verwenden, um einfach ein Gmail-Konto und eine Gmail-Identität einzurichten.
You can use the quick setup wizard to easily setup a Gmail account and identity.
Wenn Sie kein Gmail-Konto auf dem Gerät verwenden möchten, können Sie entweder den Zugriff für „weniger sichere Apps“ aktivieren und Ihr Kontopasswort verwenden (nicht empfohlen) oder die Zwei-Faktor-Authentifizierung aktivieren und ein appspezifisches Passwort verwenden. Um ein Passwort zu verwenden, müssen Sie Konto und Identität über die Einrichtungsschritte 1 und 2 statt über den Schnelleinrichtungs-Assistenten einrichten.
If you don't want to use an on-device Gmail account, you can either enable access for "less secure apps" and use your account password (not advised) or enable two factor authentication and use an app specific password. To use a password you'll need to setup an account and identity via setup step 1 and 2 instead of via the quick setup wizard.
Bitte lesen Sie in [dieser FAQ](#user-content-faq111), warum nur On-Device-Konten verwendet werden können.
Please see [this FAQ](#user-content-faq111) on why only on-device accounts can be used.
Beachten Sie, dass bei Aktivierung der Zwei-Faktor-Authentifizierung ein app-spezifisches Passwort erforderlich ist.
Note that an app specific password is required when two factor authentication is enabled.
<br/>
*Appspezifisches Passwort*
*App specific password*
Wie ein appspezifisches Passwort erstellt wird, sehen Sie [hier](https://support.google.com/accounts/answer/185833).
See [here](https://support.google.com/accounts/answer/185833) about how to generate an app specific password.
<br/>
*„Weniger sichere Apps“ aktivieren*
*Enable "Less secure apps"*
**Wichtig**: Die Verwendung dieser Methode wird nicht empfohlen, da sie weniger zuverlässig ist.
**Important**: using this method is not recommended because it is less reliable.
**Wichtig**: Gsuite-Konten, die mit einem Benutzernamen/Passwort autorisiert sind, funktionieren [in naher Zukunft](https://gsuiteupdates.googleblog.com/2019/12/less-secure-apps-oauth-google-username-password-incorrect.html) nicht mehr.
**Important**: Gsuite accounts authorized with a username/password will stop working [in the near future](https://gsuiteupdates.googleblog.com/2019/12/less-secure-apps-oauth-google-username-password-incorrect.html).
Sehen Sie [hier](https://support.google.com/accounts/answer/6010255) wie man „weniger sichere Apps“ aktiviert oder gehen Sie [direkt zu der Einstellung](https://www.google.com/settings/security/lesssecureapps).
See [here](https://support.google.com/accounts/answer/6010255) about how to enable "less secure apps" or go [directy to the setting](https://www.google.com/settings/security/lesssecureapps).
Wenn Sie mehrere Gmail-Konten verwenden, stellen Sie sicher, dass Sie die Einstellung „weniger sichere Apps“ des/der richtigen Accounts ändern.
If you use multiple Gmail accounts, make sure you change the "less secure apps" setting of the right account(s).
Seien Sie sich bewusst, dass Sie den „weniger sicheren Apps“ Bildschirm über den Zurückpfeil verlassen müssen, um die Einstellung anzuwenden.
Be aware that you need to leave the "less secure apps" settings screen by using the back arrow to apply the setting.
Wenn Sie diese Methode verwenden, sollten Sie ein [starkes Passwort](https://en.wikipedia.org/wiki/Password_strength) für Ihr Gmail-Konto verwendet, was aber grundsätzlich immer eine gute Idee ist. Beachten Sie, dass die Verwendung des [Standard](https://tools.ietf.org/html/rfc3501)-IMAP-Protokolls an sich nicht weniger sicher ist.
If you use this method, you should use a [strong password](https://en.wikipedia.org/wiki/Password_strength) for your Gmail account, which is a good idea anyway. Note that using the [standard](https://tools.ietf.org/html/rfc3501) IMAP protocol in itself is not less secure.
Wenn „weniger sichere Anwendungen” nicht aktiviert ist, erhalten Sie die Fehlermeldung *Authentifizierung fehlgeschlagen - ungültige Anmeldedaten* für Konten (IMAP) und *Benutzername und Passwort nicht akzeptiert* für Identitäten (SMTP).
When "less secure apps" is not enabled, you'll get the error *Authentication failed - invalid credentials* for accounts (IMAP) and *Username and Password not accepted* for identities (SMTP).
<br/>
*Allgemein*
*General*
Möglicherweise erhalten Sie die Meldung „*Bitte melden Sie sich über Ihren Webbrowser an*”. Dies geschieht, wenn Google das Netzwerk, das Sie mit dem Internet verbindet (dies könnte ein VPN sein), als unsicher einstuft. Dies kann verhindert werden, indem Sie den Assistenten zur schnellen Einrichtung von Google Mail oder ein app-spezifisches Passwort verwenden.
You might get the alert "*Please log in via your web browser*". This happens when Google considers the network that connects you to the internet (this could be a VPN) to be unsafe. This can be prevented by using the Gmail quick setup wizard or an app specific password.
Siehe [hier](https://support.google.com/mail/answer/7126229) für eine Anleitung von Google und [hier](https://support.google.com/mail/accounts/answer/78754) für die Problemlösung.
See [here](https://support.google.com/mail/answer/7126229) for Google's instructions and [here](https://support.google.com/mail/accounts/answer/78754) for troubleshooting.
<br/>
<aname="faq7"></a>
**(7) Warum werden gesendete Nachrichten nicht (direkt) im gesendeten Ordner angezeigt?**
**(7) Why are sent messages not appearing (directly) in the sent folder?**
Gesendete Nachrichten werden normalerweise aus dem Postausgang in den Ordner „Gesendet” verschoben, sobald Ihr Provider gesendete Nachrichten dem Ordner „Gesendet” hinzufügt. Dazu muss in den Kontoeinstellungen einen Ordner "Gesendet" ausgewählt werden, und dieser Ordner zum Synchronisieren festgelegt werden.
Sent messages are normally moved from the outbox to the sent folder as soon as your provider adds sent messages to the sent folder. This requires a sent folder to be selected in the account settings and the sent folder to be set to synchronizing.
Einige Provider verfolgen die gesendeten Nachrichten nicht oder der verwendete SMTP-Server ist möglicherweise nicht mit dem Provider verbunden. In diesen Fällen fügt FairEmail gesendete Nachrichten automatisch bei der Synchronisation des Ordners „Gesendet” dem Ordner „Gesendet” hinzu. Beachten Sie, dass dies zu zusätzlichem Internetverkehr führt.
Some providers do not keep track of sent messages or the used SMTP server might not be related to the provider. In these cases FairEmail, will automatically add sent messages to the sent folder on synchronizing the sent folder, which will happen after a message have been sent. Note that this will result in extra internet traffic.
~~Wenn dies nicht geschieht, verfolgt Ihr Provider möglicherweise nicht die gesendeten Nachrichten oder Sie verwenden einen SMTP-Server, der dem Provider nicht zugeordnet ist. ~ ~~In diesen Fällen können Sie die erweiterte Identitätseinstellung *Speichere gesendete Nachrichten* aktivieren, damit FairEmail gesendete Nachrichten direkt nach dem Senden einer Nachricht in den gesendeten Ordner einfügen kann. ~ ~~Beachten Sie, dass das Aktivieren dieser Einstellung zu doppelten Nachrichten führen kann, wenn Ihr Provider auch gesendete Nachrichten in den gesendeten Ordner einfügt. ~ ~~Beachten Sie auch, dass das Aktivieren dieser Einstellung zusätzliche Datenauslastung zur Folge hat, insbesondere wenn Nachrichten mit großen Anhängen gesendet werden.~~
~~If this doesn't happen, your provider might not keep track of sent messages or you might be using an SMTP server not related to the provider.~~ ~~In these cases you can enable the advanced identity setting *Store sent messages* to let FairEmail add sent messages to the sent folder right after sending a message.~~~~Note that enabling this setting might result in duplicate messages if your provider adds sent messages to the sent folder too.~~ ~~Also beware that enabling this setting will result in extra data usage, especially when when sending messages with large attachments.~~
~~If sent messages in the outbox are not found in the sent folder on a full synchronize, they will be moved from the outbox to the sent folder too.~~ ~~A full synchronize happens when reconnecting to the server or when synchronizing periodically or manually.~~ ~~You'll likely want to enable the advanced setting *Store sent messages* instead to move messages to the sent folder sooner.~~
<br/>
<aname="faq8"></a>
**(8) Kann ich ein Microsoft Exchange-Konto verwenden?**
**(8) Can I use a Microsoft Exchange account?**
Sie können ein Microsoft Exchange-Konto verwenden, wenn es über IMAP zugänglich ist, was meistens der Fall ist. Sehen Sie [hier](https://support.office.com/en-us/article/what-is-a-microsoft-exchange-account-47f000aa-c2bf-48ac-9bc2-83e5c6036793) für weitere Informationen.
You can use a Microsoft Exchange account if it is accessible via IMAP, which is mostly the case. See [here](https://support.office.com/en-us/article/what-is-a-microsoft-exchange-account-47f000aa-c2bf-48ac-9bc2-83e5c6036793) for more information.
[Hier](https://support.office.com/en-us/article/pop-imap-and-smtp-settings-for-outlook-com-d088b986-291d-42b8-9564-9c414e2aa040) finden Sie Microsofts Dokumentation zur Konfiguration eines E-Mail-Clients. Es gibt auch einen Abschnitt über häufige Verbindungsfehler und -lösungen.
Please see [here](https://support.office.com/en-us/article/pop-imap-and-smtp-settings-for-outlook-com-d088b986-291d-42b8-9564-9c414e2aa040) for the Microsoft documentation about configuring an email client. There is also a section about common connection errors and solutions.
Einige ältere Exchange-Server-Versionen haben einen Fehler, der eine leere Nachricht und beschädigte Anhänge verursacht. Eine Problemumgehung finden Sie in [dieser FAQ](#user-content-faq110).
Some older Exchange server versions have a bug causing empty message and corrupt attachments. Please see [this FAQ](#user-content-faq110) for a workaround.
Siehe [diese FAQ](#user-content-faq133) zur ActiveSync Unterstützung.
Please see [this FAQ](#user-content-faq133) about ActiveSync support.
Siehe [diese FAQ](#user-content-faq111) zu OAuth Support.
Please see [this FAQ](#user-content-faq111) about OAuth support.
<br/>
<aname="faq9"></a>
**(9) Was sind Identitäten / wie füge ich einen Alias hinzu?**
**(9) What are identities / how do I add an alias?**
Identitäten stellen E-Mail-Adressen dar, *von* denen Sie über einen E-Mail (SMTP) Server senden.
Identities represent email addresses you are sending *from* via an email (SMTP) server.
Einige Anbieter gestatten die Verwendung mehrerer Aliasse. You can configure these by setting the email address field of an additional identity to the alias address and setting the user name field to your main email address.
Some providers allow you to have multiple aliases. You can configure these by setting the email address field of an additional identity to the alias address and setting the user name field to your main email address.
Beachten Sie, dass Sie eine Identität durch langes Drücken kopieren können.
Note that you can copy an identity by long pressing it.
Alternativ können Sie in den erweiterten Einstellungen einer existierenden Identität das *Bearbeiten der Absenderadresse erlauben*, um den Benutzernamen beim Erstellen einer Nachricht zu bearbeiten, wenn Ihr Provider dies zulässt.
Alternatively, you can enable *Allow editing sender address* in the advanced settings of an existing identity to edit the username when composing a new message, if your provider allows this.
FairEmail aktualisiert automatisch die Passwörter der jeweiligen Identitäten, wenn Sie das Passwort des zugehörigen Kontos oder einer damit verbundenen Identität aktualisieren.
FairEmail will automatically update the passwords of related identities when you update the password of the associated account or a related identity.
Bitte diese [F&A](#user-content-faq33) zum Bearbeiten des Benutzernamens von E-Mail-Adressen beachten.
See [this FAQ](#user-content-faq33) on editing the username of email addresses.
<br/>
<aname="faq10"></a>
**~~(10) What does 'UIDPLUS not supported' mean?~~**
~~The error message *UIDPLUS not supported* means that your email provider does not provide the IMAP [UIDPLUS extension](https://tools.ietf.org/html/rfc4315). This IMAP extension is required to implement two way synchronization, which is not an optional feature. Wenn Ihr Anbieter diese Erweiterung nicht aktivieren kann, können Sie FairEmail nicht für diesen Anbieter verwenden.~~
~~The error message *UIDPLUS not supported* means that your email provider does not provide the IMAP [UIDPLUS extension](https://tools.ietf.org/html/rfc4315). This IMAP extension is required to implement two way synchronization, which is not an optional feature. So, unless your provider can enable this extension, you cannot use FairEmail for this provider.~~
<br/>
<aname="faq11"></a>
**~~(11) Warum wird POP nicht unterstützt?~~**
**~~(11) Why is POP not supported?~~**
~~Besides that any decent email provider supports [IMAP](https://en.wikipedia.org/wiki/Internet_Message_Access_Protocol) these days,~~ ~~using [POP](https://en.wikipedia.org/wiki/Post_Office_Protocol) will result in unnecessary extra battery usage and delayed new message notifications.~~ ~~Moreover, POP is unsuitable for two way synchronization and more often than not people read and write messages on different devices these days.~~
@ -566,7 +574,7 @@ Bitte diese [F&A](#user-content-faq33) zum Bearbeiten des Benutzernamens von E-M
<aname="faq12"></a>
**(12) How does encryption/decryption work?**
*Allgemein*
*General*
Please [see here](https://en.wikipedia.org/wiki/Public-key_cryptography) about how public/private key encryption works.
@ -618,7 +626,7 @@ Signed-only or encrypted-only messages are not a good idea, please see here abou
Signed-only messages are supported, encrypted-only messages are not supported.
Häufige Fehler:
Common errors:
* *Kein Schlüssel*: kein PGP-Schlüssel für eine der aufgeführten E-Mail-Adressen verfügbar
* *Verschlüsselungsschlüssel fehlt*: es wurde wahrscheinlich in FairEmail ein Schlüssel ausgewählt, der in der OpenKeychain-App nicht mehr vorhanden ist. Das Zurücksetzen des Schlüssels (siehe oben) wird dieses Problem eventuell beheben.
@ -631,26 +639,26 @@ Private keys are stored by Android and can be imported via the Android advanced
Note that certificates can contains multiple keys for multiple purposes, for example for authentication, encryption and signing. Android only imports the first key, so to import all the keys, the certificate must first be split. This is not very trivial and you are advised to ask the certificate supplier for support.
Beachten Sie, dass S/MIME-Signierung mit anderen Algorithmen als RSA zwar unterstützt wird, aber andere E-Mail-Clients dies möglicherweise nicht unterstützen. S/MIME-Verschlüsselung ist nur mit symmetrischen Algorithmen möglich, das heißt in der Praxis RSA.
Note that S/MIMEsigning with other algorithms than RSA is supported, but be aware that other email clients might not support this. S/MIME encryption is possible with symmetric algorithms only, which means in practice using RSA.
Die Standard-Verschlüsselungsmethode ist PGP, aber die zuletzt verwendete Verschlüsselungsmethode wird fürs nächsten Mal für die ausgewählte Identität gespeichert. Möglicherweise müssen Sie die Sendeoptionen im Drei-Punkte-Menü erneut aktivieren, um die Verschlüsselungsmethode wählen zu können.
The default encryption method is PGP, but the last used encryption method will be remembered for the selected identity for the next time. You might need to enable the send options in the three dots menu again to be able to select the encryption method.
Um verschiedene private Schlüssel für die gleiche E-Mail-Adresse zu erlauben lässt FairEmail Sie immer einen Schlüssel auswählen, wenn es mehrere Identitäten mit der gleichen E-Mail-Adresse für denselben Account gibt.
To allow different private keys for the same email address, FairEmail will always let you select a key when there are multiple identities with the same email address for the same account.
Öffentliche Schlüssel werden bei FairEmail gespeichert und können bei der erstmaligen Überprüfung einer Signatur oder über die Privatsphäre-Einstellungen (PEM oder DER Format) importiert werden.
Public keys are stored by FairEmail and can be imported when verifying a signature for the first time or via the privacy settings (PEM or DER format).
FairEmail überprüft sowohl die Unterschrift als auch die gesamte Zertifikatskette.
FairEmail verifies both the signature and the complete certificate chain.
Häufige Fehler:
Common errors:
* *No certificate found matching targetContraints*: this likely means you are using an old version of FairEmail
* *unable to find valid certification path to requested target*: basically this means one or more intermediate or root certificates were not found
* *Privater Schlüssel stimmt mit keinem Verschlüsselungsschlüssel überein*: Der ausgewählte Schlüssel kann nicht verwendet werden, um die Nachricht zu entschlüsseln, wahrscheinlich weil es der falsche Schlüssel ist
* *Kein privater Schlüssel*: Es wurde kein Zertifikat ausgewählt oder kein Zertifikat im Android-Schlüsselgeschäft verfügbar
Falls die Zertifikatskette falsch ist, können Sie auf den kleinen Info-Button klicken, um alle Zertifikate anzuzeigen. After the certificate details the issuer or "selfSign" is shown. Ein Zertifikat ist selbstsigniert, wenn der Betreff und der Emittent identisch sind. Certificates from a certificate authority (CA) are marked with "[keyCertSign](https://tools.ietf.org/html/rfc5280#section-4.2.1.3)". Zertifikate im Android-Schlüsselspeicher werden mit »Android« gekennzeichnet.
In case the certificate chain is incorrect, you can tap on the little info button to show the all certificates. After the certificate details the issuer or "selfSign" is shown. A certificate is self signed when the subject and the issuer are the same. Certificates from a certificate authority (CA) are marked with "[keyCertSign](https://tools.ietf.org/html/rfc5280#section-4.2.1.3)". Certificates found in the Android key store are marked with "Android".
Eine gültige Kette sieht so aus:
A valid chain looks like this:
```
Your certificate > zero or more intermediate certificates > CA (root) certificate marked with "Android"
@ -658,45 +666,45 @@ Your certificate > zero or more intermediate certificates > CA (root) certificat
Note that a certificate chain will always be invalid when no anchor certificate can be found in the Android key store, which is fundamental to S/MIME certificate validation.
Sehen Sie [hier](https://support.google.com/pixelphone/answer/2844832?hl=en), wie Sie Zertifikate in den Android-Schlüsselspeicher importieren können.
Please see [here](https://support.google.com/pixelphone/answer/2844832?hl=en) how you can import certificates into the Android key store.
Die Verwendung von abgelaufenen Schlüsseln, inlineverschlüsselten oder -signierten Nachrichten und Hardwaresicherheitstoken wird nicht unterstützt.
The use of expired keys, inline encrypted/signed messages and hardware security tokens is not supported.
Wenn Sie ein kostenloses (Test) S/MIME Zertifikat suchen, finden Sie die Optionen [hier](http://kb.mozillazine.org/Getting_an_SMIME_certificate). Achten sie darauf, [das](https://davidroessli.com/logs/2019/09/free-smime-certificates-in-2019/#update20191219) zuerst zu lesen, wenn sie ein solches Zertifikat erhalten wollen. Wenn Sie ein günstiges S/MIME-Zertifikat suchen, habe ich mit [Certum](https://www.certum.eu/en/smime-certificates/) gute Erfahrungen gemacht.
If you are looking for a free (test) S/MIME certificate, see [here](http://kb.mozillazine.org/Getting_an_SMIME_certificate) for the options. Please be sure to [read this first](https://davidroessli.com/logs/2019/09/free-smime-certificates-in-2019/#update20191219) if you want to request an S/MIME Actalis certificate. If you are looking for a cheap S/MIME certificate, I had a good experience with [Certum](https://www.certum.eu/en/smime-certificates/).
Wie man einen öffentlichen Schlüssel aus einem S/MIME-Zertifikat extrahiert:
How to extract a public key from a S/MIME certificate:
Sie können S/MIME Signaturen dekodieren usw., siehe [hier](https://lapo.it/asn1js/).
You can decode S/MIME signatures, etc, [here](https://lapo.it/asn1js/).
S/MIME signieren/verschlüsseln ist ein Pro-Funktion, aber alle anderen PGP- und S/MIME-Operationen sind frei nutzbar.
S/MIME sign/encrypt is a pro feature, but all other PGP and S/MIME operations are free to use.
<br/>
<aname="faq13"></a>
**(13) Wie funktioniert die Suche auf dem Gerät bzw. auf den Servern?**
**(13) How does search on device/server work?**
Sie können Nachrichten nach Absender (von), Empfänger (to, cc, bcc), Betreff, Schlagwörtern oder Nachrichtentext mit Hilfe der Lupe in der Aktionsleiste eines Ordners suchen. Sie können auch von jeder App aus suchen, indem Sie *FairEmail Suche* im Popup-Menü kopieren/einfügen auswählen.
You can start searching for messages on sender (from), recipient (to, cc, bcc), subject, keywords or message text by using the magnify glass in the action bar of a folder. You can also search from any app by selecting *Search email* in the copy/paste popup menu.
Die Suche im Sammeleingang wird alle Ordner aller Konten durchsuchen, die Suche in der Ordnerliste wird nur in dem zugehörigen Konto suchen, und die Suche in einem Ordner wird nur in diesem Ordner durchsuchen.
Searching in the unified inbox will search in all folders of all accounts, searching in the folder list will search in the associated account only and searching in a folder will search in that folder only.
Nachrichten werden zuerst nur auf dem Gerät gesucht. Es gibt einen Nochmal-Suchen-Aktionsknopf am unteren Bildschirmrand, um die Suche auf dem Server fortzusetzen. Sie können auswählen, in welchem Ordner die Suche fortgesetzt werden soll.
Messages will be searched for on the device first. There will be an action button with a search again icon at the bottom to continue searching on the server. You can select in which folder to continue the search.
Das IMAP-Protokoll unterstützt nicht die gleichzeitige Suche in mehr als einem Ordner. Die Suche auf dem Server ist ein aufwendiger Vorgang, daher ist es nicht möglich, mehrere Ordner auszuwählen.
The IMAP protocol doesn't support searching in more than one folder at the same time. Searching on the server is an expensive operation, therefore it is not possible to select multiple folders.
Die Suche nach lokalen Nachrichten ist unabhängig von Groß- und Kleinschreibung und auf Teiltext bezoge. Der Nachrichtentext lokaler Nachrichten wird nicht durchsucht, wenn der Nachrichtentext noch nicht heruntergeladen wurde. Die Suche auf dem Server kann je nach Anbieter Groß- und Kleinschreibung berücksichtigen oder ignorieren, nach Teiltext oder nur nach ganzen Wörtern suchen.
Searching local messages is case insensitive and on partial text. The message text of local messages will not be searched if the message text was not downloaded yet. Searching on the server might be case sensitive or case insensitive and might be on partial text or whole words, depending on the provider.
Einige Server schaffen es nicht den Nachrichtentext zu durchsuchen, wenn es viele Nachrichten gibt. Für diesen Fall gibt es eine Option, um die Suche im Nachrichtentext zu deaktivieren.
Some servers cannot handle searching in the message text when there are a large number of messages. For this case there is an option to disable searching in the message text.
Es ist möglich, Gmail-Suchoperatoren zu verwenden, indem einem Suchbefehl die Präfix *raw:* vorangestellt wird. Wenn Sie nur ein Gmail-Konto konfiguriert haben, können Sie eine rohe Suche direkt auf dem Server starten, indem Sie vom Sammeleingang aus suchen. Wenn Sie mehrere Gmail-Konten konfiguriert haben, müssen sie zuerst zur Ordnerliste oder zum Archiv („Alle Nachrichten“) des Gmail-Kontos navigieren, in dem Sie suchen möchten. Die möglichen Suchoperatoren finden Sie [hier](https://support.google.com/mail/answer/7190). Zum Beispiel:
It is possible to use Gmail search operators by prefixing a search command with *raw:*. If you configured just one Gmail account, you can start a raw search directly on the server by searching from the unified inbox. If you configured multiple Gmail accounts, you'll first need to navigate to the folder list or the archive (all messages) folder of the Gmail account you want to search in. Please [see here](https://support.google.com/mail/answer/7190) for the possible search operators. For example:
`
raw:larger:10M`
Die Suche durch eine große Anzahl von Nachrichten auf dem Gerät ist aufgrund von zwei Einschränkungen nicht sehr schnell:
Searching through a large number of messages on the device is not very fast because of two limitations:
* [sqlite](https://www.sqlite.org/), die Datenbank-Engine von Android hat ein Datensatzgrößenlimit und verhindert, dass Nachrichten in der Datenbank gespeichert werden
* Android-Apps können nur mit limitiertem Arbeitsspeicher arbeiten, auch wenn das Gerät viel Speicher zur Verfügung hat
@ -732,16 +740,16 @@ To use an Outlook, Live or Hotmail account with two factor authentication enable
See [here](https://support.office.com/en-us/article/pop-imap-and-smtp-settings-for-outlook-com-d088b986-291d-42b8-9564-9c414e2aa040) for Microsoft's instructions.
Um ein Office-365-Konto einzurichten, lesen Sie bitte [diese F&A](#user-content-faq156).
For setting up an Office 365 account, please see [this FAQ](#user-content-faq156).
<br/>
<aname="faq15"></a>
**(15) Warum wird der Nachrichtentext weiter geladen?**
**(15) Why does the message text keep loading?**
Der Nachrichtenkopf und der Nachrichtentext werden getrennt vom Server abgerufen. The message text of larger messages is not being pre-fetched on metered connections and will be fetched on demand on expanding a message. Der Nachrichtentext wird weiter geladen, wenn keine Verbindung zum Konto besteht (siehe auch die nächste Frage) oder wenn dort andere Operationen, wie z. B. das Synchronisieren von Nachrichten, ausgeführt werden.
The message header and message body are fetched separately from the server. The message text of larger messages is not being pre-fetched on metered connections and will be fetched on demand on expanding a message. The message text will keep loading if there is no connection to the account, see also the next question, or if there other operations, like synchronizing messages, are being executed.
Sie können in der Konten- und Ordnerliste den Konten- und Ordnerstatus überprüfen (siehe Legende für die Bedeutung der Symbole). In der über das Hauptnavigationsmenü erreichbaren Liste sehen Sie ausstehende Vorgänge (siehe [diese F&A](#user-content-faq3) für die Bedeutung der Vorgänge).
You can check the account and folder list for the account and folder state (see the legend for the meaning of the icons) and the operation list accessible via the main navigation menu for pending operations (see [this FAQ](#user-content-faq3) for the meaning of the operations).
If FairEmail is holding off because of prior connectivity issues, please see [this FAQ](#user-content-faq123), you can force synchronization via the three dots menu.
@ -1463,6 +1471,7 @@ For security reasons the files with the original message texts are not accessibl
* Did you know that you can long press the people's icon to show/hide the CC/BCC fields and remember the visibility state for the next time?
* Did you know that you can insert the email addresses of an Android contact group via the three dots overflow menu?
* Did you know that if you select text and hit reply, only the selected text will be quoted?
* Did you know that you can long press the trash icons (both in the message and the bottom action bar) to permanently delete a message or conversation? (version 1.1368+)
<br/>
@ -2329,7 +2338,7 @@ Directly after the first step new messages will be notified. However, only until
Since there is no guarantee that a message text will always be fetched directly after a message header, it is not possible to guarantee that a new message notification with a preview text will always be sent to a wearable.
Sofern das für Sie ausreichend ist, können Sie die Benachrichtigungsoption *Nur Benachrichtigungen mit einer Nachrichtenvorschau an Wearables senden* aktivieren, und falls dies nicht funktioniert, versuchen Sie die Benachrichtigungsoption *Benachrichtigungen nur mit einem Vorschautext anzeigen*. Beachten Sie, dass dies auch für Wearables gilt, die keinen Vorschautext anzeigen, selbst wenn die Android Wear App angibt, dass die Benachrichtigung gesendet (überbrückt) wurde.
If you think this is good enough, you can enable the notification option *Only send notifications with a message preview to wearables* and if this does not work, you can try to enable the notification option *Show notifications with a preview text only*. Note that this applies to wearables not showing a preview text too, even when the Android Wear app says the notification has been sent (bridged).
If you want to have the full message text sent to your wearable, you can enable the notification option *Preview all text*. Note that some wearables are known to crash with this option enabled.
@ -2604,7 +2613,7 @@ There is **only support** on the latest Play store version, the latest GitHub re
F-Droid builds irregularly, which can be problematic when there is an important update. Therefore you are advised to switch to the GitHub release.
The F-Droid version is built from the same source code, but signed differently. Das bedeutet, dass alle Funktionen auch in der F-Droid-Version verfügbar sind, mit Ausnahme der Verwendung des Assistenten zur schnellen Einrichtung von Google Mail, da Google nur eine Signatur erlaubt (und zulässt). For all other email providers, OAuth access is only available in Play Store versions and Github releases, as the email providers only permit the use of OAuth for official builds.
The F-Droid version is built from the same source code, but signed differently. This means that all features are available in the F-Droid version too, except for using the Gmail quick setup wizard because Google approved (and allows) one app signature only. For all other email providers, OAuth access is only available in Play Store versions and Github releases, as the email providers only permit the use of OAuth for official builds.
Note that you'll need to uninstall the F-Droid build first before you can install a GitHub release because Android refuses to install the same app with a different signature for security reasons.
@ -388,39 +388,47 @@ Operationen werden nur bearbeitet, wenn eine Verbindung zum E-Mail-Server besteh
Kontaktieren Sie Ihren Provider, um dieses Problem zu beheben oder besorgen Sie sich ein gültiges Sicherheitszertifikat, da ungültige und dadurch unsichere Sicherheitszertifikate [Man-in-the-Middle-Angriffe](https://en.wikipedia.org/wiki/Man-in-the-middle_attack) ermöglichen. Falls Sie die Kosten hierfür scheuen, dann können Sie kostenlose Sicherheitszertifikate von [Let's Encrypt](https://letsencrypt.org) beziehen.
Alternatively, you can accept the fingerprint of the invalid server certificate as shown below the error message by ticking a checkbox. In case of an existing account (IMAP, receive) and/or identity (SMTP, send) you will need check/save it via setup step 1 and 2 to get the error message. This will "pin" the server certificate to prevent man-in-the-middle attacks. Note that you should make sure the internet connection you are using is safe if you do this.
Alternatively, you can accept the fingerprint of invalid server certificates like this:
Beachten Sie, dass ältere Android-Versionen neuere Zertifizierungsbehörden wie Let’s Encrypt möglicherweise nicht akzeptieren, wodurch Internetverbindungen als unsicher eingestuft werden können, siehe auch [hier](https://developer.android.com/training/articles/security-ssl).
1. Make sure you are using a trusted internet connection (no public Wi-Fi networks, etc)
1. Go to the setup screen via the navigation menu (swipe from the left side inwards)
1. In step 1 and 2 tap *Manage* and tap the faulty account and identity
1. Check/save the account and identity
1. Tick the checkbox below the error message and save again
*Vertrauensanker für Zertifizierungspfad nicht gefunden*
This will "pin" the server certificate to prevent man-in-the-middle attacks.
*... java.security.cert.CertPathValidatorException: Vertrauensanker für Zertifizierungspfad nicht gefunden ...* bedeutet, dass der standardmäßige Android Trust Manager die Server-Zertifikatskette nicht überprüfen konnte.
Note that older Android versions might not recognize newer certification authorities like Let’s Encrypt causing connections to be considered insecure, see also [here](https://developer.android.com/training/articles/security-ssl).
Sie sollten entweder die Serverkonfiguration korrigieren oder den unten angezeigten Fingerabdruck akzeptieren.
*Trust anchor for certification path not found*
Beachten Sie, dass dieses Problem dadurch verursacht werden kann, dass der Server nicht alle Zwischenzertifikate sendet.
*... java.security.cert.CertPathValidatorException: Trust anchor for certification path not found ...* means that the default Android trust manager was not able to verify the server certificate chain.
*Leeres Passwort*
You should either fix the server configuration or accept the fingerprint shown below the error message.
Ihr Benutzername ist möglicherweise leicht zu erraten, daher ist dies unsicher.
Note that this problem can be caused by the server not sending all intermediate certificates too.
*Klartext-Verbindung*
*Empty password*
Benutzername und Passwort, sowie alle Nachrichten, werden unverschlüsselt gesendet und empfangen, was im **höchsten Maße unsicher** ist, weil eine [Man-in-the-Middle-Attacke](https://en.wikipedia.org/wiki/Man-in-the-middle_attack) auf einer unverschlüsselten Verbindung sehr einfach ist.
Your username is likely easily guessed, so this is insecure.
Wenn Sie dennoch ein ungültiges Sicherheitszertifikat, ein leeres Passwort oder eine Klartext-Verbindung verwenden möchten, dann müssen Sie unsichere Verbindungen in den Konto- und/oder Identitätseinstellungen aktivieren. STARTTLS sollte für Klartext-Verbindungen ausgewählt werden. Wenn Sie unsichere Verbindungen aktivieren, sollten Sie sich nur über private, vertrauenswürdige Netzwerke verbinden und niemals über öffentliche Netzwerke, wie sie in Hotels, Flughäfen usw. angeboten werden.
*Plain text connection*
Your username and password and all messages will be sent and received unencrypted, which is **very insecure** because a [man-in-the-middle attack](https://en.wikipedia.org/wiki/Man-in-the-middle_attack) is very simple on an unencrypted connection.
If you still want to use an invalid security certificate, an empty password or a plain text connection you'll need to enable insecure connections in the account and/or identity settings. STARTTLS should be selected for plain text connections. If you enable insecure connections, you should connect via private, trusted networks only and never via public networks, like offered in hotels, airports, etc.
<br/>
<aname="faq5"></a>
**(5) Wie kann ich die Nachrichtenansicht anpassen?**
**(5) How can I customize the message view?**
Im Drei-Punkte-Überlaufmenü können Sie die folgenden Optionen aktivieren/deaktivieren bzw. wählen:
In the three dot overflow menu you can enable or disable or select:
* *Textgröße*: für drei verschiedene Schriftgrößen
* *kompakte Ansicht*: für eine mehr verdichtete Nachrichtendarstellung und eine kleinere Text-Schriftart
Im Anzeigebereich der Einstellungen können Sie ein- oder ausschalten:
In the display section of the settings you can enable or disable:
* *Einheitlicher Posteingang*: Schalten Sie diese Option aus, um stattdessen die Ordner separat aufzulisten, die für den einheitlichen Posteingang ausgewählt wurden
* *Nach Datum gruppieren*: Zeigt eine Kopfzeile für alle Nachrichten mit dem gleichen Datum anzeigen
@ -437,119 +445,119 @@ Im Anzeigebereich der Einstellungen können Sie ein- oder ausschalten:
* *Bilder von bekannten Kontakten anzeigen*: Wenn Sie Bilder von bekannten Kontakten automatisch anzeigen lassen möchten, dann lesen Sie bitte [diese FAQ](#user-content-faq35)
* *Konversations-Aktionsleiste*: Blendet die untere Navigationsleiste ein oder aus
Beachten Sie, dass Nachrichten nur angezeigt werden können, wenn der Nachrichtentext heruntergeladen wurde. Größere Nachrichtentexte werden standardmäßig nicht bei getakteten Datenverbindungen (Mobile Daten) heruntergeladen. Sie können dies in den Einstellungen ändern.
Note that messages can be previewed only when the message text was downloaded. Larger message texts are not downloaded by default on metered (generally mobile) networks. You can change this in the settings.
Wenn die Liste der Adressaten sehr lang ist, dann können Sie den Adressbereich mit dem *Weniger* Symbol oben im Adressbereich einklappen.
If the list of addresses is long, you can collapse the addresses section with the *less* icon at the top of the addresses section.
Einige Benutzer fragten:
Some people ask:
* wie man den Betreff fett anzeigen lassen kann, obwohl eine fette Schrift bereits verwendet wird, um ungelesene Nachrichten hervorzuheben
* wie man die Adresse oder den Betreff unabhängig von der Textgröße-Option in den Einstellungen größer/kleiner anzeigen lassen kann
* um den Stern nach links zu bewegen, aber es ist viel einfacher, den Stern auf der rechten Seite zu bedienen
Leider ist es unmöglich, alle glücklich zu machen und viele Einstellungen wären nicht nur verwirrend, sondern auch nie ausreichend.
Unfortunately, it is impossible to make everybody happy and adding lots of settings would not only be confusing, but also never be sufficient.
<br/>
<aname="faq6"></a>
**(6) Wie kann ich mich bei Gmail / G Suite anmelden?**
**(6) How can I login to Gmail / G suite?**
Sie können den Schnelleinrichtungsassistenten verwenden, um einfach ein Gmail-Konto und eine Gmail-Identität einzurichten.
You can use the quick setup wizard to easily setup a Gmail account and identity.
Wenn Sie kein Gmail-Konto auf dem Gerät verwenden möchten, können Sie entweder den Zugriff für „weniger sichere Apps“ aktivieren und Ihr Kontopasswort verwenden (nicht empfohlen) oder die Zwei-Faktor-Authentifizierung aktivieren und ein appspezifisches Passwort verwenden. Um ein Passwort zu verwenden, müssen Sie Konto und Identität über die Einrichtungsschritte 1 und 2 statt über den Schnelleinrichtungs-Assistenten einrichten.
If you don't want to use an on-device Gmail account, you can either enable access for "less secure apps" and use your account password (not advised) or enable two factor authentication and use an app specific password. To use a password you'll need to setup an account and identity via setup step 1 and 2 instead of via the quick setup wizard.
Bitte lesen Sie in [dieser FAQ](#user-content-faq111), warum nur On-Device-Konten verwendet werden können.
Please see [this FAQ](#user-content-faq111) on why only on-device accounts can be used.
Beachten Sie, dass bei Aktivierung der Zwei-Faktor-Authentifizierung ein app-spezifisches Passwort erforderlich ist.
Note that an app specific password is required when two factor authentication is enabled.
<br/>
*Appspezifisches Passwort*
*App specific password*
Wie ein appspezifisches Passwort erstellt wird, sehen Sie [hier](https://support.google.com/accounts/answer/185833).
See [here](https://support.google.com/accounts/answer/185833) about how to generate an app specific password.
<br/>
*„Weniger sichere Apps“ aktivieren*
*Enable "Less secure apps"*
**Wichtig**: Die Verwendung dieser Methode wird nicht empfohlen, da sie weniger zuverlässig ist.
**Important**: using this method is not recommended because it is less reliable.
**Wichtig**: Gsuite-Konten, die mit einem Benutzernamen/Passwort autorisiert sind, funktionieren [in naher Zukunft](https://gsuiteupdates.googleblog.com/2019/12/less-secure-apps-oauth-google-username-password-incorrect.html) nicht mehr.
**Important**: Gsuite accounts authorized with a username/password will stop working [in the near future](https://gsuiteupdates.googleblog.com/2019/12/less-secure-apps-oauth-google-username-password-incorrect.html).
Sehen Sie [hier](https://support.google.com/accounts/answer/6010255) wie man „weniger sichere Apps“ aktiviert oder gehen Sie [direkt zu der Einstellung](https://www.google.com/settings/security/lesssecureapps).
See [here](https://support.google.com/accounts/answer/6010255) about how to enable "less secure apps" or go [directy to the setting](https://www.google.com/settings/security/lesssecureapps).
Wenn Sie mehrere Gmail-Konten verwenden, stellen Sie sicher, dass Sie die Einstellung „weniger sichere Apps“ des/der richtigen Accounts ändern.
If you use multiple Gmail accounts, make sure you change the "less secure apps" setting of the right account(s).
Seien Sie sich bewusst, dass Sie den „weniger sicheren Apps“ Bildschirm über den Zurückpfeil verlassen müssen, um die Einstellung anzuwenden.
Be aware that you need to leave the "less secure apps" settings screen by using the back arrow to apply the setting.
Wenn Sie diese Methode verwenden, sollten Sie ein [starkes Passwort](https://en.wikipedia.org/wiki/Password_strength) für Ihr Gmail-Konto verwendet, was aber grundsätzlich immer eine gute Idee ist. Beachten Sie, dass die Verwendung des [Standard](https://tools.ietf.org/html/rfc3501)-IMAP-Protokolls an sich nicht weniger sicher ist.
If you use this method, you should use a [strong password](https://en.wikipedia.org/wiki/Password_strength) for your Gmail account, which is a good idea anyway. Note that using the [standard](https://tools.ietf.org/html/rfc3501) IMAP protocol in itself is not less secure.
Wenn „weniger sichere Anwendungen” nicht aktiviert ist, erhalten Sie die Fehlermeldung *Authentifizierung fehlgeschlagen - ungültige Anmeldedaten* für Konten (IMAP) und *Benutzername und Passwort nicht akzeptiert* für Identitäten (SMTP).
When "less secure apps" is not enabled, you'll get the error *Authentication failed - invalid credentials* for accounts (IMAP) and *Username and Password not accepted* for identities (SMTP).
<br/>
*Allgemein*
*General*
Möglicherweise erhalten Sie die Meldung „*Bitte melden Sie sich über Ihren Webbrowser an*”. Dies geschieht, wenn Google das Netzwerk, das Sie mit dem Internet verbindet (dies könnte ein VPN sein), als unsicher einstuft. Dies kann verhindert werden, indem Sie den Assistenten zur schnellen Einrichtung von Google Mail oder ein app-spezifisches Passwort verwenden.
You might get the alert "*Please log in via your web browser*". This happens when Google considers the network that connects you to the internet (this could be a VPN) to be unsafe. This can be prevented by using the Gmail quick setup wizard or an app specific password.
Siehe [hier](https://support.google.com/mail/answer/7126229) für eine Anleitung von Google und [hier](https://support.google.com/mail/accounts/answer/78754) für die Problemlösung.
See [here](https://support.google.com/mail/answer/7126229) for Google's instructions and [here](https://support.google.com/mail/accounts/answer/78754) for troubleshooting.
<br/>
<aname="faq7"></a>
**(7) Warum werden gesendete Nachrichten nicht (direkt) im gesendeten Ordner angezeigt?**
**(7) Why are sent messages not appearing (directly) in the sent folder?**
Gesendete Nachrichten werden normalerweise aus dem Postausgang in den Ordner „Gesendet” verschoben, sobald Ihr Provider gesendete Nachrichten dem Ordner „Gesendet” hinzufügt. Dazu muss in den Kontoeinstellungen einen Ordner "Gesendet" ausgewählt werden, und dieser Ordner zum Synchronisieren festgelegt werden.
Sent messages are normally moved from the outbox to the sent folder as soon as your provider adds sent messages to the sent folder. This requires a sent folder to be selected in the account settings and the sent folder to be set to synchronizing.
Einige Provider verfolgen die gesendeten Nachrichten nicht oder der verwendete SMTP-Server ist möglicherweise nicht mit dem Provider verbunden. In diesen Fällen fügt FairEmail gesendete Nachrichten automatisch bei der Synchronisation des Ordners „Gesendet” dem Ordner „Gesendet” hinzu. Beachten Sie, dass dies zu zusätzlichem Internetverkehr führt.
Some providers do not keep track of sent messages or the used SMTP server might not be related to the provider. In these cases FairEmail, will automatically add sent messages to the sent folder on synchronizing the sent folder, which will happen after a message have been sent. Note that this will result in extra internet traffic.
~~Wenn dies nicht geschieht, verfolgt Ihr Provider möglicherweise nicht die gesendeten Nachrichten oder Sie verwenden einen SMTP-Server, der dem Provider nicht zugeordnet ist. ~ ~~In diesen Fällen können Sie die erweiterte Identitätseinstellung *Speichere gesendete Nachrichten* aktivieren, damit FairEmail gesendete Nachrichten direkt nach dem Senden einer Nachricht in den gesendeten Ordner einfügen kann. ~ ~~Beachten Sie, dass das Aktivieren dieser Einstellung zu doppelten Nachrichten führen kann, wenn Ihr Provider auch gesendete Nachrichten in den gesendeten Ordner einfügt. ~ ~~Beachten Sie auch, dass das Aktivieren dieser Einstellung zusätzliche Datenauslastung zur Folge hat, insbesondere wenn Nachrichten mit großen Anhängen gesendet werden.~~
~~If this doesn't happen, your provider might not keep track of sent messages or you might be using an SMTP server not related to the provider.~~ ~~In these cases you can enable the advanced identity setting *Store sent messages* to let FairEmail add sent messages to the sent folder right after sending a message.~~~~Note that enabling this setting might result in duplicate messages if your provider adds sent messages to the sent folder too.~~ ~~Also beware that enabling this setting will result in extra data usage, especially when when sending messages with large attachments.~~
~~If sent messages in the outbox are not found in the sent folder on a full synchronize, they will be moved from the outbox to the sent folder too.~~ ~~A full synchronize happens when reconnecting to the server or when synchronizing periodically or manually.~~ ~~You'll likely want to enable the advanced setting *Store sent messages* instead to move messages to the sent folder sooner.~~
<br/>
<aname="faq8"></a>
**(8) Kann ich ein Microsoft Exchange-Konto verwenden?**
**(8) Can I use a Microsoft Exchange account?**
Sie können ein Microsoft Exchange-Konto verwenden, wenn es über IMAP zugänglich ist, was meistens der Fall ist. Sehen Sie [hier](https://support.office.com/en-us/article/what-is-a-microsoft-exchange-account-47f000aa-c2bf-48ac-9bc2-83e5c6036793) für weitere Informationen.
You can use a Microsoft Exchange account if it is accessible via IMAP, which is mostly the case. See [here](https://support.office.com/en-us/article/what-is-a-microsoft-exchange-account-47f000aa-c2bf-48ac-9bc2-83e5c6036793) for more information.
[Hier](https://support.office.com/en-us/article/pop-imap-and-smtp-settings-for-outlook-com-d088b986-291d-42b8-9564-9c414e2aa040) finden Sie Microsofts Dokumentation zur Konfiguration eines E-Mail-Clients. Es gibt auch einen Abschnitt über häufige Verbindungsfehler und -lösungen.
Please see [here](https://support.office.com/en-us/article/pop-imap-and-smtp-settings-for-outlook-com-d088b986-291d-42b8-9564-9c414e2aa040) for the Microsoft documentation about configuring an email client. There is also a section about common connection errors and solutions.
Einige ältere Exchange-Server-Versionen haben einen Fehler, der eine leere Nachricht und beschädigte Anhänge verursacht. Eine Problemumgehung finden Sie in [dieser FAQ](#user-content-faq110).
Some older Exchange server versions have a bug causing empty message and corrupt attachments. Please see [this FAQ](#user-content-faq110) for a workaround.
Siehe [diese FAQ](#user-content-faq133) zur ActiveSync Unterstützung.
Please see [this FAQ](#user-content-faq133) about ActiveSync support.
Siehe [diese FAQ](#user-content-faq111) zu OAuth Support.
Please see [this FAQ](#user-content-faq111) about OAuth support.
<br/>
<aname="faq9"></a>
**(9) Was sind Identitäten / wie füge ich einen Alias hinzu?**
**(9) What are identities / how do I add an alias?**
Identitäten stellen E-Mail-Adressen dar, *von* denen Sie über einen E-Mail (SMTP) Server senden.
Identities represent email addresses you are sending *from* via an email (SMTP) server.
Einige Anbieter gestatten die Verwendung mehrerer Aliasse. You can configure these by setting the email address field of an additional identity to the alias address and setting the user name field to your main email address.
Some providers allow you to have multiple aliases. You can configure these by setting the email address field of an additional identity to the alias address and setting the user name field to your main email address.
Beachten Sie, dass Sie eine Identität durch langes Drücken kopieren können.
Note that you can copy an identity by long pressing it.
Alternativ können Sie in den erweiterten Einstellungen einer existierenden Identität das *Bearbeiten der Absenderadresse erlauben*, um den Benutzernamen beim Erstellen einer Nachricht zu bearbeiten, wenn Ihr Provider dies zulässt.
Alternatively, you can enable *Allow editing sender address* in the advanced settings of an existing identity to edit the username when composing a new message, if your provider allows this.
FairEmail aktualisiert automatisch die Passwörter der jeweiligen Identitäten, wenn Sie das Passwort des zugehörigen Kontos oder einer damit verbundenen Identität aktualisieren.
FairEmail will automatically update the passwords of related identities when you update the password of the associated account or a related identity.
Bitte diese [F&A](#user-content-faq33) zum Bearbeiten des Benutzernamens von E-Mail-Adressen beachten.
See [this FAQ](#user-content-faq33) on editing the username of email addresses.
<br/>
<aname="faq10"></a>
**~~(10) What does 'UIDPLUS not supported' mean?~~**
~~The error message *UIDPLUS not supported* means that your email provider does not provide the IMAP [UIDPLUS extension](https://tools.ietf.org/html/rfc4315). This IMAP extension is required to implement two way synchronization, which is not an optional feature. Wenn Ihr Anbieter diese Erweiterung nicht aktivieren kann, können Sie FairEmail nicht für diesen Anbieter verwenden.~~
~~The error message *UIDPLUS not supported* means that your email provider does not provide the IMAP [UIDPLUS extension](https://tools.ietf.org/html/rfc4315). This IMAP extension is required to implement two way synchronization, which is not an optional feature. So, unless your provider can enable this extension, you cannot use FairEmail for this provider.~~
<br/>
<aname="faq11"></a>
**~~(11) Warum wird POP nicht unterstützt?~~**
**~~(11) Why is POP not supported?~~**
~~Besides that any decent email provider supports [IMAP](https://en.wikipedia.org/wiki/Internet_Message_Access_Protocol) these days,~~ ~~using [POP](https://en.wikipedia.org/wiki/Post_Office_Protocol) will result in unnecessary extra battery usage and delayed new message notifications.~~ ~~Moreover, POP is unsuitable for two way synchronization and more often than not people read and write messages on different devices these days.~~
@ -566,7 +574,7 @@ Bitte diese [F&A](#user-content-faq33) zum Bearbeiten des Benutzernamens von E-M
<aname="faq12"></a>
**(12) How does encryption/decryption work?**
*Allgemein*
*General*
Please [see here](https://en.wikipedia.org/wiki/Public-key_cryptography) about how public/private key encryption works.
@ -618,7 +626,7 @@ Signed-only or encrypted-only messages are not a good idea, please see here abou
Signed-only messages are supported, encrypted-only messages are not supported.
Häufige Fehler:
Common errors:
* *Kein Schlüssel*: kein PGP-Schlüssel für eine der aufgeführten E-Mail-Adressen verfügbar
* *Verschlüsselungsschlüssel fehlt*: es wurde wahrscheinlich in FairEmail ein Schlüssel ausgewählt, der in der OpenKeychain-App nicht mehr vorhanden ist. Das Zurücksetzen des Schlüssels (siehe oben) wird dieses Problem eventuell beheben.
@ -631,26 +639,26 @@ Private keys are stored by Android and can be imported via the Android advanced
Note that certificates can contains multiple keys for multiple purposes, for example for authentication, encryption and signing. Android only imports the first key, so to import all the keys, the certificate must first be split. This is not very trivial and you are advised to ask the certificate supplier for support.
Beachten Sie, dass S/MIME-Signierung mit anderen Algorithmen als RSA zwar unterstützt wird, aber andere E-Mail-Clients dies möglicherweise nicht unterstützen. S/MIME-Verschlüsselung ist nur mit symmetrischen Algorithmen möglich, das heißt in der Praxis RSA.
Note that S/MIMEsigning with other algorithms than RSA is supported, but be aware that other email clients might not support this. S/MIME encryption is possible with symmetric algorithms only, which means in practice using RSA.
Die Standard-Verschlüsselungsmethode ist PGP, aber die zuletzt verwendete Verschlüsselungsmethode wird fürs nächsten Mal für die ausgewählte Identität gespeichert. Möglicherweise müssen Sie die Sendeoptionen im Drei-Punkte-Menü erneut aktivieren, um die Verschlüsselungsmethode wählen zu können.
The default encryption method is PGP, but the last used encryption method will be remembered for the selected identity for the next time. You might need to enable the send options in the three dots menu again to be able to select the encryption method.
Um verschiedene private Schlüssel für die gleiche E-Mail-Adresse zu erlauben lässt FairEmail Sie immer einen Schlüssel auswählen, wenn es mehrere Identitäten mit der gleichen E-Mail-Adresse für denselben Account gibt.
To allow different private keys for the same email address, FairEmail will always let you select a key when there are multiple identities with the same email address for the same account.
Öffentliche Schlüssel werden bei FairEmail gespeichert und können bei der erstmaligen Überprüfung einer Signatur oder über die Privatsphäre-Einstellungen (PEM oder DER Format) importiert werden.
Public keys are stored by FairEmail and can be imported when verifying a signature for the first time or via the privacy settings (PEM or DER format).
FairEmail überprüft sowohl die Unterschrift als auch die gesamte Zertifikatskette.
FairEmail verifies both the signature and the complete certificate chain.
Häufige Fehler:
Common errors:
* *No certificate found matching targetContraints*: this likely means you are using an old version of FairEmail
* *unable to find valid certification path to requested target*: basically this means one or more intermediate or root certificates were not found
* *Privater Schlüssel stimmt mit keinem Verschlüsselungsschlüssel überein*: Der ausgewählte Schlüssel kann nicht verwendet werden, um die Nachricht zu entschlüsseln, wahrscheinlich weil es der falsche Schlüssel ist
* *Kein privater Schlüssel*: Es wurde kein Zertifikat ausgewählt oder kein Zertifikat im Android-Schlüsselgeschäft verfügbar
Falls die Zertifikatskette falsch ist, können Sie auf den kleinen Info-Button klicken, um alle Zertifikate anzuzeigen. After the certificate details the issuer or "selfSign" is shown. Ein Zertifikat ist selbstsigniert, wenn der Betreff und der Emittent identisch sind. Certificates from a certificate authority (CA) are marked with "[keyCertSign](https://tools.ietf.org/html/rfc5280#section-4.2.1.3)". Zertifikate im Android-Schlüsselspeicher werden mit »Android« gekennzeichnet.
In case the certificate chain is incorrect, you can tap on the little info button to show the all certificates. After the certificate details the issuer or "selfSign" is shown. A certificate is self signed when the subject and the issuer are the same. Certificates from a certificate authority (CA) are marked with "[keyCertSign](https://tools.ietf.org/html/rfc5280#section-4.2.1.3)". Certificates found in the Android key store are marked with "Android".
Eine gültige Kette sieht so aus:
A valid chain looks like this:
```
Your certificate > zero or more intermediate certificates > CA (root) certificate marked with "Android"
@ -658,45 +666,45 @@ Your certificate > zero or more intermediate certificates > CA (root) certificat
Note that a certificate chain will always be invalid when no anchor certificate can be found in the Android key store, which is fundamental to S/MIME certificate validation.
Sehen Sie [hier](https://support.google.com/pixelphone/answer/2844832?hl=en), wie Sie Zertifikate in den Android-Schlüsselspeicher importieren können.
Please see [here](https://support.google.com/pixelphone/answer/2844832?hl=en) how you can import certificates into the Android key store.
Die Verwendung von abgelaufenen Schlüsseln, inlineverschlüsselten oder -signierten Nachrichten und Hardwaresicherheitstoken wird nicht unterstützt.
The use of expired keys, inline encrypted/signed messages and hardware security tokens is not supported.
Wenn Sie ein kostenloses (Test) S/MIME Zertifikat suchen, finden Sie die Optionen [hier](http://kb.mozillazine.org/Getting_an_SMIME_certificate). Achten sie darauf, [das](https://davidroessli.com/logs/2019/09/free-smime-certificates-in-2019/#update20191219) zuerst zu lesen, wenn sie ein solches Zertifikat erhalten wollen. Wenn Sie ein günstiges S/MIME-Zertifikat suchen, habe ich mit [Certum](https://www.certum.eu/en/smime-certificates/) gute Erfahrungen gemacht.
If you are looking for a free (test) S/MIME certificate, see [here](http://kb.mozillazine.org/Getting_an_SMIME_certificate) for the options. Please be sure to [read this first](https://davidroessli.com/logs/2019/09/free-smime-certificates-in-2019/#update20191219) if you want to request an S/MIME Actalis certificate. If you are looking for a cheap S/MIME certificate, I had a good experience with [Certum](https://www.certum.eu/en/smime-certificates/).
Wie man einen öffentlichen Schlüssel aus einem S/MIME-Zertifikat extrahiert:
How to extract a public key from a S/MIME certificate:
Sie können S/MIME Signaturen dekodieren usw., siehe [hier](https://lapo.it/asn1js/).
You can decode S/MIME signatures, etc, [here](https://lapo.it/asn1js/).
S/MIME signieren/verschlüsseln ist ein Pro-Funktion, aber alle anderen PGP- und S/MIME-Operationen sind frei nutzbar.
S/MIME sign/encrypt is a pro feature, but all other PGP and S/MIME operations are free to use.
<br/>
<aname="faq13"></a>
**(13) Wie funktioniert die Suche auf dem Gerät bzw. auf den Servern?**
**(13) How does search on device/server work?**
Sie können Nachrichten nach Absender (von), Empfänger (to, cc, bcc), Betreff, Schlagwörtern oder Nachrichtentext mit Hilfe der Lupe in der Aktionsleiste eines Ordners suchen. Sie können auch von jeder App aus suchen, indem Sie *FairEmail Suche* im Popup-Menü kopieren/einfügen auswählen.
You can start searching for messages on sender (from), recipient (to, cc, bcc), subject, keywords or message text by using the magnify glass in the action bar of a folder. You can also search from any app by selecting *Search email* in the copy/paste popup menu.
Die Suche im Sammeleingang wird alle Ordner aller Konten durchsuchen, die Suche in der Ordnerliste wird nur in dem zugehörigen Konto suchen, und die Suche in einem Ordner wird nur in diesem Ordner durchsuchen.
Searching in the unified inbox will search in all folders of all accounts, searching in the folder list will search in the associated account only and searching in a folder will search in that folder only.
Nachrichten werden zuerst nur auf dem Gerät gesucht. Es gibt einen Nochmal-Suchen-Aktionsknopf am unteren Bildschirmrand, um die Suche auf dem Server fortzusetzen. Sie können auswählen, in welchem Ordner die Suche fortgesetzt werden soll.
Messages will be searched for on the device first. There will be an action button with a search again icon at the bottom to continue searching on the server. You can select in which folder to continue the search.
Das IMAP-Protokoll unterstützt nicht die gleichzeitige Suche in mehr als einem Ordner. Die Suche auf dem Server ist ein aufwendiger Vorgang, daher ist es nicht möglich, mehrere Ordner auszuwählen.
The IMAP protocol doesn't support searching in more than one folder at the same time. Searching on the server is an expensive operation, therefore it is not possible to select multiple folders.
Die Suche nach lokalen Nachrichten ist unabhängig von Groß- und Kleinschreibung und auf Teiltext bezoge. Der Nachrichtentext lokaler Nachrichten wird nicht durchsucht, wenn der Nachrichtentext noch nicht heruntergeladen wurde. Die Suche auf dem Server kann je nach Anbieter Groß- und Kleinschreibung berücksichtigen oder ignorieren, nach Teiltext oder nur nach ganzen Wörtern suchen.
Searching local messages is case insensitive and on partial text. The message text of local messages will not be searched if the message text was not downloaded yet. Searching on the server might be case sensitive or case insensitive and might be on partial text or whole words, depending on the provider.
Einige Server schaffen es nicht den Nachrichtentext zu durchsuchen, wenn es viele Nachrichten gibt. Für diesen Fall gibt es eine Option, um die Suche im Nachrichtentext zu deaktivieren.
Some servers cannot handle searching in the message text when there are a large number of messages. For this case there is an option to disable searching in the message text.
Es ist möglich, Gmail-Suchoperatoren zu verwenden, indem einem Suchbefehl die Präfix *raw:* vorangestellt wird. Wenn Sie nur ein Gmail-Konto konfiguriert haben, können Sie eine rohe Suche direkt auf dem Server starten, indem Sie vom Sammeleingang aus suchen. Wenn Sie mehrere Gmail-Konten konfiguriert haben, müssen sie zuerst zur Ordnerliste oder zum Archiv („Alle Nachrichten“) des Gmail-Kontos navigieren, in dem Sie suchen möchten. Die möglichen Suchoperatoren finden Sie [hier](https://support.google.com/mail/answer/7190). Zum Beispiel:
It is possible to use Gmail search operators by prefixing a search command with *raw:*. If you configured just one Gmail account, you can start a raw search directly on the server by searching from the unified inbox. If you configured multiple Gmail accounts, you'll first need to navigate to the folder list or the archive (all messages) folder of the Gmail account you want to search in. Please [see here](https://support.google.com/mail/answer/7190) for the possible search operators. For example:
`
raw:larger:10M`
Die Suche durch eine große Anzahl von Nachrichten auf dem Gerät ist aufgrund von zwei Einschränkungen nicht sehr schnell:
Searching through a large number of messages on the device is not very fast because of two limitations:
* [sqlite](https://www.sqlite.org/), die Datenbank-Engine von Android hat ein Datensatzgrößenlimit und verhindert, dass Nachrichten in der Datenbank gespeichert werden
* Android-Apps können nur mit limitiertem Arbeitsspeicher arbeiten, auch wenn das Gerät viel Speicher zur Verfügung hat
@ -732,16 +740,16 @@ To use an Outlook, Live or Hotmail account with two factor authentication enable
See [here](https://support.office.com/en-us/article/pop-imap-and-smtp-settings-for-outlook-com-d088b986-291d-42b8-9564-9c414e2aa040) for Microsoft's instructions.
Um ein Office-365-Konto einzurichten, lesen Sie bitte [diese F&A](#user-content-faq156).
For setting up an Office 365 account, please see [this FAQ](#user-content-faq156).
<br/>
<aname="faq15"></a>
**(15) Warum wird der Nachrichtentext weiter geladen?**
**(15) Why does the message text keep loading?**
Der Nachrichtenkopf und der Nachrichtentext werden getrennt vom Server abgerufen. The message text of larger messages is not being pre-fetched on metered connections and will be fetched on demand on expanding a message. Der Nachrichtentext wird weiter geladen, wenn keine Verbindung zum Konto besteht (siehe auch die nächste Frage) oder wenn dort andere Operationen, wie z. B. das Synchronisieren von Nachrichten, ausgeführt werden.
The message header and message body are fetched separately from the server. The message text of larger messages is not being pre-fetched on metered connections and will be fetched on demand on expanding a message. The message text will keep loading if there is no connection to the account, see also the next question, or if there other operations, like synchronizing messages, are being executed.
Sie können in der Konten- und Ordnerliste den Konten- und Ordnerstatus überprüfen (siehe Legende für die Bedeutung der Symbole). In der über das Hauptnavigationsmenü erreichbaren Liste sehen Sie ausstehende Vorgänge (siehe [diese F&A](#user-content-faq3) für die Bedeutung der Vorgänge).
You can check the account and folder list for the account and folder state (see the legend for the meaning of the icons) and the operation list accessible via the main navigation menu for pending operations (see [this FAQ](#user-content-faq3) for the meaning of the operations).
If FairEmail is holding off because of prior connectivity issues, please see [this FAQ](#user-content-faq123), you can force synchronization via the three dots menu.
@ -1463,6 +1471,7 @@ For security reasons the files with the original message texts are not accessibl
* Did you know that you can long press the people's icon to show/hide the CC/BCC fields and remember the visibility state for the next time?
* Did you know that you can insert the email addresses of an Android contact group via the three dots overflow menu?
* Did you know that if you select text and hit reply, only the selected text will be quoted?
* Did you know that you can long press the trash icons (both in the message and the bottom action bar) to permanently delete a message or conversation? (version 1.1368+)
<br/>
@ -2329,7 +2338,7 @@ Directly after the first step new messages will be notified. However, only until
Since there is no guarantee that a message text will always be fetched directly after a message header, it is not possible to guarantee that a new message notification with a preview text will always be sent to a wearable.
Sofern das für Sie ausreichend ist, können Sie die Benachrichtigungsoption *Nur Benachrichtigungen mit einer Nachrichtenvorschau an Wearables senden* aktivieren, und falls dies nicht funktioniert, versuchen Sie die Benachrichtigungsoption *Benachrichtigungen nur mit einem Vorschautext anzeigen*. Beachten Sie, dass dies auch für Wearables gilt, die keinen Vorschautext anzeigen, selbst wenn die Android Wear App angibt, dass die Benachrichtigung gesendet (überbrückt) wurde.
If you think this is good enough, you can enable the notification option *Only send notifications with a message preview to wearables* and if this does not work, you can try to enable the notification option *Show notifications with a preview text only*. Note that this applies to wearables not showing a preview text too, even when the Android Wear app says the notification has been sent (bridged).
If you want to have the full message text sent to your wearable, you can enable the notification option *Preview all text*. Note that some wearables are known to crash with this option enabled.
@ -2604,7 +2613,7 @@ There is **only support** on the latest Play store version, the latest GitHub re
F-Droid builds irregularly, which can be problematic when there is an important update. Therefore you are advised to switch to the GitHub release.
The F-Droid version is built from the same source code, but signed differently. Das bedeutet, dass alle Funktionen auch in der F-Droid-Version verfügbar sind, mit Ausnahme der Verwendung des Assistenten zur schnellen Einrichtung von Google Mail, da Google nur eine Signatur erlaubt (und zulässt). For all other email providers, OAuth access is only available in Play Store versions and Github releases, as the email providers only permit the use of OAuth for official builds.
The F-Droid version is built from the same source code, but signed differently. This means that all features are available in the F-Droid version too, except for using the Gmail quick setup wizard because Google approved (and allows) one app signature only. For all other email providers, OAuth access is only available in Play Store versions and Github releases, as the email providers only permit the use of OAuth for official builds.
Note that you'll need to uninstall the F-Droid build first before you can install a GitHub release because Android refuses to install the same app with a different signature for security reasons.
@ -388,39 +388,47 @@ Operationen werden nur bearbeitet, wenn eine Verbindung zum E-Mail-Server besteh
Kontaktieren Sie Ihren Provider, um dieses Problem zu beheben oder besorgen Sie sich ein gültiges Sicherheitszertifikat, da ungültige und dadurch unsichere Sicherheitszertifikate [Man-in-the-Middle-Angriffe](https://en.wikipedia.org/wiki/Man-in-the-middle_attack) ermöglichen. Falls Sie die Kosten hierfür scheuen, dann können Sie kostenlose Sicherheitszertifikate von [Let's Encrypt](https://letsencrypt.org) beziehen.
Alternatively, you can accept the fingerprint of the invalid server certificate as shown below the error message by ticking a checkbox. In case of an existing account (IMAP, receive) and/or identity (SMTP, send) you will need check/save it via setup step 1 and 2 to get the error message. This will "pin" the server certificate to prevent man-in-the-middle attacks. Note that you should make sure the internet connection you are using is safe if you do this.
Alternatively, you can accept the fingerprint of invalid server certificates like this:
Beachten Sie, dass ältere Android-Versionen neuere Zertifizierungsbehörden wie Let’s Encrypt möglicherweise nicht akzeptieren, wodurch Internetverbindungen als unsicher eingestuft werden können, siehe auch [hier](https://developer.android.com/training/articles/security-ssl).
1. Make sure you are using a trusted internet connection (no public Wi-Fi networks, etc)
1. Go to the setup screen via the navigation menu (swipe from the left side inwards)
1. In step 1 and 2 tap *Manage* and tap the faulty account and identity
1. Check/save the account and identity
1. Tick the checkbox below the error message and save again
*Vertrauensanker für Zertifizierungspfad nicht gefunden*
This will "pin" the server certificate to prevent man-in-the-middle attacks.
*... java.security.cert.CertPathValidatorException: Vertrauensanker für Zertifizierungspfad nicht gefunden ...* bedeutet, dass der standardmäßige Android Trust Manager die Server-Zertifikatskette nicht überprüfen konnte.
Note that older Android versions might not recognize newer certification authorities like Let’s Encrypt causing connections to be considered insecure, see also [here](https://developer.android.com/training/articles/security-ssl).
Sie sollten entweder die Serverkonfiguration korrigieren oder den unten angezeigten Fingerabdruck akzeptieren.
*Trust anchor for certification path not found*
Beachten Sie, dass dieses Problem dadurch verursacht werden kann, dass der Server nicht alle Zwischenzertifikate sendet.
*... java.security.cert.CertPathValidatorException: Trust anchor for certification path not found ...* means that the default Android trust manager was not able to verify the server certificate chain.
*Leeres Passwort*
You should either fix the server configuration or accept the fingerprint shown below the error message.
Ihr Benutzername ist möglicherweise leicht zu erraten, daher ist dies unsicher.
Note that this problem can be caused by the server not sending all intermediate certificates too.
*Klartext-Verbindung*
*Empty password*
Benutzername und Passwort, sowie alle Nachrichten, werden unverschlüsselt gesendet und empfangen, was im **höchsten Maße unsicher** ist, weil eine [Man-in-the-Middle-Attacke](https://en.wikipedia.org/wiki/Man-in-the-middle_attack) auf einer unverschlüsselten Verbindung sehr einfach ist.
Your username is likely easily guessed, so this is insecure.
Wenn Sie dennoch ein ungültiges Sicherheitszertifikat, ein leeres Passwort oder eine Klartext-Verbindung verwenden möchten, dann müssen Sie unsichere Verbindungen in den Konto- und/oder Identitätseinstellungen aktivieren. STARTTLS sollte für Klartext-Verbindungen ausgewählt werden. Wenn Sie unsichere Verbindungen aktivieren, sollten Sie sich nur über private, vertrauenswürdige Netzwerke verbinden und niemals über öffentliche Netzwerke, wie sie in Hotels, Flughäfen usw. angeboten werden.
*Plain text connection*
Your username and password and all messages will be sent and received unencrypted, which is **very insecure** because a [man-in-the-middle attack](https://en.wikipedia.org/wiki/Man-in-the-middle_attack) is very simple on an unencrypted connection.
If you still want to use an invalid security certificate, an empty password or a plain text connection you'll need to enable insecure connections in the account and/or identity settings. STARTTLS should be selected for plain text connections. If you enable insecure connections, you should connect via private, trusted networks only and never via public networks, like offered in hotels, airports, etc.
<br/>
<aname="faq5"></a>
**(5) Wie kann ich die Nachrichtenansicht anpassen?**
**(5) How can I customize the message view?**
Im Drei-Punkte-Überlaufmenü können Sie die folgenden Optionen aktivieren/deaktivieren bzw. wählen:
In the three dot overflow menu you can enable or disable or select:
* *Textgröße*: für drei verschiedene Schriftgrößen
* *kompakte Ansicht*: für eine mehr verdichtete Nachrichtendarstellung und eine kleinere Text-Schriftart
Im Anzeigebereich der Einstellungen können Sie ein- oder ausschalten:
In the display section of the settings you can enable or disable:
* *Einheitlicher Posteingang*: Schalten Sie diese Option aus, um stattdessen die Ordner separat aufzulisten, die für den einheitlichen Posteingang ausgewählt wurden
* *Nach Datum gruppieren*: Zeigt eine Kopfzeile für alle Nachrichten mit dem gleichen Datum anzeigen
@ -437,119 +445,119 @@ Im Anzeigebereich der Einstellungen können Sie ein- oder ausschalten:
* *Bilder von bekannten Kontakten anzeigen*: Wenn Sie Bilder von bekannten Kontakten automatisch anzeigen lassen möchten, dann lesen Sie bitte [diese FAQ](#user-content-faq35)
* *Konversations-Aktionsleiste*: Blendet die untere Navigationsleiste ein oder aus
Beachten Sie, dass Nachrichten nur angezeigt werden können, wenn der Nachrichtentext heruntergeladen wurde. Größere Nachrichtentexte werden standardmäßig nicht bei getakteten Datenverbindungen (Mobile Daten) heruntergeladen. Sie können dies in den Einstellungen ändern.
Note that messages can be previewed only when the message text was downloaded. Larger message texts are not downloaded by default on metered (generally mobile) networks. You can change this in the settings.
Wenn die Liste der Adressaten sehr lang ist, dann können Sie den Adressbereich mit dem *Weniger* Symbol oben im Adressbereich einklappen.
If the list of addresses is long, you can collapse the addresses section with the *less* icon at the top of the addresses section.
Einige Benutzer fragten:
Some people ask:
* wie man den Betreff fett anzeigen lassen kann, obwohl eine fette Schrift bereits verwendet wird, um ungelesene Nachrichten hervorzuheben
* wie man die Adresse oder den Betreff unabhängig von der Textgröße-Option in den Einstellungen größer/kleiner anzeigen lassen kann
* um den Stern nach links zu bewegen, aber es ist viel einfacher, den Stern auf der rechten Seite zu bedienen
Leider ist es unmöglich, alle glücklich zu machen und viele Einstellungen wären nicht nur verwirrend, sondern auch nie ausreichend.
Unfortunately, it is impossible to make everybody happy and adding lots of settings would not only be confusing, but also never be sufficient.
<br/>
<aname="faq6"></a>
**(6) Wie kann ich mich bei Gmail / G Suite anmelden?**
**(6) How can I login to Gmail / G suite?**
Sie können den Schnelleinrichtungsassistenten verwenden, um einfach ein Gmail-Konto und eine Gmail-Identität einzurichten.
You can use the quick setup wizard to easily setup a Gmail account and identity.
Wenn Sie kein Gmail-Konto auf dem Gerät verwenden möchten, können Sie entweder den Zugriff für „weniger sichere Apps“ aktivieren und Ihr Kontopasswort verwenden (nicht empfohlen) oder die Zwei-Faktor-Authentifizierung aktivieren und ein appspezifisches Passwort verwenden. Um ein Passwort zu verwenden, müssen Sie Konto und Identität über die Einrichtungsschritte 1 und 2 statt über den Schnelleinrichtungs-Assistenten einrichten.
If you don't want to use an on-device Gmail account, you can either enable access for "less secure apps" and use your account password (not advised) or enable two factor authentication and use an app specific password. To use a password you'll need to setup an account and identity via setup step 1 and 2 instead of via the quick setup wizard.
Bitte lesen Sie in [dieser FAQ](#user-content-faq111), warum nur On-Device-Konten verwendet werden können.
Please see [this FAQ](#user-content-faq111) on why only on-device accounts can be used.
Beachten Sie, dass bei Aktivierung der Zwei-Faktor-Authentifizierung ein app-spezifisches Passwort erforderlich ist.
Note that an app specific password is required when two factor authentication is enabled.
<br/>
*Appspezifisches Passwort*
*App specific password*
Wie ein appspezifisches Passwort erstellt wird, sehen Sie [hier](https://support.google.com/accounts/answer/185833).
See [here](https://support.google.com/accounts/answer/185833) about how to generate an app specific password.
<br/>
*„Weniger sichere Apps“ aktivieren*
*Enable "Less secure apps"*
**Wichtig**: Die Verwendung dieser Methode wird nicht empfohlen, da sie weniger zuverlässig ist.
**Important**: using this method is not recommended because it is less reliable.
**Wichtig**: Gsuite-Konten, die mit einem Benutzernamen/Passwort autorisiert sind, funktionieren [in naher Zukunft](https://gsuiteupdates.googleblog.com/2019/12/less-secure-apps-oauth-google-username-password-incorrect.html) nicht mehr.
**Important**: Gsuite accounts authorized with a username/password will stop working [in the near future](https://gsuiteupdates.googleblog.com/2019/12/less-secure-apps-oauth-google-username-password-incorrect.html).
Sehen Sie [hier](https://support.google.com/accounts/answer/6010255) wie man „weniger sichere Apps“ aktiviert oder gehen Sie [direkt zu der Einstellung](https://www.google.com/settings/security/lesssecureapps).
See [here](https://support.google.com/accounts/answer/6010255) about how to enable "less secure apps" or go [directy to the setting](https://www.google.com/settings/security/lesssecureapps).
Wenn Sie mehrere Gmail-Konten verwenden, stellen Sie sicher, dass Sie die Einstellung „weniger sichere Apps“ des/der richtigen Accounts ändern.
If you use multiple Gmail accounts, make sure you change the "less secure apps" setting of the right account(s).
Seien Sie sich bewusst, dass Sie den „weniger sicheren Apps“ Bildschirm über den Zurückpfeil verlassen müssen, um die Einstellung anzuwenden.
Be aware that you need to leave the "less secure apps" settings screen by using the back arrow to apply the setting.
Wenn Sie diese Methode verwenden, sollten Sie ein [starkes Passwort](https://en.wikipedia.org/wiki/Password_strength) für Ihr Gmail-Konto verwendet, was aber grundsätzlich immer eine gute Idee ist. Beachten Sie, dass die Verwendung des [Standard](https://tools.ietf.org/html/rfc3501)-IMAP-Protokolls an sich nicht weniger sicher ist.
If you use this method, you should use a [strong password](https://en.wikipedia.org/wiki/Password_strength) for your Gmail account, which is a good idea anyway. Note that using the [standard](https://tools.ietf.org/html/rfc3501) IMAP protocol in itself is not less secure.
Wenn „weniger sichere Anwendungen” nicht aktiviert ist, erhalten Sie die Fehlermeldung *Authentifizierung fehlgeschlagen - ungültige Anmeldedaten* für Konten (IMAP) und *Benutzername und Passwort nicht akzeptiert* für Identitäten (SMTP).
When "less secure apps" is not enabled, you'll get the error *Authentication failed - invalid credentials* for accounts (IMAP) and *Username and Password not accepted* for identities (SMTP).
<br/>
*Allgemein*
*General*
Möglicherweise erhalten Sie die Meldung „*Bitte melden Sie sich über Ihren Webbrowser an*”. Dies geschieht, wenn Google das Netzwerk, das Sie mit dem Internet verbindet (dies könnte ein VPN sein), als unsicher einstuft. Dies kann verhindert werden, indem Sie den Assistenten zur schnellen Einrichtung von Google Mail oder ein app-spezifisches Passwort verwenden.
You might get the alert "*Please log in via your web browser*". This happens when Google considers the network that connects you to the internet (this could be a VPN) to be unsafe. This can be prevented by using the Gmail quick setup wizard or an app specific password.
Siehe [hier](https://support.google.com/mail/answer/7126229) für eine Anleitung von Google und [hier](https://support.google.com/mail/accounts/answer/78754) für die Problemlösung.
See [here](https://support.google.com/mail/answer/7126229) for Google's instructions and [here](https://support.google.com/mail/accounts/answer/78754) for troubleshooting.
<br/>
<aname="faq7"></a>
**(7) Warum werden gesendete Nachrichten nicht (direkt) im gesendeten Ordner angezeigt?**
**(7) Why are sent messages not appearing (directly) in the sent folder?**
Gesendete Nachrichten werden normalerweise aus dem Postausgang in den Ordner „Gesendet” verschoben, sobald Ihr Provider gesendete Nachrichten dem Ordner „Gesendet” hinzufügt. Dazu muss in den Kontoeinstellungen einen Ordner "Gesendet" ausgewählt werden, und dieser Ordner zum Synchronisieren festgelegt werden.
Sent messages are normally moved from the outbox to the sent folder as soon as your provider adds sent messages to the sent folder. This requires a sent folder to be selected in the account settings and the sent folder to be set to synchronizing.
Einige Provider verfolgen die gesendeten Nachrichten nicht oder der verwendete SMTP-Server ist möglicherweise nicht mit dem Provider verbunden. In diesen Fällen fügt FairEmail gesendete Nachrichten automatisch bei der Synchronisation des Ordners „Gesendet” dem Ordner „Gesendet” hinzu. Beachten Sie, dass dies zu zusätzlichem Internetverkehr führt.
Some providers do not keep track of sent messages or the used SMTP server might not be related to the provider. In these cases FairEmail, will automatically add sent messages to the sent folder on synchronizing the sent folder, which will happen after a message have been sent. Note that this will result in extra internet traffic.
~~Wenn dies nicht geschieht, verfolgt Ihr Provider möglicherweise nicht die gesendeten Nachrichten oder Sie verwenden einen SMTP-Server, der dem Provider nicht zugeordnet ist. ~ ~~In diesen Fällen können Sie die erweiterte Identitätseinstellung *Speichere gesendete Nachrichten* aktivieren, damit FairEmail gesendete Nachrichten direkt nach dem Senden einer Nachricht in den gesendeten Ordner einfügen kann. ~ ~~Beachten Sie, dass das Aktivieren dieser Einstellung zu doppelten Nachrichten führen kann, wenn Ihr Provider auch gesendete Nachrichten in den gesendeten Ordner einfügt. ~ ~~Beachten Sie auch, dass das Aktivieren dieser Einstellung zusätzliche Datenauslastung zur Folge hat, insbesondere wenn Nachrichten mit großen Anhängen gesendet werden.~~
~~If this doesn't happen, your provider might not keep track of sent messages or you might be using an SMTP server not related to the provider.~~ ~~In these cases you can enable the advanced identity setting *Store sent messages* to let FairEmail add sent messages to the sent folder right after sending a message.~~~~Note that enabling this setting might result in duplicate messages if your provider adds sent messages to the sent folder too.~~ ~~Also beware that enabling this setting will result in extra data usage, especially when when sending messages with large attachments.~~
~~If sent messages in the outbox are not found in the sent folder on a full synchronize, they will be moved from the outbox to the sent folder too.~~ ~~A full synchronize happens when reconnecting to the server or when synchronizing periodically or manually.~~ ~~You'll likely want to enable the advanced setting *Store sent messages* instead to move messages to the sent folder sooner.~~
<br/>
<aname="faq8"></a>
**(8) Kann ich ein Microsoft Exchange-Konto verwenden?**
**(8) Can I use a Microsoft Exchange account?**
Sie können ein Microsoft Exchange-Konto verwenden, wenn es über IMAP zugänglich ist, was meistens der Fall ist. Sehen Sie [hier](https://support.office.com/en-us/article/what-is-a-microsoft-exchange-account-47f000aa-c2bf-48ac-9bc2-83e5c6036793) für weitere Informationen.
You can use a Microsoft Exchange account if it is accessible via IMAP, which is mostly the case. See [here](https://support.office.com/en-us/article/what-is-a-microsoft-exchange-account-47f000aa-c2bf-48ac-9bc2-83e5c6036793) for more information.
[Hier](https://support.office.com/en-us/article/pop-imap-and-smtp-settings-for-outlook-com-d088b986-291d-42b8-9564-9c414e2aa040) finden Sie Microsofts Dokumentation zur Konfiguration eines E-Mail-Clients. Es gibt auch einen Abschnitt über häufige Verbindungsfehler und -lösungen.
Please see [here](https://support.office.com/en-us/article/pop-imap-and-smtp-settings-for-outlook-com-d088b986-291d-42b8-9564-9c414e2aa040) for the Microsoft documentation about configuring an email client. There is also a section about common connection errors and solutions.
Einige ältere Exchange-Server-Versionen haben einen Fehler, der eine leere Nachricht und beschädigte Anhänge verursacht. Eine Problemumgehung finden Sie in [dieser FAQ](#user-content-faq110).
Some older Exchange server versions have a bug causing empty message and corrupt attachments. Please see [this FAQ](#user-content-faq110) for a workaround.
Siehe [diese FAQ](#user-content-faq133) zur ActiveSync Unterstützung.
Please see [this FAQ](#user-content-faq133) about ActiveSync support.
Siehe [diese FAQ](#user-content-faq111) zu OAuth Support.
Please see [this FAQ](#user-content-faq111) about OAuth support.
<br/>
<aname="faq9"></a>
**(9) Was sind Identitäten / wie füge ich einen Alias hinzu?**
**(9) What are identities / how do I add an alias?**
Identitäten stellen E-Mail-Adressen dar, *von* denen Sie über einen E-Mail (SMTP) Server senden.
Identities represent email addresses you are sending *from* via an email (SMTP) server.
Einige Anbieter gestatten die Verwendung mehrerer Aliasse. You can configure these by setting the email address field of an additional identity to the alias address and setting the user name field to your main email address.
Some providers allow you to have multiple aliases. You can configure these by setting the email address field of an additional identity to the alias address and setting the user name field to your main email address.
Beachten Sie, dass Sie eine Identität durch langes Drücken kopieren können.
Note that you can copy an identity by long pressing it.
Alternativ können Sie in den erweiterten Einstellungen einer existierenden Identität das *Bearbeiten der Absenderadresse erlauben*, um den Benutzernamen beim Erstellen einer Nachricht zu bearbeiten, wenn Ihr Provider dies zulässt.
Alternatively, you can enable *Allow editing sender address* in the advanced settings of an existing identity to edit the username when composing a new message, if your provider allows this.
FairEmail aktualisiert automatisch die Passwörter der jeweiligen Identitäten, wenn Sie das Passwort des zugehörigen Kontos oder einer damit verbundenen Identität aktualisieren.
FairEmail will automatically update the passwords of related identities when you update the password of the associated account or a related identity.
Bitte diese [F&A](#user-content-faq33) zum Bearbeiten des Benutzernamens von E-Mail-Adressen beachten.
See [this FAQ](#user-content-faq33) on editing the username of email addresses.
<br/>
<aname="faq10"></a>
**~~(10) What does 'UIDPLUS not supported' mean?~~**
~~The error message *UIDPLUS not supported* means that your email provider does not provide the IMAP [UIDPLUS extension](https://tools.ietf.org/html/rfc4315). This IMAP extension is required to implement two way synchronization, which is not an optional feature. Wenn Ihr Anbieter diese Erweiterung nicht aktivieren kann, können Sie FairEmail nicht für diesen Anbieter verwenden.~~
~~The error message *UIDPLUS not supported* means that your email provider does not provide the IMAP [UIDPLUS extension](https://tools.ietf.org/html/rfc4315). This IMAP extension is required to implement two way synchronization, which is not an optional feature. So, unless your provider can enable this extension, you cannot use FairEmail for this provider.~~
<br/>
<aname="faq11"></a>
**~~(11) Warum wird POP nicht unterstützt?~~**
**~~(11) Why is POP not supported?~~**
~~Besides that any decent email provider supports [IMAP](https://en.wikipedia.org/wiki/Internet_Message_Access_Protocol) these days,~~ ~~using [POP](https://en.wikipedia.org/wiki/Post_Office_Protocol) will result in unnecessary extra battery usage and delayed new message notifications.~~ ~~Moreover, POP is unsuitable for two way synchronization and more often than not people read and write messages on different devices these days.~~
@ -566,7 +574,7 @@ Bitte diese [F&A](#user-content-faq33) zum Bearbeiten des Benutzernamens von E-M
<aname="faq12"></a>
**(12) How does encryption/decryption work?**
*Allgemein*
*General*
Please [see here](https://en.wikipedia.org/wiki/Public-key_cryptography) about how public/private key encryption works.
@ -618,7 +626,7 @@ Signed-only or encrypted-only messages are not a good idea, please see here abou
Signed-only messages are supported, encrypted-only messages are not supported.
Häufige Fehler:
Common errors:
* *Kein Schlüssel*: kein PGP-Schlüssel für eine der aufgeführten E-Mail-Adressen verfügbar
* *Verschlüsselungsschlüssel fehlt*: es wurde wahrscheinlich in FairEmail ein Schlüssel ausgewählt, der in der OpenKeychain-App nicht mehr vorhanden ist. Das Zurücksetzen des Schlüssels (siehe oben) wird dieses Problem eventuell beheben.
@ -631,26 +639,26 @@ Private keys are stored by Android and can be imported via the Android advanced
Note that certificates can contains multiple keys for multiple purposes, for example for authentication, encryption and signing. Android only imports the first key, so to import all the keys, the certificate must first be split. This is not very trivial and you are advised to ask the certificate supplier for support.
Beachten Sie, dass S/MIME-Signierung mit anderen Algorithmen als RSA zwar unterstützt wird, aber andere E-Mail-Clients dies möglicherweise nicht unterstützen. S/MIME-Verschlüsselung ist nur mit symmetrischen Algorithmen möglich, das heißt in der Praxis RSA.
Note that S/MIMEsigning with other algorithms than RSA is supported, but be aware that other email clients might not support this. S/MIME encryption is possible with symmetric algorithms only, which means in practice using RSA.
Die Standard-Verschlüsselungsmethode ist PGP, aber die zuletzt verwendete Verschlüsselungsmethode wird fürs nächsten Mal für die ausgewählte Identität gespeichert. Möglicherweise müssen Sie die Sendeoptionen im Drei-Punkte-Menü erneut aktivieren, um die Verschlüsselungsmethode wählen zu können.
The default encryption method is PGP, but the last used encryption method will be remembered for the selected identity for the next time. You might need to enable the send options in the three dots menu again to be able to select the encryption method.
Um verschiedene private Schlüssel für die gleiche E-Mail-Adresse zu erlauben lässt FairEmail Sie immer einen Schlüssel auswählen, wenn es mehrere Identitäten mit der gleichen E-Mail-Adresse für denselben Account gibt.
To allow different private keys for the same email address, FairEmail will always let you select a key when there are multiple identities with the same email address for the same account.
Öffentliche Schlüssel werden bei FairEmail gespeichert und können bei der erstmaligen Überprüfung einer Signatur oder über die Privatsphäre-Einstellungen (PEM oder DER Format) importiert werden.
Public keys are stored by FairEmail and can be imported when verifying a signature for the first time or via the privacy settings (PEM or DER format).
FairEmail überprüft sowohl die Unterschrift als auch die gesamte Zertifikatskette.
FairEmail verifies both the signature and the complete certificate chain.
Häufige Fehler:
Common errors:
* *No certificate found matching targetContraints*: this likely means you are using an old version of FairEmail
* *unable to find valid certification path to requested target*: basically this means one or more intermediate or root certificates were not found
* *Privater Schlüssel stimmt mit keinem Verschlüsselungsschlüssel überein*: Der ausgewählte Schlüssel kann nicht verwendet werden, um die Nachricht zu entschlüsseln, wahrscheinlich weil es der falsche Schlüssel ist
* *Kein privater Schlüssel*: Es wurde kein Zertifikat ausgewählt oder kein Zertifikat im Android-Schlüsselgeschäft verfügbar
Falls die Zertifikatskette falsch ist, können Sie auf den kleinen Info-Button klicken, um alle Zertifikate anzuzeigen. After the certificate details the issuer or "selfSign" is shown. Ein Zertifikat ist selbstsigniert, wenn der Betreff und der Emittent identisch sind. Certificates from a certificate authority (CA) are marked with "[keyCertSign](https://tools.ietf.org/html/rfc5280#section-4.2.1.3)". Zertifikate im Android-Schlüsselspeicher werden mit »Android« gekennzeichnet.
In case the certificate chain is incorrect, you can tap on the little info button to show the all certificates. After the certificate details the issuer or "selfSign" is shown. A certificate is self signed when the subject and the issuer are the same. Certificates from a certificate authority (CA) are marked with "[keyCertSign](https://tools.ietf.org/html/rfc5280#section-4.2.1.3)". Certificates found in the Android key store are marked with "Android".
Eine gültige Kette sieht so aus:
A valid chain looks like this:
```
Your certificate > zero or more intermediate certificates > CA (root) certificate marked with "Android"
@ -658,45 +666,45 @@ Your certificate > zero or more intermediate certificates > CA (root) certificat
Note that a certificate chain will always be invalid when no anchor certificate can be found in the Android key store, which is fundamental to S/MIME certificate validation.
Sehen Sie [hier](https://support.google.com/pixelphone/answer/2844832?hl=en), wie Sie Zertifikate in den Android-Schlüsselspeicher importieren können.
Please see [here](https://support.google.com/pixelphone/answer/2844832?hl=en) how you can import certificates into the Android key store.
Die Verwendung von abgelaufenen Schlüsseln, inlineverschlüsselten oder -signierten Nachrichten und Hardwaresicherheitstoken wird nicht unterstützt.
The use of expired keys, inline encrypted/signed messages and hardware security tokens is not supported.
Wenn Sie ein kostenloses (Test) S/MIME Zertifikat suchen, finden Sie die Optionen [hier](http://kb.mozillazine.org/Getting_an_SMIME_certificate). Achten sie darauf, [das](https://davidroessli.com/logs/2019/09/free-smime-certificates-in-2019/#update20191219) zuerst zu lesen, wenn sie ein solches Zertifikat erhalten wollen. Wenn Sie ein günstiges S/MIME-Zertifikat suchen, habe ich mit [Certum](https://www.certum.eu/en/smime-certificates/) gute Erfahrungen gemacht.
If you are looking for a free (test) S/MIME certificate, see [here](http://kb.mozillazine.org/Getting_an_SMIME_certificate) for the options. Please be sure to [read this first](https://davidroessli.com/logs/2019/09/free-smime-certificates-in-2019/#update20191219) if you want to request an S/MIME Actalis certificate. If you are looking for a cheap S/MIME certificate, I had a good experience with [Certum](https://www.certum.eu/en/smime-certificates/).
Wie man einen öffentlichen Schlüssel aus einem S/MIME-Zertifikat extrahiert:
How to extract a public key from a S/MIME certificate:
Sie können S/MIME Signaturen dekodieren usw., siehe [hier](https://lapo.it/asn1js/).
You can decode S/MIME signatures, etc, [here](https://lapo.it/asn1js/).
S/MIME signieren/verschlüsseln ist ein Pro-Funktion, aber alle anderen PGP- und S/MIME-Operationen sind frei nutzbar.
S/MIME sign/encrypt is a pro feature, but all other PGP and S/MIME operations are free to use.
<br/>
<aname="faq13"></a>
**(13) Wie funktioniert die Suche auf dem Gerät bzw. auf den Servern?**
**(13) How does search on device/server work?**
Sie können Nachrichten nach Absender (von), Empfänger (to, cc, bcc), Betreff, Schlagwörtern oder Nachrichtentext mit Hilfe der Lupe in der Aktionsleiste eines Ordners suchen. Sie können auch von jeder App aus suchen, indem Sie *FairEmail Suche* im Popup-Menü kopieren/einfügen auswählen.
You can start searching for messages on sender (from), recipient (to, cc, bcc), subject, keywords or message text by using the magnify glass in the action bar of a folder. You can also search from any app by selecting *Search email* in the copy/paste popup menu.
Die Suche im Sammeleingang wird alle Ordner aller Konten durchsuchen, die Suche in der Ordnerliste wird nur in dem zugehörigen Konto suchen, und die Suche in einem Ordner wird nur in diesem Ordner durchsuchen.
Searching in the unified inbox will search in all folders of all accounts, searching in the folder list will search in the associated account only and searching in a folder will search in that folder only.
Nachrichten werden zuerst nur auf dem Gerät gesucht. Es gibt einen Nochmal-Suchen-Aktionsknopf am unteren Bildschirmrand, um die Suche auf dem Server fortzusetzen. Sie können auswählen, in welchem Ordner die Suche fortgesetzt werden soll.
Messages will be searched for on the device first. There will be an action button with a search again icon at the bottom to continue searching on the server. You can select in which folder to continue the search.
Das IMAP-Protokoll unterstützt nicht die gleichzeitige Suche in mehr als einem Ordner. Die Suche auf dem Server ist ein aufwendiger Vorgang, daher ist es nicht möglich, mehrere Ordner auszuwählen.
The IMAP protocol doesn't support searching in more than one folder at the same time. Searching on the server is an expensive operation, therefore it is not possible to select multiple folders.
Die Suche nach lokalen Nachrichten ist unabhängig von Groß- und Kleinschreibung und auf Teiltext bezoge. Der Nachrichtentext lokaler Nachrichten wird nicht durchsucht, wenn der Nachrichtentext noch nicht heruntergeladen wurde. Die Suche auf dem Server kann je nach Anbieter Groß- und Kleinschreibung berücksichtigen oder ignorieren, nach Teiltext oder nur nach ganzen Wörtern suchen.
Searching local messages is case insensitive and on partial text. The message text of local messages will not be searched if the message text was not downloaded yet. Searching on the server might be case sensitive or case insensitive and might be on partial text or whole words, depending on the provider.
Einige Server schaffen es nicht den Nachrichtentext zu durchsuchen, wenn es viele Nachrichten gibt. Für diesen Fall gibt es eine Option, um die Suche im Nachrichtentext zu deaktivieren.
Some servers cannot handle searching in the message text when there are a large number of messages. For this case there is an option to disable searching in the message text.
Es ist möglich, Gmail-Suchoperatoren zu verwenden, indem einem Suchbefehl die Präfix *raw:* vorangestellt wird. Wenn Sie nur ein Gmail-Konto konfiguriert haben, können Sie eine rohe Suche direkt auf dem Server starten, indem Sie vom Sammeleingang aus suchen. Wenn Sie mehrere Gmail-Konten konfiguriert haben, müssen sie zuerst zur Ordnerliste oder zum Archiv („Alle Nachrichten“) des Gmail-Kontos navigieren, in dem Sie suchen möchten. Die möglichen Suchoperatoren finden Sie [hier](https://support.google.com/mail/answer/7190). Zum Beispiel:
It is possible to use Gmail search operators by prefixing a search command with *raw:*. If you configured just one Gmail account, you can start a raw search directly on the server by searching from the unified inbox. If you configured multiple Gmail accounts, you'll first need to navigate to the folder list or the archive (all messages) folder of the Gmail account you want to search in. Please [see here](https://support.google.com/mail/answer/7190) for the possible search operators. For example:
`
raw:larger:10M`
Die Suche durch eine große Anzahl von Nachrichten auf dem Gerät ist aufgrund von zwei Einschränkungen nicht sehr schnell:
Searching through a large number of messages on the device is not very fast because of two limitations:
* [sqlite](https://www.sqlite.org/), die Datenbank-Engine von Android hat ein Datensatzgrößenlimit und verhindert, dass Nachrichten in der Datenbank gespeichert werden
* Android-Apps können nur mit limitiertem Arbeitsspeicher arbeiten, auch wenn das Gerät viel Speicher zur Verfügung hat
@ -732,16 +740,16 @@ To use an Outlook, Live or Hotmail account with two factor authentication enable
See [here](https://support.office.com/en-us/article/pop-imap-and-smtp-settings-for-outlook-com-d088b986-291d-42b8-9564-9c414e2aa040) for Microsoft's instructions.
Um ein Office-365-Konto einzurichten, lesen Sie bitte [diese F&A](#user-content-faq156).
For setting up an Office 365 account, please see [this FAQ](#user-content-faq156).
<br/>
<aname="faq15"></a>
**(15) Warum wird der Nachrichtentext weiter geladen?**
**(15) Why does the message text keep loading?**
Der Nachrichtenkopf und der Nachrichtentext werden getrennt vom Server abgerufen. The message text of larger messages is not being pre-fetched on metered connections and will be fetched on demand on expanding a message. Der Nachrichtentext wird weiter geladen, wenn keine Verbindung zum Konto besteht (siehe auch die nächste Frage) oder wenn dort andere Operationen, wie z. B. das Synchronisieren von Nachrichten, ausgeführt werden.
The message header and message body are fetched separately from the server. The message text of larger messages is not being pre-fetched on metered connections and will be fetched on demand on expanding a message. The message text will keep loading if there is no connection to the account, see also the next question, or if there other operations, like synchronizing messages, are being executed.
Sie können in der Konten- und Ordnerliste den Konten- und Ordnerstatus überprüfen (siehe Legende für die Bedeutung der Symbole). In der über das Hauptnavigationsmenü erreichbaren Liste sehen Sie ausstehende Vorgänge (siehe [diese F&A](#user-content-faq3) für die Bedeutung der Vorgänge).
You can check the account and folder list for the account and folder state (see the legend for the meaning of the icons) and the operation list accessible via the main navigation menu for pending operations (see [this FAQ](#user-content-faq3) for the meaning of the operations).
If FairEmail is holding off because of prior connectivity issues, please see [this FAQ](#user-content-faq123), you can force synchronization via the three dots menu.
@ -1463,6 +1471,7 @@ For security reasons the files with the original message texts are not accessibl
* Did you know that you can long press the people's icon to show/hide the CC/BCC fields and remember the visibility state for the next time?
* Did you know that you can insert the email addresses of an Android contact group via the three dots overflow menu?
* Did you know that if you select text and hit reply, only the selected text will be quoted?
* Did you know that you can long press the trash icons (both in the message and the bottom action bar) to permanently delete a message or conversation? (version 1.1368+)
<br/>
@ -2329,7 +2338,7 @@ Directly after the first step new messages will be notified. However, only until
Since there is no guarantee that a message text will always be fetched directly after a message header, it is not possible to guarantee that a new message notification with a preview text will always be sent to a wearable.
Sofern das für Sie ausreichend ist, können Sie die Benachrichtigungsoption *Nur Benachrichtigungen mit einer Nachrichtenvorschau an Wearables senden* aktivieren, und falls dies nicht funktioniert, versuchen Sie die Benachrichtigungsoption *Benachrichtigungen nur mit einem Vorschautext anzeigen*. Beachten Sie, dass dies auch für Wearables gilt, die keinen Vorschautext anzeigen, selbst wenn die Android Wear App angibt, dass die Benachrichtigung gesendet (überbrückt) wurde.
If you think this is good enough, you can enable the notification option *Only send notifications with a message preview to wearables* and if this does not work, you can try to enable the notification option *Show notifications with a preview text only*. Note that this applies to wearables not showing a preview text too, even when the Android Wear app says the notification has been sent (bridged).
If you want to have the full message text sent to your wearable, you can enable the notification option *Preview all text*. Note that some wearables are known to crash with this option enabled.
@ -2604,7 +2613,7 @@ There is **only support** on the latest Play store version, the latest GitHub re
F-Droid builds irregularly, which can be problematic when there is an important update. Therefore you are advised to switch to the GitHub release.
The F-Droid version is built from the same source code, but signed differently. Das bedeutet, dass alle Funktionen auch in der F-Droid-Version verfügbar sind, mit Ausnahme der Verwendung des Assistenten zur schnellen Einrichtung von Google Mail, da Google nur eine Signatur erlaubt (und zulässt). For all other email providers, OAuth access is only available in Play Store versions and Github releases, as the email providers only permit the use of OAuth for official builds.
The F-Droid version is built from the same source code, but signed differently. This means that all features are available in the F-Droid version too, except for using the Gmail quick setup wizard because Google approved (and allows) one app signature only. For all other email providers, OAuth access is only available in Play Store versions and Github releases, as the email providers only permit the use of OAuth for official builds.
Note that you'll need to uninstall the F-Droid build first before you can install a GitHub release because Android refuses to install the same app with a different signature for security reasons.
@ -388,7 +388,15 @@ Operations are processed only when there is a connection to the email server or
You should try to fix this by contacting your provider or by getting a valid security certificate because invalid security certificates are insecure and allow [man-in-the-middle attacks](https://en.wikipedia.org/wiki/Man-in-the-middle_attack). If money is an obstacle, you can get free security certificates from [Let’s Encrypt](https://letsencrypt.org).
Alternatively, you can accept the fingerprint of the invalid server certificate as shown below the error message by ticking a checkbox. In case of an existing account (IMAP, receive) and/or identity (SMTP, send) you will need check/save it via setup step 1 and 2 to get the error message. This will "pin" the server certificate to prevent man-in-the-middle attacks. Note that you should make sure the internet connection you are using is safe if you do this.
Alternatively, you can accept the fingerprint of invalid server certificates like this:
1. Make sure you are using a trusted internet connection (no public Wi-Fi networks, etc)
1. Go to the setup screen via the navigation menu (swipe from the left side inwards)
1. In step 1 and 2 tap *Manage* and tap the faulty account and identity
1. Check/save the account and identity
1. Tick the checkbox below the error message and save again
This will "pin" the server certificate to prevent man-in-the-middle attacks.
Note that older Android versions might not recognize newer certification authorities like Let’s Encrypt causing connections to be considered insecure, see also [here](https://developer.android.com/training/articles/security-ssl).
@ -1463,6 +1471,7 @@ For security reasons the files with the original message texts are not accessibl
* Did you know that you can long press the people's icon to show/hide the CC/BCC fields and remember the visibility state for the next time?
* Did you know that you can insert the email addresses of an Android contact group via the three dots overflow menu?
* Did you know that if you select text and hit reply, only the selected text will be quoted?
* Did you know that you can long press the trash icons (both in the message and the bottom action bar) to permanently delete a message or conversation? (version 1.1368+)
@ -388,7 +388,15 @@ Operations are processed only when there is a connection to the email server or
You should try to fix this by contacting your provider or by getting a valid security certificate because invalid security certificates are insecure and allow [man-in-the-middle attacks](https://en.wikipedia.org/wiki/Man-in-the-middle_attack). If money is an obstacle, you can get free security certificates from [Let’s Encrypt](https://letsencrypt.org).
Alternatively, you can accept the fingerprint of the invalid server certificate as shown below the error message by ticking a checkbox. In case of an existing account (IMAP, receive) and/or identity (SMTP, send) you will need check/save it via setup step 1 and 2 to get the error message. This will "pin" the server certificate to prevent man-in-the-middle attacks. Note that you should make sure the internet connection you are using is safe if you do this.
Alternatively, you can accept the fingerprint of invalid server certificates like this:
1. Make sure you are using a trusted internet connection (no public Wi-Fi networks, etc)
1. Go to the setup screen via the navigation menu (swipe from the left side inwards)
1. In step 1 and 2 tap *Manage* and tap the faulty account and identity
1. Check/save the account and identity
1. Tick the checkbox below the error message and save again
This will "pin" the server certificate to prevent man-in-the-middle attacks.
Note that older Android versions might not recognize newer certification authorities like Let’s Encrypt causing connections to be considered insecure, see also [here](https://developer.android.com/training/articles/security-ssl).
@ -1463,6 +1471,7 @@ For security reasons the files with the original message texts are not accessibl
* Did you know that you can long press the people's icon to show/hide the CC/BCC fields and remember the visibility state for the next time?
* Did you know that you can insert the email addresses of an Android contact group via the three dots overflow menu?
* Did you know that if you select text and hit reply, only the selected text will be quoted?
* Did you know that you can long press the trash icons (both in the message and the bottom action bar) to permanently delete a message or conversation? (version 1.1368+)
@ -388,7 +388,15 @@ Operations are processed only when there is a connection to the email server or
You should try to fix this by contacting your provider or by getting a valid security certificate because invalid security certificates are insecure and allow [man-in-the-middle attacks](https://en.wikipedia.org/wiki/Man-in-the-middle_attack). If money is an obstacle, you can get free security certificates from [Let’s Encrypt](https://letsencrypt.org).
Alternatively, you can accept the fingerprint of the invalid server certificate as shown below the error message by ticking a checkbox. In case of an existing account (IMAP, receive) and/or identity (SMTP, send) you will need check/save it via setup step 1 and 2 to get the error message. This will "pin" the server certificate to prevent man-in-the-middle attacks. Note that you should make sure the internet connection you are using is safe if you do this.
Alternatively, you can accept the fingerprint of invalid server certificates like this:
1. Make sure you are using a trusted internet connection (no public Wi-Fi networks, etc)
1. Go to the setup screen via the navigation menu (swipe from the left side inwards)
1. In step 1 and 2 tap *Manage* and tap the faulty account and identity
1. Check/save the account and identity
1. Tick the checkbox below the error message and save again
This will "pin" the server certificate to prevent man-in-the-middle attacks.
Note that older Android versions might not recognize newer certification authorities like Let’s Encrypt causing connections to be considered insecure, see also [here](https://developer.android.com/training/articles/security-ssl).
@ -1463,6 +1471,7 @@ For security reasons the files with the original message texts are not accessibl
* Did you know that you can long press the people's icon to show/hide the CC/BCC fields and remember the visibility state for the next time?
* Did you know that you can insert the email addresses of an Android contact group via the three dots overflow menu?
* Did you know that if you select text and hit reply, only the selected text will be quoted?
* Did you know that you can long press the trash icons (both in the message and the bottom action bar) to permanently delete a message or conversation? (version 1.1368+)
@ -388,7 +388,15 @@ Operations are processed only when there is a connection to the email server or
You should try to fix this by contacting your provider or by getting a valid security certificate because invalid security certificates are insecure and allow [man-in-the-middle attacks](https://en.wikipedia.org/wiki/Man-in-the-middle_attack). If money is an obstacle, you can get free security certificates from [Let’s Encrypt](https://letsencrypt.org).
Alternatively, you can accept the fingerprint of the invalid server certificate as shown below the error message by ticking a checkbox. In case of an existing account (IMAP, receive) and/or identity (SMTP, send) you will need check/save it via setup step 1 and 2 to get the error message. This will "pin" the server certificate to prevent man-in-the-middle attacks. Note that you should make sure the internet connection you are using is safe if you do this.
Alternatively, you can accept the fingerprint of invalid server certificates like this:
1. Make sure you are using a trusted internet connection (no public Wi-Fi networks, etc)
1. Go to the setup screen via the navigation menu (swipe from the left side inwards)
1. In step 1 and 2 tap *Manage* and tap the faulty account and identity
1. Check/save the account and identity
1. Tick the checkbox below the error message and save again
This will "pin" the server certificate to prevent man-in-the-middle attacks.
Note that older Android versions might not recognize newer certification authorities like Let’s Encrypt causing connections to be considered insecure, see also [here](https://developer.android.com/training/articles/security-ssl).
@ -1463,6 +1471,7 @@ For security reasons the files with the original message texts are not accessibl
* Did you know that you can long press the people's icon to show/hide the CC/BCC fields and remember the visibility state for the next time?
* Did you know that you can insert the email addresses of an Android contact group via the three dots overflow menu?
* Did you know that if you select text and hit reply, only the selected text will be quoted?
* Did you know that you can long press the trash icons (both in the message and the bottom action bar) to permanently delete a message or conversation? (version 1.1368+)
@ -388,7 +388,15 @@ Operations are processed only when there is a connection to the email server or
You should try to fix this by contacting your provider or by getting a valid security certificate because invalid security certificates are insecure and allow [man-in-the-middle attacks](https://en.wikipedia.org/wiki/Man-in-the-middle_attack). If money is an obstacle, you can get free security certificates from [Let’s Encrypt](https://letsencrypt.org).
Alternatively, you can accept the fingerprint of the invalid server certificate as shown below the error message by ticking a checkbox. In case of an existing account (IMAP, receive) and/or identity (SMTP, send) you will need check/save it via setup step 1 and 2 to get the error message. This will "pin" the server certificate to prevent man-in-the-middle attacks. Note that you should make sure the internet connection you are using is safe if you do this.
Alternatively, you can accept the fingerprint of invalid server certificates like this:
1. Make sure you are using a trusted internet connection (no public Wi-Fi networks, etc)
1. Go to the setup screen via the navigation menu (swipe from the left side inwards)
1. In step 1 and 2 tap *Manage* and tap the faulty account and identity
1. Check/save the account and identity
1. Tick the checkbox below the error message and save again
This will "pin" the server certificate to prevent man-in-the-middle attacks.
Note that older Android versions might not recognize newer certification authorities like Let’s Encrypt causing connections to be considered insecure, see also [here](https://developer.android.com/training/articles/security-ssl).
@ -1463,6 +1471,7 @@ For security reasons the files with the original message texts are not accessibl
* Did you know that you can long press the people's icon to show/hide the CC/BCC fields and remember the visibility state for the next time?
* Did you know that you can insert the email addresses of an Android contact group via the three dots overflow menu?
* Did you know that if you select text and hit reply, only the selected text will be quoted?
* Did you know that you can long press the trash icons (both in the message and the bottom action bar) to permanently delete a message or conversation? (version 1.1368+)
@ -388,39 +388,47 @@ Les opérations ne sont traitées que lorsqu'il y a une connexion au serveur de
Vous devriez essayer de résoudre ce problème en contactant votre fournisseur ou en obtenant un certificat de sécurité valide car les certificats de sécurité non valides sont non sécurisés et autorisent [man-in-the-middle attacks](https://en.wikipedia.org/wiki/Man-in-the-middle_attack). Si l'argent est un obstacle, vous pouvez obtenir des certificats de sécurité gratuits auprès de [Crypt](https://letsencrypt.org).
Vous pouvez également accepter l'empreinte du certificat de serveur non valide comme indiqué sous le message d'erreur en cochant une case à cocher. En cas de compte existant (IMAP, recevoir) et/ou d'identité (SMTP, envoyer) vous aurez besoin de le vérifier/sauvegarder via les étapes 1 et 2 de configuration pour recevoir le message d'erreur. Ceci va "épingler" le certificat du serveur pour éviter les attaques de man-in-the-middle. Notez que vous devez vous assurer que la connexion Internet que vous utilisez est sûre si vous faites cela.
Alternatively, you can accept the fingerprint of invalid server certificates like this:
Notez que les anciennes versions d'Android peuvent ne pas reconnaître de nouvelles autorités de certification comme Let's Encrypt qui peuvent considérer les connexions comme non sécurisées, voir aussi [ici](https://developer.android.com/training/articles/security-ssl).
1. Make sure you are using a trusted internet connection (no public Wi-Fi networks, etc)
1. Go to the setup screen via the navigation menu (swipe from the left side inwards)
1. In step 1 and 2 tap *Manage* and tap the faulty account and identity
1. Check/save the account and identity
1. Tick the checkbox below the error message and save again
*Ancre de confiance pour le chemin de certification introuvable*
This will "pin" the server certificate to prevent man-in-the-middle attacks.
*... java.security.cert.CertPathValidatorException: Ancre de confiance pour le chemin de certification introuvable... /0> signifie que le gestionnaire de confiance Android par défaut n'a pas pu vérifier la chaîne de certificats du serveur.</p>
Note that older Android versions might not recognize newer certification authorities like Let’s Encrypt causing connections to be considered insecure, see also [here](https://developer.android.com/training/articles/security-ssl).
Vous devriez soit corriger la configuration du serveur ou accepter l'empreinte digitale affichée sous le message d'erreur.
*Trust anchor for certification path not found*
Notez que ce problème peut être causé par le serveur qui n'envoie pas tous les certificats intermédiaires.
*... java.security.cert.CertPathValidatorException: Trust anchor for certification path not found ...* means that the default Android trust manager was not able to verify the server certificate chain.
*Mot de passe vide*
You should either fix the server configuration or accept the fingerprint shown below the error message.
Votre nom d'utilisateur est probablement facilement deviné, donc ce n'est pas sûr.
Note that this problem can be caused by the server not sending all intermediate certificates too.
*Connexion au texte brut*
*Empty password*
Votre nom d'utilisateur et votre mot de passe et tous les messages seront envoyés et reçus non chiffrés, qui est **très peu sécurisé** car une [man-in-the-middle attack](https://en.wikipedia.org/wiki/Man-in-the-middle_attack) est très simple sur une connexion non chiffrée.
Your username is likely easily guessed, so this is insecure.
Si vous voulez toujours utiliser un certificat de sécurité invalide, un mot de passe vide ou une connexion en texte brut vous aurez besoin d'activer des connexions non sécurisées dans les paramètres du compte et/ou de l'identité. STARTTLS doit être sélectionné pour les connexions en texte brut. Si vous activez des connexions non sécurisées, vous devez vous connecter par des réseaux privés et de confiance uniquement et jamais par des réseaux publics, comme ceux offerts dans les hôtels, les aéroports, etc.
*Plain text connection*
Your username and password and all messages will be sent and received unencrypted, which is **very insecure** because a [man-in-the-middle attack](https://en.wikipedia.org/wiki/Man-in-the-middle_attack) is very simple on an unencrypted connection.
If you still want to use an invalid security certificate, an empty password or a plain text connection you'll need to enable insecure connections in the account and/or identity settings. STARTTLS should be selected for plain text connections. If you enable insecure connections, you should connect via private, trusted networks only and never via public networks, like offered in hotels, airports, etc.
<br/>
<aname="faq5"></a>
**(5) Comment puis-je personnaliser la vue des messages ?**
**(5) How can I customize the message view?**
Dans les trois points du menu à débordement, vous pouvez activer ou désactiver ou sélectionner :
In the three dot overflow menu you can enable or disable or select:
* *taille de texte* : pour trois tailles de police différentes
* *Vue compacte* : pour des éléments de message plus condensés et une police de texte de message plus petite
Dans la section d'affichage des paramètres, vous pouvez activer ou désactiver :
In the display section of the settings you can enable or disable:
* *Boîte de réception unifiée* : pour désactiver la boîte de réception unifiée et pour lister les dossiers sélectionnés pour la boîte de réception unifiée
* *Grouper par date*: Affiche la date en en-tête au dessus des messages ayant la même date
@ -437,26 +445,26 @@ Dans la section d'affichage des paramètres, vous pouvez activer ou désactiver
* *Afficher automatiquement les images pour les contacts connus*: pour automatiquement afficher les images pour les contacts de votre appareil, merci de lire[cette FAQ](#user-content-faq35)
* *Barre d'action de conversation*: pour désactiver la barre de navigation du bas
Notez que les messages ne peuvent être prévisualisés que quand le texte du message a été téléchargé. Les textes de messages plus volumineux ne sont pas téléchargés par défaut sur les réseaux limités (généralement mobiles). Vous pouvez changer cela dans les paramètres.
Note that messages can be previewed only when the message text was downloaded. Larger message texts are not downloaded by default on metered (generally mobile) networks. You can change this in the settings.
Si la liste des adresses est longue, vous pouvez réduire la section Adresses avec l'icône *moins* en haut de la section Adresses.
If the list of addresses is long, you can collapse the addresses section with the *less* icon at the top of the addresses section.
Certaines personnes demandent :
Some people ask:
* d'afficher l'objet en gras, mais l'affichage en gras est déjà utilisé pour mettre en évidence les messages non lus
* d'afficher l'adresse ou l'objet en plus grand/plus petit, mais cela interférerait avec l'option de taille de texte
* de déplacer l'étoile à gauche, mais il est beaucoup plus facile de manipuler l'étoile sur le côté droit
Malheureusement, il est impossible de contenter tout le monde et ajouter tout un lot de réglages serait non seulement déroutant, mais également jamais suffisant.
Unfortunately, it is impossible to make everybody happy and adding lots of settings would not only be confusing, but also never be sufficient.
<br/>
<aname="faq6"></a>
**(6) Comment puis-je me connecter à Gmail / G suite ?**
**(6) How can I login to Gmail / G suite?**
Vous pouvez utiliser l'assistant d'installation rapide pour configurer facilement un compte Gmail et une identité.
You can use the quick setup wizard to easily setup a Gmail account and identity.
Si vous ne voulez pas utiliser un compte Gmail sur votre appareil, vous pouvez soit activer l'accès pour les "applications moins sécurisées" et utiliser le mot de passe de votre compte (non conseillé) ou activer l'authentification en deux étapes et utiliser un mot de passe spécifique à l'application. Pour utiliser un mot de passe, vous devrez configurer un compte et une identité via les étapes 1 et 2 de configuration au lieu de l'assistant d'installation rapide.
If you don't want to use an on-device Gmail account, you can either enable access for "less secure apps" and use your account password (not advised) or enable two factor authentication and use an app specific password. To use a password you'll need to setup an account and identity via setup step 1 and 2 instead of via the quick setup wizard.
Please see [this FAQ](#user-content-faq111) on why only on-device accounts can be used.
@ -662,7 +670,7 @@ Please see [here](https://support.google.com/pixelphone/answer/2844832?hl=en) ho
The use of expired keys, inline encrypted/signed messages and hardware security tokens is not supported.
If you are looking for a free (test) S/MIME certificate, see [here](http://kb.mozillazine.org/Getting_an_SMIME_certificate) for the options. Please be sure to [read this first](https://davidroessli.com/logs/2019/09/free-smime-certificates-in-2019/#update20191219) if you want to request an S/MIME Actalis certificate. Si vous recherchez un certificat S/MIME bon marché, j'ai eu une bonne expérience avec [Certum](https://www.certum.eu/en/smime-certificates/).
If you are looking for a free (test) S/MIME certificate, see [here](http://kb.mozillazine.org/Getting_an_SMIME_certificate) for the options. Please be sure to [read this first](https://davidroessli.com/logs/2019/09/free-smime-certificates-in-2019/#update20191219) if you want to request an S/MIME Actalis certificate. If you are looking for a cheap S/MIME certificate, I had a good experience with [Certum](https://www.certum.eu/en/smime-certificates/).
How to extract a public key from a S/MIME certificate:
@ -739,7 +747,7 @@ For setting up an Office 365 account, please see [this FAQ](#user-content-faq156
<aname="faq15"></a>
**(15) Why does the message text keep loading?**
The message header and message body are fetched separately from the server. The message text of larger messages is not being pre-fetched on metered connections and will be fetched on demand on expanding a message. Le texte du message continuera à se charger s'il n'y a pas de connexion au compte, voir aussi la question suivante, ou s'il y a d'autres opérations en cours d'exécution comme la synchronisation des messages.
The message header and message body are fetched separately from the server. The message text of larger messages is not being pre-fetched on metered connections and will be fetched on demand on expanding a message. The message text will keep loading if there is no connection to the account, see also the next question, or if there other operations, like synchronizing messages, are being executed.
You can check the account and folder list for the account and folder state (see the legend for the meaning of the icons) and the operation list accessible via the main navigation menu for pending operations (see [this FAQ](#user-content-faq3) for the meaning of the operations).
@ -909,7 +917,7 @@ The authorization of Gmail accounts setup with the quick wizard needs to be peri
The error *... Authentication failed ... Account not found ...* means that a previously authorized Gmail account was removed from the device.
The errors *... Authentication failed ... Aucun jeton ...* signifie que le gestionnaire de comptes Android n'a pas réussi à actualiser l'autorisation d'un compte Gmail.
The errors *... Authentication failed ... No token ...* means that the Android account manager failed to refresh the authorization of a Gmail account.
The error *... Authentication failed ... Invalid credentials ... network error ...* means that the Android account manager was not able to refresh the authorization of a Gmail account due to problems with the internet connection
@ -1168,7 +1176,7 @@ It is inevitable that synchronizing messages will use battery power because it r
If you are comparing the battery usage of FairEmail with another email client, please make sure the other email client is setup similarly. For example comparing always sync (push messages) and (infrequent) periodic checking for new messages is not a fair comparison.
Reconnecting to an email server will use extra battery power, so an unstable internet connection will result in extra battery usage. De plus, certains serveurs de messagerie terminent prématurément les connexions inactives, tandis que [la norme](https://tools.ietf.org/html/rfc2177) indique qu'une connexion inactive doit rester ouverte pendant 29 minutes. Dans ces cas, vous pouvez synchroniser périodiquement, par exemple chaque heure au lieu de en continu. Note that polling frequently (more than every 30-60 minutes) will likely use more battery power than synchronizing always because connecting to the server and comparing the local and remote messages are expensive operations.
Reconnecting to an email server will use extra battery power, so an unstable internet connection will result in extra battery usage. Also, some email servers prematurely terminate idle connections, while [the standard](https://tools.ietf.org/html/rfc2177) says that an idle connection should be kept open for 29 minutes. In these cases you might want to synchronize periodically, for example each hour, instead of continuously. Note that polling frequently (more than every 30-60 minutes) will likely use more battery power than synchronizing always because connecting to the server and comparing the local and remote messages are expensive operations.
[On some devices](https://dontkillmyapp.com/) it is necessary to *disable* battery optimizations (setup step 4) to keep connections to email servers open. In fact, leaving battery optimizations enabled can result in extra battery usage for all devices, even though this sounds contradictory!
@ -1463,6 +1471,7 @@ For security reasons the files with the original message texts are not accessibl
* Did you know that you can long press the people's icon to show/hide the CC/BCC fields and remember the visibility state for the next time?
* Did you know that you can insert the email addresses of an Android contact group via the three dots overflow menu?
* Did you know that if you select text and hit reply, only the selected text will be quoted?
* Did you know that you can long press the trash icons (both in the message and the bottom action bar) to permanently delete a message or conversation? (version 1.1368+)
<br/>
@ -2329,7 +2338,7 @@ Directly after the first step new messages will be notified. However, only until
Since there is no guarantee that a message text will always be fetched directly after a message header, it is not possible to guarantee that a new message notification with a preview text will always be sent to a wearable.
Si vous pensez que c'est suffisant, vous pouvez activer l'option de notification *Envoyer uniquement des notifications avec un aperçu de message aux objets connectés* et si cela ne fonctionne pas, vous pouvez essayer d'activer l'option de notification *Afficher les notifications avec un texte de prévisualisation uniquement*. Notez que ceci s'applique aux objets connectés n'affichant pas de texte de prévisualisation non plus, même lorsque l'application Android Wear indique que la notification a été envoyée (pont).
If you think this is good enough, you can enable the notification option *Only send notifications with a message preview to wearables* and if this does not work, you can try to enable the notification option *Show notifications with a preview text only*. Note that this applies to wearables not showing a preview text too, even when the Android Wear app says the notification has been sent (bridged).
If you want to have the full message text sent to your wearable, you can enable the notification option *Preview all text*. Note that some wearables are known to crash with this option enabled.
@ -2604,7 +2613,7 @@ There is **only support** on the latest Play store version, the latest GitHub re
F-Droid builds irregularly, which can be problematic when there is an important update. Therefore you are advised to switch to the GitHub release.
The F-Droid version is built from the same source code, but signed differently. Ceci signifie que toutes les fonctionnalités sont également disponibles dans la version F-Droid, à l'exception de l'utilisation de l'assistant de configuration rapide Gmail parce que Google a approuvé (et autorisé) une seule signature d'application. For all other email providers, OAuth access is only available in Play Store versions and Github releases, as the email providers only permit the use of OAuth for official builds.
The F-Droid version is built from the same source code, but signed differently. This means that all features are available in the F-Droid version too, except for using the Gmail quick setup wizard because Google approved (and allows) one app signature only. For all other email providers, OAuth access is only available in Play Store versions and Github releases, as the email providers only permit the use of OAuth for official builds.
Note that you'll need to uninstall the F-Droid build first before you can install a GitHub release because Android refuses to install the same app with a different signature for security reasons.
@ -388,39 +388,47 @@ Les opérations ne sont traitées que lorsqu'il y a une connexion au serveur de
Vous devriez essayer de résoudre ce problème en contactant votre fournisseur ou en obtenant un certificat de sécurité valide car les certificats de sécurité non valides sont non sécurisés et autorisent [man-in-the-middle attacks](https://en.wikipedia.org/wiki/Man-in-the-middle_attack). Si l'argent est un obstacle, vous pouvez obtenir des certificats de sécurité gratuits auprès de [Crypt](https://letsencrypt.org).
Vous pouvez également accepter l'empreinte du certificat de serveur non valide comme indiqué sous le message d'erreur en cochant une case à cocher. En cas de compte existant (IMAP, recevoir) et/ou d'identité (SMTP, envoyer) vous aurez besoin de le vérifier/sauvegarder via les étapes 1 et 2 de configuration pour recevoir le message d'erreur. Ceci va "épingler" le certificat du serveur pour éviter les attaques de man-in-the-middle. Notez que vous devez vous assurer que la connexion Internet que vous utilisez est sûre si vous faites cela.
Alternatively, you can accept the fingerprint of invalid server certificates like this:
Notez que les anciennes versions d'Android peuvent ne pas reconnaître de nouvelles autorités de certification comme Let's Encrypt qui peuvent considérer les connexions comme non sécurisées, voir aussi [ici](https://developer.android.com/training/articles/security-ssl).
1. Make sure you are using a trusted internet connection (no public Wi-Fi networks, etc)
1. Go to the setup screen via the navigation menu (swipe from the left side inwards)
1. In step 1 and 2 tap *Manage* and tap the faulty account and identity
1. Check/save the account and identity
1. Tick the checkbox below the error message and save again
*Ancre de confiance pour le chemin de certification introuvable*
This will "pin" the server certificate to prevent man-in-the-middle attacks.
*... java.security.cert.CertPathValidatorException: Ancre de confiance pour le chemin de certification introuvable... /0> signifie que le gestionnaire de confiance Android par défaut n'a pas pu vérifier la chaîne de certificats du serveur.</p>
Note that older Android versions might not recognize newer certification authorities like Let’s Encrypt causing connections to be considered insecure, see also [here](https://developer.android.com/training/articles/security-ssl).
Vous devriez soit corriger la configuration du serveur ou accepter l'empreinte digitale affichée sous le message d'erreur.
*Trust anchor for certification path not found*
Notez que ce problème peut être causé par le serveur qui n'envoie pas tous les certificats intermédiaires.
*... java.security.cert.CertPathValidatorException: Trust anchor for certification path not found ...* means that the default Android trust manager was not able to verify the server certificate chain.
*Mot de passe vide*
You should either fix the server configuration or accept the fingerprint shown below the error message.
Votre nom d'utilisateur est probablement facilement deviné, donc ce n'est pas sûr.
Note that this problem can be caused by the server not sending all intermediate certificates too.
*Connexion au texte brut*
*Empty password*
Votre nom d'utilisateur et votre mot de passe et tous les messages seront envoyés et reçus non chiffrés, qui est **très peu sécurisé** car une [man-in-the-middle attack](https://en.wikipedia.org/wiki/Man-in-the-middle_attack) est très simple sur une connexion non chiffrée.
Your username is likely easily guessed, so this is insecure.
Si vous voulez toujours utiliser un certificat de sécurité invalide, un mot de passe vide ou une connexion en texte brut vous aurez besoin d'activer des connexions non sécurisées dans les paramètres du compte et/ou de l'identité. STARTTLS doit être sélectionné pour les connexions en texte brut. Si vous activez des connexions non sécurisées, vous devez vous connecter par des réseaux privés et de confiance uniquement et jamais par des réseaux publics, comme ceux offerts dans les hôtels, les aéroports, etc.
*Plain text connection*
Your username and password and all messages will be sent and received unencrypted, which is **very insecure** because a [man-in-the-middle attack](https://en.wikipedia.org/wiki/Man-in-the-middle_attack) is very simple on an unencrypted connection.
If you still want to use an invalid security certificate, an empty password or a plain text connection you'll need to enable insecure connections in the account and/or identity settings. STARTTLS should be selected for plain text connections. If you enable insecure connections, you should connect via private, trusted networks only and never via public networks, like offered in hotels, airports, etc.
<br/>
<aname="faq5"></a>
**(5) Comment puis-je personnaliser la vue des messages ?**
**(5) How can I customize the message view?**
Dans les trois points du menu à débordement, vous pouvez activer ou désactiver ou sélectionner :
In the three dot overflow menu you can enable or disable or select:
* *taille de texte* : pour trois tailles de police différentes
* *Vue compacte* : pour des éléments de message plus condensés et une police de texte de message plus petite
Dans la section d'affichage des paramètres, vous pouvez activer ou désactiver :
In the display section of the settings you can enable or disable:
* *Boîte de réception unifiée* : pour désactiver la boîte de réception unifiée et pour lister les dossiers sélectionnés pour la boîte de réception unifiée
* *Grouper par date*: Affiche la date en en-tête au dessus des messages ayant la même date
@ -437,26 +445,26 @@ Dans la section d'affichage des paramètres, vous pouvez activer ou désactiver
* *Afficher automatiquement les images pour les contacts connus*: pour automatiquement afficher les images pour les contacts de votre appareil, merci de lire[cette FAQ](#user-content-faq35)
* *Barre d'action de conversation*: pour désactiver la barre de navigation du bas
Notez que les messages ne peuvent être prévisualisés que quand le texte du message a été téléchargé. Les textes de messages plus volumineux ne sont pas téléchargés par défaut sur les réseaux limités (généralement mobiles). Vous pouvez changer cela dans les paramètres.
Note that messages can be previewed only when the message text was downloaded. Larger message texts are not downloaded by default on metered (generally mobile) networks. You can change this in the settings.
Si la liste des adresses est longue, vous pouvez réduire la section Adresses avec l'icône *moins* en haut de la section Adresses.
If the list of addresses is long, you can collapse the addresses section with the *less* icon at the top of the addresses section.
Certaines personnes demandent :
Some people ask:
* d'afficher l'objet en gras, mais l'affichage en gras est déjà utilisé pour mettre en évidence les messages non lus
* d'afficher l'adresse ou l'objet en plus grand/plus petit, mais cela interférerait avec l'option de taille de texte
* de déplacer l'étoile à gauche, mais il est beaucoup plus facile de manipuler l'étoile sur le côté droit
Malheureusement, il est impossible de contenter tout le monde et ajouter tout un lot de réglages serait non seulement déroutant, mais également jamais suffisant.
Unfortunately, it is impossible to make everybody happy and adding lots of settings would not only be confusing, but also never be sufficient.
<br/>
<aname="faq6"></a>
**(6) Comment puis-je me connecter à Gmail / G suite ?**
**(6) How can I login to Gmail / G suite?**
Vous pouvez utiliser l'assistant d'installation rapide pour configurer facilement un compte Gmail et une identité.
You can use the quick setup wizard to easily setup a Gmail account and identity.
Si vous ne voulez pas utiliser un compte Gmail sur votre appareil, vous pouvez soit activer l'accès pour les "applications moins sécurisées" et utiliser le mot de passe de votre compte (non conseillé) ou activer l'authentification en deux étapes et utiliser un mot de passe spécifique à l'application. Pour utiliser un mot de passe, vous devrez configurer un compte et une identité via les étapes 1 et 2 de configuration au lieu de l'assistant d'installation rapide.
If you don't want to use an on-device Gmail account, you can either enable access for "less secure apps" and use your account password (not advised) or enable two factor authentication and use an app specific password. To use a password you'll need to setup an account and identity via setup step 1 and 2 instead of via the quick setup wizard.
Please see [this FAQ](#user-content-faq111) on why only on-device accounts can be used.
@ -662,7 +670,7 @@ Please see [here](https://support.google.com/pixelphone/answer/2844832?hl=en) ho
The use of expired keys, inline encrypted/signed messages and hardware security tokens is not supported.
If you are looking for a free (test) S/MIME certificate, see [here](http://kb.mozillazine.org/Getting_an_SMIME_certificate) for the options. Please be sure to [read this first](https://davidroessli.com/logs/2019/09/free-smime-certificates-in-2019/#update20191219) if you want to request an S/MIME Actalis certificate. Si vous recherchez un certificat S/MIME bon marché, j'ai eu une bonne expérience avec [Certum](https://www.certum.eu/en/smime-certificates/).
If you are looking for a free (test) S/MIME certificate, see [here](http://kb.mozillazine.org/Getting_an_SMIME_certificate) for the options. Please be sure to [read this first](https://davidroessli.com/logs/2019/09/free-smime-certificates-in-2019/#update20191219) if you want to request an S/MIME Actalis certificate. If you are looking for a cheap S/MIME certificate, I had a good experience with [Certum](https://www.certum.eu/en/smime-certificates/).
How to extract a public key from a S/MIME certificate:
@ -739,7 +747,7 @@ For setting up an Office 365 account, please see [this FAQ](#user-content-faq156
<aname="faq15"></a>
**(15) Why does the message text keep loading?**
The message header and message body are fetched separately from the server. The message text of larger messages is not being pre-fetched on metered connections and will be fetched on demand on expanding a message. Le texte du message continuera à se charger s'il n'y a pas de connexion au compte, voir aussi la question suivante, ou s'il y a d'autres opérations en cours d'exécution comme la synchronisation des messages.
The message header and message body are fetched separately from the server. The message text of larger messages is not being pre-fetched on metered connections and will be fetched on demand on expanding a message. The message text will keep loading if there is no connection to the account, see also the next question, or if there other operations, like synchronizing messages, are being executed.
You can check the account and folder list for the account and folder state (see the legend for the meaning of the icons) and the operation list accessible via the main navigation menu for pending operations (see [this FAQ](#user-content-faq3) for the meaning of the operations).
@ -909,7 +917,7 @@ The authorization of Gmail accounts setup with the quick wizard needs to be peri
The error *... Authentication failed ... Account not found ...* means that a previously authorized Gmail account was removed from the device.
The errors *... Authentication failed ... Aucun jeton ...* signifie que le gestionnaire de comptes Android n'a pas réussi à actualiser l'autorisation d'un compte Gmail.
The errors *... Authentication failed ... No token ...* means that the Android account manager failed to refresh the authorization of a Gmail account.
The error *... Authentication failed ... Invalid credentials ... network error ...* means that the Android account manager was not able to refresh the authorization of a Gmail account due to problems with the internet connection
@ -1168,7 +1176,7 @@ It is inevitable that synchronizing messages will use battery power because it r
If you are comparing the battery usage of FairEmail with another email client, please make sure the other email client is setup similarly. For example comparing always sync (push messages) and (infrequent) periodic checking for new messages is not a fair comparison.
Reconnecting to an email server will use extra battery power, so an unstable internet connection will result in extra battery usage. De plus, certains serveurs de messagerie terminent prématurément les connexions inactives, tandis que [la norme](https://tools.ietf.org/html/rfc2177) indique qu'une connexion inactive doit rester ouverte pendant 29 minutes. Dans ces cas, vous pouvez synchroniser périodiquement, par exemple chaque heure au lieu de en continu. Note that polling frequently (more than every 30-60 minutes) will likely use more battery power than synchronizing always because connecting to the server and comparing the local and remote messages are expensive operations.
Reconnecting to an email server will use extra battery power, so an unstable internet connection will result in extra battery usage. Also, some email servers prematurely terminate idle connections, while [the standard](https://tools.ietf.org/html/rfc2177) says that an idle connection should be kept open for 29 minutes. In these cases you might want to synchronize periodically, for example each hour, instead of continuously. Note that polling frequently (more than every 30-60 minutes) will likely use more battery power than synchronizing always because connecting to the server and comparing the local and remote messages are expensive operations.
[On some devices](https://dontkillmyapp.com/) it is necessary to *disable* battery optimizations (setup step 4) to keep connections to email servers open. In fact, leaving battery optimizations enabled can result in extra battery usage for all devices, even though this sounds contradictory!
@ -1463,6 +1471,7 @@ For security reasons the files with the original message texts are not accessibl
* Did you know that you can long press the people's icon to show/hide the CC/BCC fields and remember the visibility state for the next time?
* Did you know that you can insert the email addresses of an Android contact group via the three dots overflow menu?
* Did you know that if you select text and hit reply, only the selected text will be quoted?
* Did you know that you can long press the trash icons (both in the message and the bottom action bar) to permanently delete a message or conversation? (version 1.1368+)
<br/>
@ -2329,7 +2338,7 @@ Directly after the first step new messages will be notified. However, only until
Since there is no guarantee that a message text will always be fetched directly after a message header, it is not possible to guarantee that a new message notification with a preview text will always be sent to a wearable.
Si vous pensez que c'est suffisant, vous pouvez activer l'option de notification *Envoyer uniquement des notifications avec un aperçu de message aux objets connectés* et si cela ne fonctionne pas, vous pouvez essayer d'activer l'option de notification *Afficher les notifications avec un texte de prévisualisation uniquement*. Notez que ceci s'applique aux objets connectés n'affichant pas de texte de prévisualisation non plus, même lorsque l'application Android Wear indique que la notification a été envoyée (pont).
If you think this is good enough, you can enable the notification option *Only send notifications with a message preview to wearables* and if this does not work, you can try to enable the notification option *Show notifications with a preview text only*. Note that this applies to wearables not showing a preview text too, even when the Android Wear app says the notification has been sent (bridged).
If you want to have the full message text sent to your wearable, you can enable the notification option *Preview all text*. Note that some wearables are known to crash with this option enabled.
@ -2604,7 +2613,7 @@ There is **only support** on the latest Play store version, the latest GitHub re
F-Droid builds irregularly, which can be problematic when there is an important update. Therefore you are advised to switch to the GitHub release.
The F-Droid version is built from the same source code, but signed differently. Ceci signifie que toutes les fonctionnalités sont également disponibles dans la version F-Droid, à l'exception de l'utilisation de l'assistant de configuration rapide Gmail parce que Google a approuvé (et autorisé) une seule signature d'application. For all other email providers, OAuth access is only available in Play Store versions and Github releases, as the email providers only permit the use of OAuth for official builds.
The F-Droid version is built from the same source code, but signed differently. This means that all features are available in the F-Droid version too, except for using the Gmail quick setup wizard because Google approved (and allows) one app signature only. For all other email providers, OAuth access is only available in Play Store versions and Github releases, as the email providers only permit the use of OAuth for official builds.
Note that you'll need to uninstall the F-Droid build first before you can install a GitHub release because Android refuses to install the same app with a different signature for security reasons.
@ -388,7 +388,15 @@ Operations are processed only when there is a connection to the email server or
You should try to fix this by contacting your provider or by getting a valid security certificate because invalid security certificates are insecure and allow [man-in-the-middle attacks](https://en.wikipedia.org/wiki/Man-in-the-middle_attack). If money is an obstacle, you can get free security certificates from [Let’s Encrypt](https://letsencrypt.org).
Alternatively, you can accept the fingerprint of the invalid server certificate as shown below the error message by ticking a checkbox. In case of an existing account (IMAP, receive) and/or identity (SMTP, send) you will need check/save it via setup step 1 and 2 to get the error message. This will "pin" the server certificate to prevent man-in-the-middle attacks. Note that you should make sure the internet connection you are using is safe if you do this.
Alternatively, you can accept the fingerprint of invalid server certificates like this:
1. Make sure you are using a trusted internet connection (no public Wi-Fi networks, etc)
1. Go to the setup screen via the navigation menu (swipe from the left side inwards)
1. In step 1 and 2 tap *Manage* and tap the faulty account and identity
1. Check/save the account and identity
1. Tick the checkbox below the error message and save again
This will "pin" the server certificate to prevent man-in-the-middle attacks.
Note that older Android versions might not recognize newer certification authorities like Let’s Encrypt causing connections to be considered insecure, see also [here](https://developer.android.com/training/articles/security-ssl).
@ -1463,6 +1471,7 @@ For security reasons the files with the original message texts are not accessibl
* Did you know that you can long press the people's icon to show/hide the CC/BCC fields and remember the visibility state for the next time?
* Did you know that you can insert the email addresses of an Android contact group via the three dots overflow menu?
* Did you know that if you select text and hit reply, only the selected text will be quoted?
* Did you know that you can long press the trash icons (both in the message and the bottom action bar) to permanently delete a message or conversation? (version 1.1368+)
@ -388,7 +388,15 @@ Operations are processed only when there is a connection to the email server or
You should try to fix this by contacting your provider or by getting a valid security certificate because invalid security certificates are insecure and allow [man-in-the-middle attacks](https://en.wikipedia.org/wiki/Man-in-the-middle_attack). If money is an obstacle, you can get free security certificates from [Let’s Encrypt](https://letsencrypt.org).
Alternatively, you can accept the fingerprint of the invalid server certificate as shown below the error message by ticking a checkbox. In case of an existing account (IMAP, receive) and/or identity (SMTP, send) you will need check/save it via setup step 1 and 2 to get the error message. This will "pin" the server certificate to prevent man-in-the-middle attacks. Note that you should make sure the internet connection you are using is safe if you do this.
Alternatively, you can accept the fingerprint of invalid server certificates like this:
1. Make sure you are using a trusted internet connection (no public Wi-Fi networks, etc)
1. Go to the setup screen via the navigation menu (swipe from the left side inwards)
1. In step 1 and 2 tap *Manage* and tap the faulty account and identity
1. Check/save the account and identity
1. Tick the checkbox below the error message and save again
This will "pin" the server certificate to prevent man-in-the-middle attacks.
Note that older Android versions might not recognize newer certification authorities like Let’s Encrypt causing connections to be considered insecure, see also [here](https://developer.android.com/training/articles/security-ssl).
@ -1463,6 +1471,7 @@ For security reasons the files with the original message texts are not accessibl
* Did you know that you can long press the people's icon to show/hide the CC/BCC fields and remember the visibility state for the next time?
* Did you know that you can insert the email addresses of an Android contact group via the three dots overflow menu?
* Did you know that if you select text and hit reply, only the selected text will be quoted?
* Did you know that you can long press the trash icons (both in the message and the bottom action bar) to permanently delete a message or conversation? (version 1.1368+)
<br/>
@ -2778,19 +2787,19 @@ If I could, I would add a setting to select the primary and accent color right a
## Asistencia Técnica
So se soportan as derradeiras versións da Play store e de Github. Isto significa tamén que non se soporta volver a versións antigas.
Only the latest Play store version and latest GitHub release are supported. This also means that downgrading is not supported.
As características que se pidan deberían:
Requested features should:
* ser de utilidadepara a maioría da xente
* non complicar o uso de FairEmail
* encaixar na filosofía de FairEmail (orientado á privacidade e coa seguridade en mente)
* cumprir cos estándares comúns (IMAP, SMTP, etc)
As características que non cumpran con estes requirimentos van ser probablemente rexeitadas. Isto tamén é para facer posible o mantemento e a asistencia técnica posibles ao longo prazo.
Features not fulfilling these requirements will likely be rejected. This is also to keep maintenance and support in the long run feasible.
Se ten algunha dúbida, quere pedir unha característica ou avisar dun fallo, use [este formulario](https://contact.faircode.eu/?product=fairemailsupport).
If you have a question, want to request a feature or report a bug, please use [this form](https://contact.faircode.eu/?product=fairemailsupport).
O seguimento de fallos de GitHub desactivouse porque non se estaba a usar correctamente de maneira habitual.
GitHub issues are disabled due to frequent misusage.
@ -388,7 +388,15 @@ Operations are processed only when there is a connection to the email server or
You should try to fix this by contacting your provider or by getting a valid security certificate because invalid security certificates are insecure and allow [man-in-the-middle attacks](https://en.wikipedia.org/wiki/Man-in-the-middle_attack). If money is an obstacle, you can get free security certificates from [Let’s Encrypt](https://letsencrypt.org).
Alternatively, you can accept the fingerprint of the invalid server certificate as shown below the error message by ticking a checkbox. In case of an existing account (IMAP, receive) and/or identity (SMTP, send) you will need check/save it via setup step 1 and 2 to get the error message. This will "pin" the server certificate to prevent man-in-the-middle attacks. Note that you should make sure the internet connection you are using is safe if you do this.
Alternatively, you can accept the fingerprint of invalid server certificates like this:
1. Make sure you are using a trusted internet connection (no public Wi-Fi networks, etc)
1. Go to the setup screen via the navigation menu (swipe from the left side inwards)
1. In step 1 and 2 tap *Manage* and tap the faulty account and identity
1. Check/save the account and identity
1. Tick the checkbox below the error message and save again
This will "pin" the server certificate to prevent man-in-the-middle attacks.
Note that older Android versions might not recognize newer certification authorities like Let’s Encrypt causing connections to be considered insecure, see also [here](https://developer.android.com/training/articles/security-ssl).
@ -1463,6 +1471,7 @@ For security reasons the files with the original message texts are not accessibl
* Did you know that you can long press the people's icon to show/hide the CC/BCC fields and remember the visibility state for the next time?
* Did you know that you can insert the email addresses of an Android contact group via the three dots overflow menu?
* Did you know that if you select text and hit reply, only the selected text will be quoted?
* Did you know that you can long press the trash icons (both in the message and the bottom action bar) to permanently delete a message or conversation? (version 1.1368+)
@ -388,7 +388,15 @@ Operations are processed only when there is a connection to the email server or
You should try to fix this by contacting your provider or by getting a valid security certificate because invalid security certificates are insecure and allow [man-in-the-middle attacks](https://en.wikipedia.org/wiki/Man-in-the-middle_attack). If money is an obstacle, you can get free security certificates from [Let’s Encrypt](https://letsencrypt.org).
Alternatively, you can accept the fingerprint of the invalid server certificate as shown below the error message by ticking a checkbox. In case of an existing account (IMAP, receive) and/or identity (SMTP, send) you will need check/save it via setup step 1 and 2 to get the error message. This will "pin" the server certificate to prevent man-in-the-middle attacks. Note that you should make sure the internet connection you are using is safe if you do this.
Alternatively, you can accept the fingerprint of invalid server certificates like this:
1. Make sure you are using a trusted internet connection (no public Wi-Fi networks, etc)
1. Go to the setup screen via the navigation menu (swipe from the left side inwards)
1. In step 1 and 2 tap *Manage* and tap the faulty account and identity
1. Check/save the account and identity
1. Tick the checkbox below the error message and save again
This will "pin" the server certificate to prevent man-in-the-middle attacks.
Note that older Android versions might not recognize newer certification authorities like Let’s Encrypt causing connections to be considered insecure, see also [here](https://developer.android.com/training/articles/security-ssl).
@ -1463,6 +1471,7 @@ For security reasons the files with the original message texts are not accessibl
* Did you know that you can long press the people's icon to show/hide the CC/BCC fields and remember the visibility state for the next time?
* Did you know that you can insert the email addresses of an Android contact group via the three dots overflow menu?
* Did you know that if you select text and hit reply, only the selected text will be quoted?
* Did you know that you can long press the trash icons (both in the message and the bottom action bar) to permanently delete a message or conversation? (version 1.1368+)
@ -388,7 +388,15 @@ Operations are processed only when there is a connection to the email server or
You should try to fix this by contacting your provider or by getting a valid security certificate because invalid security certificates are insecure and allow [man-in-the-middle attacks](https://en.wikipedia.org/wiki/Man-in-the-middle_attack). If money is an obstacle, you can get free security certificates from [Let’s Encrypt](https://letsencrypt.org).
Alternatively, you can accept the fingerprint of the invalid server certificate as shown below the error message by ticking a checkbox. In case of an existing account (IMAP, receive) and/or identity (SMTP, send) you will need check/save it via setup step 1 and 2 to get the error message. This will "pin" the server certificate to prevent man-in-the-middle attacks. Note that you should make sure the internet connection you are using is safe if you do this.
Alternatively, you can accept the fingerprint of invalid server certificates like this:
1. Make sure you are using a trusted internet connection (no public Wi-Fi networks, etc)
1. Go to the setup screen via the navigation menu (swipe from the left side inwards)
1. In step 1 and 2 tap *Manage* and tap the faulty account and identity
1. Check/save the account and identity
1. Tick the checkbox below the error message and save again
This will "pin" the server certificate to prevent man-in-the-middle attacks.
Note that older Android versions might not recognize newer certification authorities like Let’s Encrypt causing connections to be considered insecure, see also [here](https://developer.android.com/training/articles/security-ssl).
@ -631,9 +639,9 @@ Private keys are stored by Android and can be imported via the Android advanced
Note that certificates can contains multiple keys for multiple purposes, for example for authentication, encryption and signing. Android only imports the first key, so to import all the keys, the certificate must first be split. This is not very trivial and you are advised to ask the certificate supplier for support.
Az alkalmazás támogat az RSA-n kívül számos más aláíráshoz használható algoritmust is, azonban kérjük vegye figyelembe, hogy ezeket nem minden Levelező kliens alkalmazás képes értelmezni. A titkosításhoz csak szimmertikus algoritmus használható, általában a legeelterjettebb ezek közül az RSA algoritmus.
Note that S/MIMEsigning with other algorithms than RSA is supported, but be aware that other email clients might not support this. S/MIME encryption is possible with symmetric algorithms only, which means in practice using RSA.
Az alapértelemzett titkosítási algoritmus a PGP. Amennyiben viszont mást választ, az lesz az alapértelmezett a kiválasztott levelezési fiókhoz. You might need to enable the send options in the three dots menu again to be able to select the encryption method.
The default encryption method is PGP, but the last used encryption method will be remembered for the selected identity for the next time. You might need to enable the send options in the three dots menu again to be able to select the encryption method.
To allow different private keys for the same email address, FairEmail will always let you select a key when there are multiple identities with the same email address for the same account.
@ -1463,6 +1471,7 @@ For security reasons the files with the original message texts are not accessibl
* Did you know that you can long press the people's icon to show/hide the CC/BCC fields and remember the visibility state for the next time?
* Did you know that you can insert the email addresses of an Android contact group via the three dots overflow menu?
* Did you know that if you select text and hit reply, only the selected text will be quoted?
* Did you know that you can long press the trash icons (both in the message and the bottom action bar) to permanently delete a message or conversation? (version 1.1368+)
@ -388,7 +388,15 @@ Operations are processed only when there is a connection to the email server or
You should try to fix this by contacting your provider or by getting a valid security certificate because invalid security certificates are insecure and allow [man-in-the-middle attacks](https://en.wikipedia.org/wiki/Man-in-the-middle_attack). If money is an obstacle, you can get free security certificates from [Let’s Encrypt](https://letsencrypt.org).
Alternatively, you can accept the fingerprint of the invalid server certificate as shown below the error message by ticking a checkbox. In case of an existing account (IMAP, receive) and/or identity (SMTP, send) you will need check/save it via setup step 1 and 2 to get the error message. This will "pin" the server certificate to prevent man-in-the-middle attacks. Note that you should make sure the internet connection you are using is safe if you do this.
Alternatively, you can accept the fingerprint of invalid server certificates like this:
1. Make sure you are using a trusted internet connection (no public Wi-Fi networks, etc)
1. Go to the setup screen via the navigation menu (swipe from the left side inwards)
1. In step 1 and 2 tap *Manage* and tap the faulty account and identity
1. Check/save the account and identity
1. Tick the checkbox below the error message and save again
This will "pin" the server certificate to prevent man-in-the-middle attacks.
Note that older Android versions might not recognize newer certification authorities like Let’s Encrypt causing connections to be considered insecure, see also [here](https://developer.android.com/training/articles/security-ssl).
@ -1463,6 +1471,7 @@ For security reasons the files with the original message texts are not accessibl
* Did you know that you can long press the people's icon to show/hide the CC/BCC fields and remember the visibility state for the next time?
* Did you know that you can insert the email addresses of an Android contact group via the three dots overflow menu?
* Did you know that if you select text and hit reply, only the selected text will be quoted?
* Did you know that you can long press the trash icons (both in the message and the bottom action bar) to permanently delete a message or conversation? (version 1.1368+)
@ -388,7 +388,15 @@ Operations are processed only when there is a connection to the email server or
You should try to fix this by contacting your provider or by getting a valid security certificate because invalid security certificates are insecure and allow [man-in-the-middle attacks](https://en.wikipedia.org/wiki/Man-in-the-middle_attack). If money is an obstacle, you can get free security certificates from [Let’s Encrypt](https://letsencrypt.org).
Alternatively, you can accept the fingerprint of the invalid server certificate as shown below the error message by ticking a checkbox. In case of an existing account (IMAP, receive) and/or identity (SMTP, send) you will need check/save it via setup step 1 and 2 to get the error message. This will "pin" the server certificate to prevent man-in-the-middle attacks. Note that you should make sure the internet connection you are using is safe if you do this.
Alternatively, you can accept the fingerprint of invalid server certificates like this:
1. Make sure you are using a trusted internet connection (no public Wi-Fi networks, etc)
1. Go to the setup screen via the navigation menu (swipe from the left side inwards)
1. In step 1 and 2 tap *Manage* and tap the faulty account and identity
1. Check/save the account and identity
1. Tick the checkbox below the error message and save again
This will "pin" the server certificate to prevent man-in-the-middle attacks.
Note that older Android versions might not recognize newer certification authorities like Let’s Encrypt causing connections to be considered insecure, see also [here](https://developer.android.com/training/articles/security-ssl).
@ -1463,6 +1471,7 @@ For security reasons the files with the original message texts are not accessibl
* Did you know that you can long press the people's icon to show/hide the CC/BCC fields and remember the visibility state for the next time?
* Did you know that you can insert the email addresses of an Android contact group via the three dots overflow menu?
* Did you know that if you select text and hit reply, only the selected text will be quoted?
* Did you know that you can long press the trash icons (both in the message and the bottom action bar) to permanently delete a message or conversation? (version 1.1368+)
@ -388,7 +388,15 @@ Operations are processed only when there is a connection to the email server or
You should try to fix this by contacting your provider or by getting a valid security certificate because invalid security certificates are insecure and allow [man-in-the-middle attacks](https://en.wikipedia.org/wiki/Man-in-the-middle_attack). If money is an obstacle, you can get free security certificates from [Let’s Encrypt](https://letsencrypt.org).
Alternatively, you can accept the fingerprint of the invalid server certificate as shown below the error message by ticking a checkbox. In case of an existing account (IMAP, receive) and/or identity (SMTP, send) you will need check/save it via setup step 1 and 2 to get the error message. This will "pin" the server certificate to prevent man-in-the-middle attacks. Note that you should make sure the internet connection you are using is safe if you do this.
Alternatively, you can accept the fingerprint of invalid server certificates like this:
1. Make sure you are using a trusted internet connection (no public Wi-Fi networks, etc)
1. Go to the setup screen via the navigation menu (swipe from the left side inwards)
1. In step 1 and 2 tap *Manage* and tap the faulty account and identity
1. Check/save the account and identity
1. Tick the checkbox below the error message and save again
This will "pin" the server certificate to prevent man-in-the-middle attacks.
Note that older Android versions might not recognize newer certification authorities like Let’s Encrypt causing connections to be considered insecure, see also [here](https://developer.android.com/training/articles/security-ssl).
@ -1463,6 +1471,7 @@ For security reasons the files with the original message texts are not accessibl
* Did you know that you can long press the people's icon to show/hide the CC/BCC fields and remember the visibility state for the next time?
* Did you know that you can insert the email addresses of an Android contact group via the three dots overflow menu?
* Did you know that if you select text and hit reply, only the selected text will be quoted?
* Did you know that you can long press the trash icons (both in the message and the bottom action bar) to permanently delete a message or conversation? (version 1.1368+)
@ -388,7 +388,15 @@ Operations are processed only when there is a connection to the email server or
You should try to fix this by contacting your provider or by getting a valid security certificate because invalid security certificates are insecure and allow [man-in-the-middle attacks](https://en.wikipedia.org/wiki/Man-in-the-middle_attack). If money is an obstacle, you can get free security certificates from [Let’s Encrypt](https://letsencrypt.org).
Alternatively, you can accept the fingerprint of the invalid server certificate as shown below the error message by ticking a checkbox. In case of an existing account (IMAP, receive) and/or identity (SMTP, send) you will need check/save it via setup step 1 and 2 to get the error message. This will "pin" the server certificate to prevent man-in-the-middle attacks. Note that you should make sure the internet connection you are using is safe if you do this.
Alternatively, you can accept the fingerprint of invalid server certificates like this:
1. Make sure you are using a trusted internet connection (no public Wi-Fi networks, etc)
1. Go to the setup screen via the navigation menu (swipe from the left side inwards)
1. In step 1 and 2 tap *Manage* and tap the faulty account and identity
1. Check/save the account and identity
1. Tick the checkbox below the error message and save again
This will "pin" the server certificate to prevent man-in-the-middle attacks.
Note that older Android versions might not recognize newer certification authorities like Let’s Encrypt causing connections to be considered insecure, see also [here](https://developer.android.com/training/articles/security-ssl).
@ -1463,6 +1471,7 @@ For security reasons the files with the original message texts are not accessibl
* Did you know that you can long press the people's icon to show/hide the CC/BCC fields and remember the visibility state for the next time?
* Did you know that you can insert the email addresses of an Android contact group via the three dots overflow menu?
* Did you know that if you select text and hit reply, only the selected text will be quoted?
* Did you know that you can long press the trash icons (both in the message and the bottom action bar) to permanently delete a message or conversation? (version 1.1368+)
@ -388,7 +388,15 @@ Operations are processed only when there is a connection to the email server or
You should try to fix this by contacting your provider or by getting a valid security certificate because invalid security certificates are insecure and allow [man-in-the-middle attacks](https://en.wikipedia.org/wiki/Man-in-the-middle_attack). If money is an obstacle, you can get free security certificates from [Let’s Encrypt](https://letsencrypt.org).
Alternatively, you can accept the fingerprint of the invalid server certificate as shown below the error message by ticking a checkbox. In case of an existing account (IMAP, receive) and/or identity (SMTP, send) you will need check/save it via setup step 1 and 2 to get the error message. This will "pin" the server certificate to prevent man-in-the-middle attacks. Note that you should make sure the internet connection you are using is safe if you do this.
Alternatively, you can accept the fingerprint of invalid server certificates like this:
1. Make sure you are using a trusted internet connection (no public Wi-Fi networks, etc)
1. Go to the setup screen via the navigation menu (swipe from the left side inwards)
1. In step 1 and 2 tap *Manage* and tap the faulty account and identity
1. Check/save the account and identity
1. Tick the checkbox below the error message and save again
This will "pin" the server certificate to prevent man-in-the-middle attacks.
Note that older Android versions might not recognize newer certification authorities like Let’s Encrypt causing connections to be considered insecure, see also [here](https://developer.android.com/training/articles/security-ssl).
@ -1463,6 +1471,7 @@ For security reasons the files with the original message texts are not accessibl
* Did you know that you can long press the people's icon to show/hide the CC/BCC fields and remember the visibility state for the next time?
* Did you know that you can insert the email addresses of an Android contact group via the three dots overflow menu?
* Did you know that if you select text and hit reply, only the selected text will be quoted?
* Did you know that you can long press the trash icons (both in the message and the bottom action bar) to permanently delete a message or conversation? (version 1.1368+)
@ -388,7 +388,15 @@ Operations are processed only when there is a connection to the email server or
You should try to fix this by contacting your provider or by getting a valid security certificate because invalid security certificates are insecure and allow [man-in-the-middle attacks](https://en.wikipedia.org/wiki/Man-in-the-middle_attack). If money is an obstacle, you can get free security certificates from [Let’s Encrypt](https://letsencrypt.org).
Alternatively, you can accept the fingerprint of the invalid server certificate as shown below the error message by ticking a checkbox. In case of an existing account (IMAP, receive) and/or identity (SMTP, send) you will need check/save it via setup step 1 and 2 to get the error message. This will "pin" the server certificate to prevent man-in-the-middle attacks. Note that you should make sure the internet connection you are using is safe if you do this.
Alternatively, you can accept the fingerprint of invalid server certificates like this:
1. Make sure you are using a trusted internet connection (no public Wi-Fi networks, etc)
1. Go to the setup screen via the navigation menu (swipe from the left side inwards)
1. In step 1 and 2 tap *Manage* and tap the faulty account and identity
1. Check/save the account and identity
1. Tick the checkbox below the error message and save again
This will "pin" the server certificate to prevent man-in-the-middle attacks.
Note that older Android versions might not recognize newer certification authorities like Let’s Encrypt causing connections to be considered insecure, see also [here](https://developer.android.com/training/articles/security-ssl).
@ -1463,6 +1471,7 @@ For security reasons the files with the original message texts are not accessibl
* Did you know that you can long press the people's icon to show/hide the CC/BCC fields and remember the visibility state for the next time?
* Did you know that you can insert the email addresses of an Android contact group via the three dots overflow menu?
* Did you know that if you select text and hit reply, only the selected text will be quoted?
* Did you know that you can long press the trash icons (both in the message and the bottom action bar) to permanently delete a message or conversation? (version 1.1368+)
@ -388,7 +388,15 @@ Operations are processed only when there is a connection to the email server or
You should try to fix this by contacting your provider or by getting a valid security certificate because invalid security certificates are insecure and allow [man-in-the-middle attacks](https://en.wikipedia.org/wiki/Man-in-the-middle_attack). If money is an obstacle, you can get free security certificates from [Let’s Encrypt](https://letsencrypt.org).
Alternatively, you can accept the fingerprint of the invalid server certificate as shown below the error message by ticking a checkbox. In case of an existing account (IMAP, receive) and/or identity (SMTP, send) you will need check/save it via setup step 1 and 2 to get the error message. This will "pin" the server certificate to prevent man-in-the-middle attacks. Note that you should make sure the internet connection you are using is safe if you do this.
Alternatively, you can accept the fingerprint of invalid server certificates like this:
1. Make sure you are using a trusted internet connection (no public Wi-Fi networks, etc)
1. Go to the setup screen via the navigation menu (swipe from the left side inwards)
1. In step 1 and 2 tap *Manage* and tap the faulty account and identity
1. Check/save the account and identity
1. Tick the checkbox below the error message and save again
This will "pin" the server certificate to prevent man-in-the-middle attacks.
Note that older Android versions might not recognize newer certification authorities like Let’s Encrypt causing connections to be considered insecure, see also [here](https://developer.android.com/training/articles/security-ssl).
@ -1463,6 +1471,7 @@ For security reasons the files with the original message texts are not accessibl
* Did you know that you can long press the people's icon to show/hide the CC/BCC fields and remember the visibility state for the next time?
* Did you know that you can insert the email addresses of an Android contact group via the three dots overflow menu?
* Did you know that if you select text and hit reply, only the selected text will be quoted?
* Did you know that you can long press the trash icons (both in the message and the bottom action bar) to permanently delete a message or conversation? (version 1.1368+)
@ -388,7 +388,15 @@ Operations are processed only when there is a connection to the email server or
You should try to fix this by contacting your provider or by getting a valid security certificate because invalid security certificates are insecure and allow [man-in-the-middle attacks](https://en.wikipedia.org/wiki/Man-in-the-middle_attack). If money is an obstacle, you can get free security certificates from [Let’s Encrypt](https://letsencrypt.org).
Alternatively, you can accept the fingerprint of the invalid server certificate as shown below the error message by ticking a checkbox. In case of an existing account (IMAP, receive) and/or identity (SMTP, send) you will need check/save it via setup step 1 and 2 to get the error message. This will "pin" the server certificate to prevent man-in-the-middle attacks. Note that you should make sure the internet connection you are using is safe if you do this.
Alternatively, you can accept the fingerprint of invalid server certificates like this:
1. Make sure you are using a trusted internet connection (no public Wi-Fi networks, etc)
1. Go to the setup screen via the navigation menu (swipe from the left side inwards)
1. In step 1 and 2 tap *Manage* and tap the faulty account and identity
1. Check/save the account and identity
1. Tick the checkbox below the error message and save again
This will "pin" the server certificate to prevent man-in-the-middle attacks.
Note that older Android versions might not recognize newer certification authorities like Let’s Encrypt causing connections to be considered insecure, see also [here](https://developer.android.com/training/articles/security-ssl).
@ -1463,6 +1471,7 @@ For security reasons the files with the original message texts are not accessibl
* Did you know that you can long press the people's icon to show/hide the CC/BCC fields and remember the visibility state for the next time?
* Did you know that you can insert the email addresses of an Android contact group via the three dots overflow menu?
* Did you know that if you select text and hit reply, only the selected text will be quoted?
* Did you know that you can long press the trash icons (both in the message and the bottom action bar) to permanently delete a message or conversation? (version 1.1368+)
@ -388,39 +388,47 @@ Operacje są przetwarzane tylko wtedy, gdy istnieje połączenie z serwerem e-ma
Powinieneś spróbować to naprawić, kontaktując się z dostawcą lub uzyskując ważny certyfikat bezpieczeństwa ponieważ nieprawidłowe certyfikaty bezpieczeństwa są niepewne i umożliwiają [ ataki typu man-in-the-middle ](https://en.wikipedia.org/wiki/Man-in-the-middle_attack). Jeśli pieniądze są przeszkodą, możesz otrzymać darmowe certyfikaty bezpieczeństwa od [Let’s Encrypt](https://letsencrypt.org).
Alternatively, you can accept the fingerprint of the invalid server certificate as shown below the error message by ticking a checkbox. In case of an existing account (IMAP, receive) and/or identity (SMTP, send) you will need check/save it via setup step 1 and 2 to get the error message. This will "pin" the server certificate to prevent man-in-the-middle attacks. Note that you should make sure the internet connection you are using is safe if you do this.
Alternatively, you can accept the fingerprint of invalid server certificates like this:
Pamiętaj, że starsze wersje Androida mogą nie rozpoznawać nowszych urzędów certyfikacji, takich jak Let's Encrypt, powodując, że połączenia są uważane za niebezpieczne, patrz także [ tutaj ](https://developer.android.com/training/articles/security-ssl).
1. Make sure you are using a trusted internet connection (no public Wi-Fi networks, etc)
1. Go to the setup screen via the navigation menu (swipe from the left side inwards)
1. In step 1 and 2 tap *Manage* and tap the faulty account and identity
1. Check/save the account and identity
1. Tick the checkbox below the error message and save again
*Nie znaleziono kotwicy zaufania dla ścieżki certyfikacji*
This will "pin" the server certificate to prevent man-in-the-middle attacks.
*... java.security.cert.CertPathValidatorException: Trust anchor for certification path not found ...* oznacza, że domyślny menedżer zaufania Androida nie mógł zweryfikować łańcucha certyfikatów serwera.
Note that older Android versions might not recognize newer certification authorities like Let’s Encrypt causing connections to be considered insecure, see also [here](https://developer.android.com/training/articles/security-ssl).
Powinieneś naprawić konfigurację serwera lub zaakceptować odcisk palca pokazany poniżej komunikatu o błędzie.
*Trust anchor for certification path not found*
Pamiętaj, że ten problem może być spowodowany tym, że serwer nie wysyła również wszystkich certyfikatów pośrednich.
*... java.security.cert.CertPathValidatorException: Trust anchor for certification path not found ...* means that the default Android trust manager was not able to verify the server certificate chain.
*Puste hasło*
You should either fix the server configuration or accept the fingerprint shown below the error message.
Twoja nazwa użytkownika jest łatwa do odgadnięcia, więc jest to niepewne.
Note that this problem can be caused by the server not sending all intermediate certificates too.
*Zwykłe połączenie tekstowe*
*Empty password*
Twoja nazwa użytkownika i hasło oraz wszystkie wiadomości będą wysyłane i odbierane w postaci niezaszyfrowanej, co jest ** bardzo niepewne ** ponieważ [ atak typu man-in-the-middle ](https://en.wikipedia.org/wiki/Man-in-the-middle_attack) jest bardzo prosty na nieszyfrowanym połączeniu.
Your username is likely easily guessed, so this is insecure.
Jeśli nadal chcesz używać nieprawidłowego certyfikatu bezpieczeństwa, pustego hasła lub połączenia zwykłego tekstu musisz włączyć niezabezpieczone połączenia w ustawieniach konta i/lub tożsamości. STARTTLS powinien być wybrany dla połączeń tekstowych. Jeśli włączysz niezabezpieczone połączenia, powinieneś łączyć się tylko za pośrednictwem prywatnych, zaufanych sieci i nigdy za pośrednictwem sieci publicznych, takich jakie są oferowane w hotelach, portach lotniczych itp.
*Plain text connection*
Your username and password and all messages will be sent and received unencrypted, which is **very insecure** because a [man-in-the-middle attack](https://en.wikipedia.org/wiki/Man-in-the-middle_attack) is very simple on an unencrypted connection.
If you still want to use an invalid security certificate, an empty password or a plain text connection you'll need to enable insecure connections in the account and/or identity settings. STARTTLS should be selected for plain text connections. If you enable insecure connections, you should connect via private, trusted networks only and never via public networks, like offered in hotels, airports, etc.
<br/>
<aname="faq5"></a>
**(5) Jak mogę dostosować widok wiadomości?**
**(5) How can I customize the message view?**
W menu trzech kropek możesz włączyć, wyłączyć lub wybrać:
In the three dot overflow menu you can enable or disable or select:
* *rozmiar tekstu*: dla trzech różnych rozmiarów czcionki
* *widok kompaktowy*: dla bardziej zwartych elementów wiadomości i mniejszej czcionki tekstowej
W ustawieniach wyświetlania możesz włączyć lub wyłączyć:
In the display section of the settings you can enable or disable:
* *Wspólna skrzynka*: aby wyłączyć wspólną skrzynkę odbiorczą i wyświetlić listę folderów wybranych dla wspólnej skrzynki odbiorczej
* *Grupuj według daty*: pokaż nagłówek daty powyżej wiadomości z tą samą datą
@ -437,24 +445,24 @@ W ustawieniach wyświetlania możesz włączyć lub wyłączyć:
* *Automatycznie pokazuj obrazy dla znanych kontaktów*: aby automatycznie pokazać zdjęcia dla kontaktów na Twoim urządzeniu, przeczytaj [to FAQ](#user-content-faq35)
* *Pokaż pasek akcji konwersacji*: aby wyłączyć dolny pasek nawigacji
Pamiętaj, że podgląd wiadomości można wyświetlić tylko wtedy, gdy tekst wiadomości został pobrany. Większe wiadomości nie są pobierane (domyślnie) w sieciach komórkowych (zazwyczaj mobilnych). Możesz to zmienić w ustawieniach.
Note that messages can be previewed only when the message text was downloaded. Larger message texts are not downloaded by default on metered (generally mobile) networks. You can change this in the settings.
Jeśli lista adresów jest długa, możesz zwinąć sekcję adresów za pomocą ikony *less* u góry sekcji adresów.
If the list of addresses is long, you can collapse the addresses section with the *less* icon at the top of the addresses section.
Niektórzy ludzie proszą:
Some people ask:
* aby pokazać temat pogrubiony, ale pogrubienie jest już używane do podświetlenia nieprzeczytanych wiadomości
* aby wyświetlić większy lub mniejszy adres lub temat, ale mogłoby to zakłócić opcję rozmiaru tekstu
* aby przesunąć gwiazdkę w lewo, ale o wiele łatwiej jest operować gwiazdą po prawej stronie
Niestety, nie można uszczęśliwić wszystkich, a dodanie wielu ustawień byłoby nie tylko mylące, ale także nigdy wystarczające.
Unfortunately, it is impossible to make everybody happy and adding lots of settings would not only be confusing, but also never be sufficient.
<br/>
<aname="faq6"></a>
**(6) Jak mogę zalogować się do Gmail / G suite?**
**(6) How can I login to Gmail / G suite?**
Możesz użyć kreatora szybkiej konfiguracji, aby łatwo skonfigurować konto Gmail i tożsamość.
You can use the quick setup wizard to easily setup a Gmail account and identity.
If you don't want to use an on-device Gmail account, you can either enable access for "less secure apps" and use your account password (not advised) or enable two factor authentication and use an app specific password. To use a password you'll need to setup an account and identity via setup step 1 and 2 instead of via the quick setup wizard.
@ -1463,6 +1471,7 @@ For security reasons the files with the original message texts are not accessibl
* Did you know that you can long press the people's icon to show/hide the CC/BCC fields and remember the visibility state for the next time?
* Did you know that you can insert the email addresses of an Android contact group via the three dots overflow menu?
* Did you know that if you select text and hit reply, only the selected text will be quoted?
* Did you know that you can long press the trash icons (both in the message and the bottom action bar) to permanently delete a message or conversation? (version 1.1368+)
<br/>
@ -2322,8 +2331,8 @@ The message *Message too large or too complex to display* will be shown if there
FairEmail fetches a message in two steps:
1. Pobranie nagłówków wiadomości
1. Pobranie tekstu wiadomości i załączników
1. Fetch message headers
1. Fetch message text and attachments
Directly after the first step new messages will be notified. However, only until after the second step the message text will be available. FairEmail updates exiting notifications with a preview of the message text, but unfortunately wearable notifications cannot be updated.
@ -388,39 +388,47 @@ Operações são processadas somente quando há uma conexão com o servidor de e
Você deve tentar corrigir isso entrando em contato com seu provedor ou obtendo um certificado de segurança válido porque certificados de segurança inválidos são inseguros e permitem os chamados [ ataques man-in-the-middle](https://en.wikipedia.org/wiki/Man-in-the-middle_attack). Se dinheiro for um obstáculo, você pode obter certificados de segurança gratuitos no [Let's Encrypt](https://letsencrypt.org).
Alternatively, you can accept the fingerprint of the invalid server certificate as shown below the error message by ticking a checkbox. In case of an existing account (IMAP, receive) and/or identity (SMTP, send) you will need check/save it via setup step 1 and 2 to get the error message. This will "pin" the server certificate to prevent man-in-the-middle attacks. Note that you should make sure the internet connection you are using is safe if you do this.
Alternatively, you can accept the fingerprint of invalid server certificates like this:
Observe ainda que versões mais antigas do Android podem não reconhecer as autoridades de certificados mais recentes como o Encrypt, fazendo com que as conexões sejam consideradas inseguras, veja também [aqui](https://developer.android.com/training/articles/security-ssl).
1. Make sure you are using a trusted internet connection (no public Wi-Fi networks, etc)
1. Go to the setup screen via the navigation menu (swipe from the left side inwards)
1. In step 1 and 2 tap *Manage* and tap the faulty account and identity
1. Check/save the account and identity
1. Tick the checkbox below the error message and save again
*Âncora confiável para o caminho de certificação não encontrada*
This will "pin" the server certificate to prevent man-in-the-middle attacks.
*... java.security,cet.CertPathValidatorException: Trust anchor for certification path not found ...* significa que o gerenciador de confiança padrão do Android não pôde verificar a cadeia de certificados do servidor.
Note that older Android versions might not recognize newer certification authorities like Let’s Encrypt causing connections to be considered insecure, see also [here](https://developer.android.com/training/articles/security-ssl).
Você deve ou corrigir a configuração do servidor, ou aceitar a impressão digital mostrada abaixo da mensagem de erro.
*Trust anchor for certification path not found*
Observe que esse problema pode ser causado pelo fato de o servidor não estar enviando todos os certificados intermediários também.
*... java.security.cert.CertPathValidatorException: Trust anchor for certification path not found ...* means that the default Android trust manager was not able to verify the server certificate chain.
*Senha em branco*
You should either fix the server configuration or accept the fingerprint shown below the error message.
Seu nome de usuário é provavelmente facilmente descoberto, então isso não é seguro.
Note that this problem can be caused by the server not sending all intermediate certificates too.
*Conexão de texto simples*
*Empty password*
Seu nome de usuário, senha e todas as mensagens serão enviadas e recebidas sem criptografia, o que é **muito inseguro** porque um [ataque man-in=the-middle](https://en.wikipedia.org/wiki/Man-in-the-middle_attack) é muito fácil em uma conexão não criptografada.
Your username is likely easily guessed, so this is insecure.
Se ainda assim você quiser utilizar um certificado inválido, uma senha em branco ou uma conexão de texto simples, você precisará habilitar conexões inseguras nas configurações de conta/identidade. O STARTTLS deve ser utilizado para conexões de texto simples. Se você habilitar conexões inseguras, você deve se conectar através de redes privadas e confiáveis e nunca através de redes públicas, como as oferecidas em hóteis, aeroportos etc.
*Plain text connection*
Your username and password and all messages will be sent and received unencrypted, which is **very insecure** because a [man-in-the-middle attack](https://en.wikipedia.org/wiki/Man-in-the-middle_attack) is very simple on an unencrypted connection.
If you still want to use an invalid security certificate, an empty password or a plain text connection you'll need to enable insecure connections in the account and/or identity settings. STARTTLS should be selected for plain text connections. If you enable insecure connections, you should connect via private, trusted networks only and never via public networks, like offered in hotels, airports, etc.
<br/>
<aname="faq5"></a>
**(5) Como posso personalizar a visualização de mensagens?**
**(5) How can I customize the message view?**
No menu de três pontos você pode ativar, desativar ou selecionar:
In the three dot overflow menu you can enable or disable or select:
* *tamanho do texto*: para três tamanhos de texto diferentes
* *visualização compacta*: para mensagens mais compactas e uma fonte de mensagem menor
Na seção de exibição das configurações, você pode ativar ou desativar:
In the display section of the settings you can enable or disable:
* *Caixa de entrada unificada*: para desativar a caixa de entrada unificada e mostrar pastas distintas no lugar da caixa unificada
* *Agrupar por data*: mostrar cabeçalhos de data acima de mensagens com a mesma data
@ -437,30 +445,30 @@ Na seção de exibição das configurações, você pode ativar ou desativar:
* *Exibir automaticamente imagens para contatos conhecidos*: para exibir automaticamente imagens para contatos no seu dispositivo, por favor veja [esse FAQ](#user-content-faq35)
* *Barra de ação da conversa*: para desativar a barra de navegação inferior
Observe que as mensagens só podem ser pre-visualizadas quando o texto delas tiver sido baixado. Mensagens grandes não são baixadas por padrão em redes limitadas (geralmente em dados móveis). Você pode alterar isso nas configurações.
Note that messages can be previewed only when the message text was downloaded. Larger message texts are not downloaded by default on metered (generally mobile) networks. You can change this in the settings.
Se a lista de endereços for longa, você pode recolher a seção de endereços com o ícone de *menos* no topo da seção de endereços.
If the list of addresses is long, you can collapse the addresses section with the *less* icon at the top of the addresses section.
Algumas pessoas pedem:
Some people ask:
* para mostrar o assunto em negrito, mas o negrito já é utilizado para destacar mensagens não lidas
* para mostrar o endereço ou o assunto maior/menor, mas isso poderia interferir com a opção de tamanho do texto
* para mostrar a estrela à esquerda, mas é muito mais fácil utilizar a estrela no lado direito
Infelizmente, é impossível fazer todo mundo feliz e adicionar muitas configurações poderia não só ser confuso, mas também sempre faltaria alguma.
Unfortunately, it is impossible to make everybody happy and adding lots of settings would not only be confusing, but also never be sufficient.
<br/>
<aname="faq6"></a>
**(6) Como posso fazer login com Gmail / G Suite?**
**(6) How can I login to Gmail / G suite?**
Você pode usar o assistente de configuração rápida para configurar facilmente uma conta e uma identidade do Gmail.
You can use the quick setup wizard to easily setup a Gmail account and identity.
Se você não quiser usar uma conta do Gmail salva em seu dispositivo, você pode ativar o acesso a "aplicativos menos seguros" e usar a senha de sua conta (não recomendado) ou habilitar a autenticação em duas etapas e usar uma senha específica de aplicativo. Para usar uma senha, você precisará configurar uma conta e identidade através das etapas 1 e 2, ao invés do assistente de configuração rápida.
If you don't want to use an on-device Gmail account, you can either enable access for "less secure apps" and use your account password (not advised) or enable two factor authentication and use an app specific password. To use a password you'll need to setup an account and identity via setup step 1 and 2 instead of via the quick setup wizard.
Por favor, veja [este FAQ](#user-content-faq111) sobre porque apenas as contas salvas no dispositivo podem ser usadas.
Please see [this FAQ](#user-content-faq111) on why only on-device accounts can be used.
Observe que uma senha de aplicativo específica é necessária quando a autenticação em duas etapas estiver habilitada.
Note that an app specific password is required when two factor authentication is enabled.
<br/>
@ -1463,6 +1471,7 @@ For security reasons the files with the original message texts are not accessibl
* Did you know that you can long press the people's icon to show/hide the CC/BCC fields and remember the visibility state for the next time?
* Did you know that you can insert the email addresses of an Android contact group via the three dots overflow menu?
* Did you know that if you select text and hit reply, only the selected text will be quoted?
* Did you know that you can long press the trash icons (both in the message and the bottom action bar) to permanently delete a message or conversation? (version 1.1368+)
@ -388,7 +388,15 @@ Operations are processed only when there is a connection to the email server or
You should try to fix this by contacting your provider or by getting a valid security certificate because invalid security certificates are insecure and allow [man-in-the-middle attacks](https://en.wikipedia.org/wiki/Man-in-the-middle_attack). If money is an obstacle, you can get free security certificates from [Let’s Encrypt](https://letsencrypt.org).
Alternatively, you can accept the fingerprint of the invalid server certificate as shown below the error message by ticking a checkbox. In case of an existing account (IMAP, receive) and/or identity (SMTP, send) you will need check/save it via setup step 1 and 2 to get the error message. This will "pin" the server certificate to prevent man-in-the-middle attacks. Note that you should make sure the internet connection you are using is safe if you do this.
Alternatively, you can accept the fingerprint of invalid server certificates like this:
1. Make sure you are using a trusted internet connection (no public Wi-Fi networks, etc)
1. Go to the setup screen via the navigation menu (swipe from the left side inwards)
1. In step 1 and 2 tap *Manage* and tap the faulty account and identity
1. Check/save the account and identity
1. Tick the checkbox below the error message and save again
This will "pin" the server certificate to prevent man-in-the-middle attacks.
Note that older Android versions might not recognize newer certification authorities like Let’s Encrypt causing connections to be considered insecure, see also [here](https://developer.android.com/training/articles/security-ssl).
@ -1463,6 +1471,7 @@ For security reasons the files with the original message texts are not accessibl
* Did you know that you can long press the people's icon to show/hide the CC/BCC fields and remember the visibility state for the next time?
* Did you know that you can insert the email addresses of an Android contact group via the three dots overflow menu?
* Did you know that if you select text and hit reply, only the selected text will be quoted?
* Did you know that you can long press the trash icons (both in the message and the bottom action bar) to permanently delete a message or conversation? (version 1.1368+)
@ -388,7 +388,15 @@ Operations are processed only when there is a connection to the email server or
You should try to fix this by contacting your provider or by getting a valid security certificate because invalid security certificates are insecure and allow [man-in-the-middle attacks](https://en.wikipedia.org/wiki/Man-in-the-middle_attack). If money is an obstacle, you can get free security certificates from [Let’s Encrypt](https://letsencrypt.org).
Alternatively, you can accept the fingerprint of the invalid server certificate as shown below the error message by ticking a checkbox. In case of an existing account (IMAP, receive) and/or identity (SMTP, send) you will need check/save it via setup step 1 and 2 to get the error message. This will "pin" the server certificate to prevent man-in-the-middle attacks. Note that you should make sure the internet connection you are using is safe if you do this.
Alternatively, you can accept the fingerprint of invalid server certificates like this:
1. Make sure you are using a trusted internet connection (no public Wi-Fi networks, etc)
1. Go to the setup screen via the navigation menu (swipe from the left side inwards)
1. In step 1 and 2 tap *Manage* and tap the faulty account and identity
1. Check/save the account and identity
1. Tick the checkbox below the error message and save again
This will "pin" the server certificate to prevent man-in-the-middle attacks.
Note that older Android versions might not recognize newer certification authorities like Let’s Encrypt causing connections to be considered insecure, see also [here](https://developer.android.com/training/articles/security-ssl).
@ -1463,6 +1471,7 @@ For security reasons the files with the original message texts are not accessibl
* Did you know that you can long press the people's icon to show/hide the CC/BCC fields and remember the visibility state for the next time?
* Did you know that you can insert the email addresses of an Android contact group via the three dots overflow menu?
* Did you know that if you select text and hit reply, only the selected text will be quoted?
* Did you know that you can long press the trash icons (both in the message and the bottom action bar) to permanently delete a message or conversation? (version 1.1368+)
@ -388,7 +388,15 @@ Operations are processed only when there is a connection to the email server or
You should try to fix this by contacting your provider or by getting a valid security certificate because invalid security certificates are insecure and allow [man-in-the-middle attacks](https://en.wikipedia.org/wiki/Man-in-the-middle_attack). If money is an obstacle, you can get free security certificates from [Let’s Encrypt](https://letsencrypt.org).
Alternatively, you can accept the fingerprint of the invalid server certificate as shown below the error message by ticking a checkbox. In case of an existing account (IMAP, receive) and/or identity (SMTP, send) you will need check/save it via setup step 1 and 2 to get the error message. This will "pin" the server certificate to prevent man-in-the-middle attacks. Note that you should make sure the internet connection you are using is safe if you do this.
Alternatively, you can accept the fingerprint of invalid server certificates like this:
1. Make sure you are using a trusted internet connection (no public Wi-Fi networks, etc)
1. Go to the setup screen via the navigation menu (swipe from the left side inwards)
1. In step 1 and 2 tap *Manage* and tap the faulty account and identity
1. Check/save the account and identity
1. Tick the checkbox below the error message and save again
This will "pin" the server certificate to prevent man-in-the-middle attacks.
Note that older Android versions might not recognize newer certification authorities like Let’s Encrypt causing connections to be considered insecure, see also [here](https://developer.android.com/training/articles/security-ssl).
@ -400,9 +408,9 @@ You should either fix the server configuration or accept the fingerprint shown b
Note that this problem can be caused by the server not sending all intermediate certificates too.
*Не указан пароль*
*Empty password*
Вероятно, ваше имя пользователя легкое, так что это небезопасно.
Your username is likely easily guessed, so this is insecure.
*Plain text connection*
@ -490,14 +498,14 @@ When "less secure apps" is not enabled, you'll get the error *Authentication fai
*General*
Вы можете получить оповещение "*Пожалуйста, войдите через веб-браузер*". Это происходит, когда Google считает небезопасной сеть, которая подключает вас к Интернету (это может быть VPN). Это можно предотвратить, используя мастер быстрой установки Gmail или пароль для конкретного приложения.
You might get the alert "*Please log in via your web browser*". This happens when Google considers the network that connects you to the internet (this could be a VPN) to be unsafe. This can be prevented by using the Gmail quick setup wizard or an app specific password.
Смотрите [здесь](https://support.google.com/mail/answer/7126229) для инструкций Google и [здесь](https://support.google.com/mail/accounts/answer/78754) для устранения неполадок.
See [here](https://support.google.com/mail/answer/7126229) for Google's instructions and [here](https://support.google.com/mail/accounts/answer/78754) for troubleshooting.
<br/>
<aname="faq7"></a>
(7) Почему сообщения не появляются (непосредственно) в папке отправленных?
**(7) Why are sent messages not appearing (directly) in the sent folder?**
Sent messages are normally moved from the outbox to the sent folder as soon as your provider adds sent messages to the sent folder. This requires a sent folder to be selected in the account settings and the sent folder to be set to synchronizing.
@ -662,7 +670,7 @@ Please see [here](https://support.google.com/pixelphone/answer/2844832?hl=en) ho
The use of expired keys, inline encrypted/signed messages and hardware security tokens is not supported.
If you are looking for a free (test) S/MIME certificate, see [here](http://kb.mozillazine.org/Getting_an_SMIME_certificate) for the options. Please be sure to [read this first](https://davidroessli.com/logs/2019/09/free-smime-certificates-in-2019/#update20191219) if you want to request an S/MIME Actalis certificate. Если вы ищете дешёвый сертификат S/MIME, могу посоветовать [Certum](https://www.certum.eu/en/smime-certificates/).
If you are looking for a free (test) S/MIME certificate, see [here](http://kb.mozillazine.org/Getting_an_SMIME_certificate) for the options. Please be sure to [read this first](https://davidroessli.com/logs/2019/09/free-smime-certificates-in-2019/#update20191219) if you want to request an S/MIME Actalis certificate. If you are looking for a cheap S/MIME certificate, I had a good experience with [Certum](https://www.certum.eu/en/smime-certificates/).
How to extract a public key from a S/MIME certificate:
@ -1463,6 +1471,7 @@ For security reasons the files with the original message texts are not accessibl
* Did you know that you can long press the people's icon to show/hide the CC/BCC fields and remember the visibility state for the next time?
* Did you know that you can insert the email addresses of an Android contact group via the three dots overflow menu?
* Did you know that if you select text and hit reply, only the selected text will be quoted?
* Did you know that you can long press the trash icons (both in the message and the bottom action bar) to permanently delete a message or conversation? (version 1.1368+)
<br/>
@ -2604,7 +2613,7 @@ There is **only support** on the latest Play store version, the latest GitHub re
F-Droid builds irregularly, which can be problematic when there is an important update. Therefore you are advised to switch to the GitHub release.
The F-Droid version is built from the same source code, but signed differently. Это означает, что все функции доступны и в версии F-Droid, за исключением использования мастера быстрой настройки Gmail, так как Google одобрил (и позволяет) только одну подпись приложения. For all other email providers, OAuth access is only available in Play Store versions and Github releases, as the email providers only permit the use of OAuth for official builds.
The F-Droid version is built from the same source code, but signed differently. This means that all features are available in the F-Droid version too, except for using the Gmail quick setup wizard because Google approved (and allows) one app signature only. For all other email providers, OAuth access is only available in Play Store versions and Github releases, as the email providers only permit the use of OAuth for official builds.
Note that you'll need to uninstall the F-Droid build first before you can install a GitHub release because Android refuses to install the same app with a different signature for security reasons.
@ -388,7 +388,15 @@ Operations are processed only when there is a connection to the email server or
You should try to fix this by contacting your provider or by getting a valid security certificate because invalid security certificates are insecure and allow [man-in-the-middle attacks](https://en.wikipedia.org/wiki/Man-in-the-middle_attack). If money is an obstacle, you can get free security certificates from [Let’s Encrypt](https://letsencrypt.org).
Alternatively, you can accept the fingerprint of the invalid server certificate as shown below the error message by ticking a checkbox. In case of an existing account (IMAP, receive) and/or identity (SMTP, send) you will need check/save it via setup step 1 and 2 to get the error message. This will "pin" the server certificate to prevent man-in-the-middle attacks. Note that you should make sure the internet connection you are using is safe if you do this.
Alternatively, you can accept the fingerprint of invalid server certificates like this:
1. Make sure you are using a trusted internet connection (no public Wi-Fi networks, etc)
1. Go to the setup screen via the navigation menu (swipe from the left side inwards)
1. In step 1 and 2 tap *Manage* and tap the faulty account and identity
1. Check/save the account and identity
1. Tick the checkbox below the error message and save again
This will "pin" the server certificate to prevent man-in-the-middle attacks.
Note that older Android versions might not recognize newer certification authorities like Let’s Encrypt causing connections to be considered insecure, see also [here](https://developer.android.com/training/articles/security-ssl).
@ -1463,6 +1471,7 @@ For security reasons the files with the original message texts are not accessibl
* Did you know that you can long press the people's icon to show/hide the CC/BCC fields and remember the visibility state for the next time?
* Did you know that you can insert the email addresses of an Android contact group via the three dots overflow menu?
* Did you know that if you select text and hit reply, only the selected text will be quoted?
* Did you know that you can long press the trash icons (both in the message and the bottom action bar) to permanently delete a message or conversation? (version 1.1368+)
@ -388,7 +388,15 @@ Operations are processed only when there is a connection to the email server or
You should try to fix this by contacting your provider or by getting a valid security certificate because invalid security certificates are insecure and allow [man-in-the-middle attacks](https://en.wikipedia.org/wiki/Man-in-the-middle_attack). If money is an obstacle, you can get free security certificates from [Let’s Encrypt](https://letsencrypt.org).
Alternatively, you can accept the fingerprint of the invalid server certificate as shown below the error message by ticking a checkbox. In case of an existing account (IMAP, receive) and/or identity (SMTP, send) you will need check/save it via setup step 1 and 2 to get the error message. This will "pin" the server certificate to prevent man-in-the-middle attacks. Note that you should make sure the internet connection you are using is safe if you do this.
Alternatively, you can accept the fingerprint of invalid server certificates like this:
1. Make sure you are using a trusted internet connection (no public Wi-Fi networks, etc)
1. Go to the setup screen via the navigation menu (swipe from the left side inwards)
1. In step 1 and 2 tap *Manage* and tap the faulty account and identity
1. Check/save the account and identity
1. Tick the checkbox below the error message and save again
This will "pin" the server certificate to prevent man-in-the-middle attacks.
Note that older Android versions might not recognize newer certification authorities like Let’s Encrypt causing connections to be considered insecure, see also [here](https://developer.android.com/training/articles/security-ssl).
@ -1463,6 +1471,7 @@ For security reasons the files with the original message texts are not accessibl
* Did you know that you can long press the people's icon to show/hide the CC/BCC fields and remember the visibility state for the next time?
* Did you know that you can insert the email addresses of an Android contact group via the three dots overflow menu?
* Did you know that if you select text and hit reply, only the selected text will be quoted?
* Did you know that you can long press the trash icons (both in the message and the bottom action bar) to permanently delete a message or conversation? (version 1.1368+)
@ -388,7 +388,15 @@ Operations are processed only when there is a connection to the email server or
You should try to fix this by contacting your provider or by getting a valid security certificate because invalid security certificates are insecure and allow [man-in-the-middle attacks](https://en.wikipedia.org/wiki/Man-in-the-middle_attack). If money is an obstacle, you can get free security certificates from [Let’s Encrypt](https://letsencrypt.org).
Alternatively, you can accept the fingerprint of the invalid server certificate as shown below the error message by ticking a checkbox. In case of an existing account (IMAP, receive) and/or identity (SMTP, send) you will need check/save it via setup step 1 and 2 to get the error message. This will "pin" the server certificate to prevent man-in-the-middle attacks. Note that you should make sure the internet connection you are using is safe if you do this.
Alternatively, you can accept the fingerprint of invalid server certificates like this:
1. Make sure you are using a trusted internet connection (no public Wi-Fi networks, etc)
1. Go to the setup screen via the navigation menu (swipe from the left side inwards)
1. In step 1 and 2 tap *Manage* and tap the faulty account and identity
1. Check/save the account and identity
1. Tick the checkbox below the error message and save again
This will "pin" the server certificate to prevent man-in-the-middle attacks.
Note that older Android versions might not recognize newer certification authorities like Let’s Encrypt causing connections to be considered insecure, see also [here](https://developer.android.com/training/articles/security-ssl).
@ -1463,6 +1471,7 @@ For security reasons the files with the original message texts are not accessibl
* Did you know that you can long press the people's icon to show/hide the CC/BCC fields and remember the visibility state for the next time?
* Did you know that you can insert the email addresses of an Android contact group via the three dots overflow menu?
* Did you know that if you select text and hit reply, only the selected text will be quoted?
* Did you know that you can long press the trash icons (both in the message and the bottom action bar) to permanently delete a message or conversation? (version 1.1368+)
@ -388,7 +388,15 @@ Meddelandet med låg prioritet visar antalet pågående åtgärder, som kan vara
You should try to fix this by contacting your provider or by getting a valid security certificate because invalid security certificates are insecure and allow [man-in-the-middle attacks](https://en.wikipedia.org/wiki/Man-in-the-middle_attack). If money is an obstacle, you can get free security certificates from [Let’s Encrypt](https://letsencrypt.org).
Alternatively, you can accept the fingerprint of the invalid server certificate as shown below the error message by ticking a checkbox. In case of an existing account (IMAP, receive) and/or identity (SMTP, send) you will need check/save it via setup step 1 and 2 to get the error message. This will "pin" the server certificate to prevent man-in-the-middle attacks. Note that you should make sure the internet connection you are using is safe if you do this.
Alternatively, you can accept the fingerprint of invalid server certificates like this:
1. Make sure you are using a trusted internet connection (no public Wi-Fi networks, etc)
1. Go to the setup screen via the navigation menu (swipe from the left side inwards)
1. In step 1 and 2 tap *Manage* and tap the faulty account and identity
1. Check/save the account and identity
1. Tick the checkbox below the error message and save again
This will "pin" the server certificate to prevent man-in-the-middle attacks.
Note that older Android versions might not recognize newer certification authorities like Let’s Encrypt causing connections to be considered insecure, see also [here](https://developer.android.com/training/articles/security-ssl).
@ -662,7 +670,7 @@ Please see [here](https://support.google.com/pixelphone/answer/2844832?hl=en) ho
The use of expired keys, inline encrypted/signed messages and hardware security tokens is not supported.
If you are looking for a free (test) S/MIME certificate, see [here](http://kb.mozillazine.org/Getting_an_SMIME_certificate) for the options. Please be sure to [read this first](https://davidroessli.com/logs/2019/09/free-smime-certificates-in-2019/#update20191219) if you want to request an S/MIME Actalis certificate. Om du letar efter ett billigt S/MIME certifikat, Jag har bra erfarenhet med [Certum](https://www.certum.eu/en/smime-certificates/).
If you are looking for a free (test) S/MIME certificate, see [here](http://kb.mozillazine.org/Getting_an_SMIME_certificate) for the options. Please be sure to [read this first](https://davidroessli.com/logs/2019/09/free-smime-certificates-in-2019/#update20191219) if you want to request an S/MIME Actalis certificate. If you are looking for a cheap S/MIME certificate, I had a good experience with [Certum](https://www.certum.eu/en/smime-certificates/).
How to extract a public key from a S/MIME certificate:
@ -1463,6 +1471,7 @@ For security reasons the files with the original message texts are not accessibl
* Did you know that you can long press the people's icon to show/hide the CC/BCC fields and remember the visibility state for the next time?
* Did you know that you can insert the email addresses of an Android contact group via the three dots overflow menu?
* Did you know that if you select text and hit reply, only the selected text will be quoted?
* Did you know that you can long press the trash icons (both in the message and the bottom action bar) to permanently delete a message or conversation? (version 1.1368+)
<br/>
@ -2604,7 +2613,7 @@ There is **only support** on the latest Play store version, the latest GitHub re
F-Droid builds irregularly, which can be problematic when there is an important update. Therefore you are advised to switch to the GitHub release.
The F-Droid version is built from the same source code, but signed differently. Detta innebär att alla funktioner är tillgängliga i F-Droid versionen också, förutom att använda Gmail snabbinstallationsguide eftersom Google är godkänt (och tillåter) endast en app-signatur. For all other email providers, OAuth access is only available in Play Store versions and Github releases, as the email providers only permit the use of OAuth for official builds.
The F-Droid version is built from the same source code, but signed differently. This means that all features are available in the F-Droid version too, except for using the Gmail quick setup wizard because Google approved (and allows) one app signature only. For all other email providers, OAuth access is only available in Play Store versions and Github releases, as the email providers only permit the use of OAuth for official builds.
Note that you'll need to uninstall the F-Droid build first before you can install a GitHub release because Android refuses to install the same app with a different signature for security reasons.
@ -2710,7 +2719,7 @@ An Office 365 account can be set up via the quick setup wizard and selecting *Of
If the wizard ends with *AUTHENTICATE failed*, IMAP and/or SMTP might be disabled for the account. In this case you should ask the administrator to enable IMAP and SMTP. The procedure is documented [here](https://docs.microsoft.com/en-in/exchange/troubleshoot/configure-mailboxes/pop3-imap-owa-activesync-office-365).
Om du har aktiverat *säkerhetsstandard* i din organisation kan du behöva aktivera SMTP AUTH-protokollet. Please [see here](https://docs.microsoft.com/en-us/exchange/clients-and-mobile-in-exchange-online/authenticated-client-smtp-submission) about how to.
If you've enabled *security defaults* in your organization, you might need to enable the SMTP AUTH protocol. Please [see here](https://docs.microsoft.com/en-us/exchange/clients-and-mobile-in-exchange-online/authenticated-client-smtp-submission) about how to.
@ -388,7 +388,15 @@ Operations are processed only when there is a connection to the email server or
You should try to fix this by contacting your provider or by getting a valid security certificate because invalid security certificates are insecure and allow [man-in-the-middle attacks](https://en.wikipedia.org/wiki/Man-in-the-middle_attack). If money is an obstacle, you can get free security certificates from [Let’s Encrypt](https://letsencrypt.org).
Alternatively, you can accept the fingerprint of the invalid server certificate as shown below the error message by ticking a checkbox. In case of an existing account (IMAP, receive) and/or identity (SMTP, send) you will need check/save it via setup step 1 and 2 to get the error message. This will "pin" the server certificate to prevent man-in-the-middle attacks. Note that you should make sure the internet connection you are using is safe if you do this.
Alternatively, you can accept the fingerprint of invalid server certificates like this:
1. Make sure you are using a trusted internet connection (no public Wi-Fi networks, etc)
1. Go to the setup screen via the navigation menu (swipe from the left side inwards)
1. In step 1 and 2 tap *Manage* and tap the faulty account and identity
1. Check/save the account and identity
1. Tick the checkbox below the error message and save again
This will "pin" the server certificate to prevent man-in-the-middle attacks.
Note that older Android versions might not recognize newer certification authorities like Let’s Encrypt causing connections to be considered insecure, see also [here](https://developer.android.com/training/articles/security-ssl).
@ -662,7 +670,7 @@ Please see [here](https://support.google.com/pixelphone/answer/2844832?hl=en) ho
The use of expired keys, inline encrypted/signed messages and hardware security tokens is not supported.
If you are looking for a free (test) S/MIME certificate, see [here](http://kb.mozillazine.org/Getting_an_SMIME_certificate) for the options. Please be sure to [read this first](https://davidroessli.com/logs/2019/09/free-smime-certificates-in-2019/#update20191219) if you want to request an S/MIME Actalis certificate. Søger du efter et billigt S/MIME-certifikat, så har jeg en god erfaringer med [Certum](https://www.certum.eu/en/smime-certificates/).
If you are looking for a free (test) S/MIME certificate, see [here](http://kb.mozillazine.org/Getting_an_SMIME_certificate) for the options. Please be sure to [read this first](https://davidroessli.com/logs/2019/09/free-smime-certificates-in-2019/#update20191219) if you want to request an S/MIME Actalis certificate. If you are looking for a cheap S/MIME certificate, I had a good experience with [Certum](https://www.certum.eu/en/smime-certificates/).
How to extract a public key from a S/MIME certificate:
@ -1463,6 +1471,7 @@ For security reasons the files with the original message texts are not accessibl
* Did you know that you can long press the people's icon to show/hide the CC/BCC fields and remember the visibility state for the next time?
* Did you know that you can insert the email addresses of an Android contact group via the three dots overflow menu?
* Did you know that if you select text and hit reply, only the selected text will be quoted?
* Did you know that you can long press the trash icons (both in the message and the bottom action bar) to permanently delete a message or conversation? (version 1.1368+)
@ -388,7 +388,15 @@ Operations are processed only when there is a connection to the email server or
You should try to fix this by contacting your provider or by getting a valid security certificate because invalid security certificates are insecure and allow [man-in-the-middle attacks](https://en.wikipedia.org/wiki/Man-in-the-middle_attack). If money is an obstacle, you can get free security certificates from [Let’s Encrypt](https://letsencrypt.org).
Alternatively, you can accept the fingerprint of the invalid server certificate as shown below the error message by ticking a checkbox. In case of an existing account (IMAP, receive) and/or identity (SMTP, send) you will need check/save it via setup step 1 and 2 to get the error message. This will "pin" the server certificate to prevent man-in-the-middle attacks. Note that you should make sure the internet connection you are using is safe if you do this.
Alternatively, you can accept the fingerprint of invalid server certificates like this:
1. Make sure you are using a trusted internet connection (no public Wi-Fi networks, etc)
1. Go to the setup screen via the navigation menu (swipe from the left side inwards)
1. In step 1 and 2 tap *Manage* and tap the faulty account and identity
1. Check/save the account and identity
1. Tick the checkbox below the error message and save again
This will "pin" the server certificate to prevent man-in-the-middle attacks.
Note that older Android versions might not recognize newer certification authorities like Let’s Encrypt causing connections to be considered insecure, see also [here](https://developer.android.com/training/articles/security-ssl).
@ -1463,6 +1471,7 @@ For security reasons the files with the original message texts are not accessibl
* Did you know that you can long press the people's icon to show/hide the CC/BCC fields and remember the visibility state for the next time?
* Did you know that you can insert the email addresses of an Android contact group via the three dots overflow menu?
* Did you know that if you select text and hit reply, only the selected text will be quoted?
* Did you know that you can long press the trash icons (both in the message and the bottom action bar) to permanently delete a message or conversation? (version 1.1368+)
@ -388,7 +388,15 @@ Operations are processed only when there is a connection to the email server or
You should try to fix this by contacting your provider or by getting a valid security certificate because invalid security certificates are insecure and allow [man-in-the-middle attacks](https://en.wikipedia.org/wiki/Man-in-the-middle_attack). If money is an obstacle, you can get free security certificates from [Let’s Encrypt](https://letsencrypt.org).
Alternatively, you can accept the fingerprint of the invalid server certificate as shown below the error message by ticking a checkbox. In case of an existing account (IMAP, receive) and/or identity (SMTP, send) you will need check/save it via setup step 1 and 2 to get the error message. This will "pin" the server certificate to prevent man-in-the-middle attacks. Note that you should make sure the internet connection you are using is safe if you do this.
Alternatively, you can accept the fingerprint of invalid server certificates like this:
1. Make sure you are using a trusted internet connection (no public Wi-Fi networks, etc)
1. Go to the setup screen via the navigation menu (swipe from the left side inwards)
1. In step 1 and 2 tap *Manage* and tap the faulty account and identity
1. Check/save the account and identity
1. Tick the checkbox below the error message and save again
This will "pin" the server certificate to prevent man-in-the-middle attacks.
Note that older Android versions might not recognize newer certification authorities like Let’s Encrypt causing connections to be considered insecure, see also [here](https://developer.android.com/training/articles/security-ssl).
@ -1463,6 +1471,7 @@ For security reasons the files with the original message texts are not accessibl
* Did you know that you can long press the people's icon to show/hide the CC/BCC fields and remember the visibility state for the next time?
* Did you know that you can insert the email addresses of an Android contact group via the three dots overflow menu?
* Did you know that if you select text and hit reply, only the selected text will be quoted?
* Did you know that you can long press the trash icons (both in the message and the bottom action bar) to permanently delete a message or conversation? (version 1.1368+)
@ -388,7 +388,15 @@ Operations are processed only when there is a connection to the email server or
You should try to fix this by contacting your provider or by getting a valid security certificate because invalid security certificates are insecure and allow [man-in-the-middle attacks](https://en.wikipedia.org/wiki/Man-in-the-middle_attack). If money is an obstacle, you can get free security certificates from [Let’s Encrypt](https://letsencrypt.org). If money is an obstacle, you can get free security certificates from [Let’s Encrypt](https://letsencrypt.org).
Alternatively, you can accept the fingerprint of the invalid server certificate as shown below the error message by ticking a checkbox. In case of an existing account (IMAP, receive) and/or identity (SMTP, send) you will need check/save it via setup step 1 and 2 to get the error message. This will "pin" the server certificate to prevent man-in-the-middle attacks. Note that you should make sure the internet connection you are using is safe if you do this.
Alternatively, you can accept the fingerprint of invalid server certificates like this:
1. Make sure you are using a trusted internet connection (no public Wi-Fi networks, etc)
1. Go to the setup screen via the navigation menu (swipe from the left side inwards)
1. In step 1 and 2 tap *Manage* and tap the faulty account and identity
1. Check/save the account and identity
1. Tick the checkbox below the error message and save again
This will "pin" the server certificate to prevent man-in-the-middle attacks.
Note that older Android versions might not recognize newer certification authorities like Let’s Encrypt causing connections to be considered insecure, see also [here](https://developer.android.com/training/articles/security-ssl).
@ -408,7 +416,7 @@ Your username is likely easily guessed, so this is insecure.
Your username and password and all messages will be sent and received unencrypted, which is **very insecure** because a [man-in-the-middle attack](https://en.wikipedia.org/wiki/Man-in-the-middle_attack) is very simple on an unencrypted connection.
If you still want to use an invalid security certificate, an empty password or a plain text connection you'll need to enable insecure connections in the account and/or identity settings. STARTTLS should be selected for plain text connections. If you enable insecure connections, you should connect via private, trusted networks only and never via public networks, like offered in hotels, airports, etc. STARTTLS should be selected for plain text connections. If you enable insecure connections, you should connect via private, trusted networks only and never via public networks, like offered in hotels, airports, etc.
If you still want to use an invalid security certificate, an empty password or a plain text connection you'll need to enable insecure connections in the account and/or identity settings. STARTTLS should be selected for plain text connections. If you enable insecure connections, you should connect via private, trusted networks only and never via public networks, like offered in hotels, airports, etc.
<br/>
@ -437,7 +445,7 @@ In the display section of the settings you can enable or disable:
* *Automatically show images for known contacts*: to automatically show images for contacts on your device, please read [this FAQ](#user-content-faq35)
* *Conversation action bar*: to disable the bottom navigation bar
Note that messages can be previewed only when the message text was downloaded. Note that messages can be previewed only when the message text was downloaded. Larger message texts are not downloaded by default on metered (generally mobile) networks. You can change this in the settings. You can change this in the settings.
Note that messages can be previewed only when the message text was downloaded. Larger message texts are not downloaded by default on metered (generally mobile) networks. You can change this in the settings.
If the list of addresses is long, you can collapse the addresses section with the *less* icon at the top of the addresses section.
@ -456,7 +464,7 @@ Unfortunately, it is impossible to make everybody happy and adding lots of setti
You can use the quick setup wizard to easily setup a Gmail account and identity.
If you don't want to use an on-device Gmail account, you can either enable access for "less secure apps" and use your account password (not advised) or enable two factor authentication and use an app specific password. To use a password you'll need to setup an account and identity via setup step 1 and 2 instead of via the quick setup wizard. To use a password you'll need to setup an account and identity via setup step 1 and 2 instead of via the quick setup wizard.
If you don't want to use an on-device Gmail account, you can either enable access for "less secure apps" and use your account password (not advised) or enable two factor authentication and use an app specific password. To use a password you'll need to setup an account and identity via setup step 1 and 2 instead of via the quick setup wizard.
Please see [this FAQ](#user-content-faq111) on why only on-device accounts can be used.
@ -482,7 +490,7 @@ If you use multiple Gmail accounts, make sure you change the "less secure apps"
Be aware that you need to leave the "less secure apps" settings screen by using the back arrow to apply the setting.
If you use this method, you should use a [strong password](https://en.wikipedia.org/wiki/Password_strength) for your Gmail account, which is a good idea anyway. Note that using the [standard](https://tools.ietf.org/html/rfc3501) IMAP protocol in itself is not less secure. Note that using the [standard](https://tools.ietf.org/html/rfc3501) IMAP protocol in itself is not less secure.
If you use this method, you should use a [strong password](https://en.wikipedia.org/wiki/Password_strength) for your Gmail account, which is a good idea anyway. Note that using the [standard](https://tools.ietf.org/html/rfc3501) IMAP protocol in itself is not less secure.
When "less secure apps" is not enabled, you'll get the error *Authentication failed - invalid credentials* for accounts (IMAP) and *Username and Password not accepted* for identities (SMTP).
@ -490,7 +498,7 @@ When "less secure apps" is not enabled, you'll get the error *Authentication fai
*General*
You might get the alert "*Please log in via your web browser*". This happens when Google considers the network that connects you to the internet (this could be a VPN) to be unsafe. This can be prevented by using the Gmail quick setup wizard or an app specific password. This happens when Google considers the network that connects you to the internet (this could be a VPN) to be unsafe. This can be prevented by using the Gmail quick setup wizard or an app specific password.
You might get the alert "*Please log in via your web browser*". This happens when Google considers the network that connects you to the internet (this could be a VPN) to be unsafe. This can be prevented by using the Gmail quick setup wizard or an app specific password.
See [here](https://support.google.com/mail/answer/7126229) for Google's instructions and [here](https://support.google.com/mail/accounts/answer/78754) for troubleshooting.
@ -501,7 +509,7 @@ See [here](https://support.google.com/mail/answer/7126229) for Google's instruct
Sent messages are normally moved from the outbox to the sent folder as soon as your provider adds sent messages to the sent folder. This requires a sent folder to be selected in the account settings and the sent folder to be set to synchronizing.
Some providers do not keep track of sent messages or the used SMTP server might not be related to the provider. Some providers do not keep track of sent messages or the used SMTP server might not be related to the provider. In these cases FairEmail, will automatically add sent messages to the sent folder on synchronizing the sent folder, which will happen after a message have been sent. Note that this will result in extra internet traffic. Note that this will result in extra internet traffic.
Some providers do not keep track of sent messages or the used SMTP server might not be related to the provider. In these cases FairEmail, will automatically add sent messages to the sent folder on synchronizing the sent folder, which will happen after a message have been sent. Note that this will result in extra internet traffic.
~~If this doesn't happen, your provider might not keep track of sent messages or you might be using an SMTP server not related to the provider.~~ ~~In these cases you can enable the advanced identity setting *Store sent messages* to let FairEmail add sent messages to the sent folder right after sending a message.~~~~Note that enabling this setting might result in duplicate messages if your provider adds sent messages to the sent folder too.~~ ~~Also beware that enabling this setting will result in extra data usage, especially when when sending messages with large attachments.~~
@ -512,11 +520,11 @@ Some providers do not keep track of sent messages or the used SMTP server might
<aname="faq8"></a>
**(8) Can I use a Microsoft Exchange account?**
You can use a Microsoft Exchange account if it is accessible via IMAP, which is mostly the case. See [here](https://support.office.com/en-us/article/what-is-a-microsoft-exchange-account-47f000aa-c2bf-48ac-9bc2-83e5c6036793) for more information. See [here](https://support.office.com/en-us/article/what-is-a-microsoft-exchange-account-47f000aa-c2bf-48ac-9bc2-83e5c6036793) for more information.
You can use a Microsoft Exchange account if it is accessible via IMAP, which is mostly the case. See [here](https://support.office.com/en-us/article/what-is-a-microsoft-exchange-account-47f000aa-c2bf-48ac-9bc2-83e5c6036793) for more information.
Please see [here](https://support.office.com/en-us/article/pop-imap-and-smtp-settings-for-outlook-com-d088b986-291d-42b8-9564-9c414e2aa040) for the Microsoft documentation about configuring an email client. There is also a section about common connection errors and solutions. There is also a section about common connection errors and solutions.
Please see [here](https://support.office.com/en-us/article/pop-imap-and-smtp-settings-for-outlook-com-d088b986-291d-42b8-9564-9c414e2aa040) for the Microsoft documentation about configuring an email client. There is also a section about common connection errors and solutions.
Some older Exchange server versions have a bug causing empty message and corrupt attachments. Please see [this FAQ](#user-content-faq110) for a workaround. Please see [this FAQ](#user-content-faq110) for a workaround.
Some older Exchange server versions have a bug causing empty message and corrupt attachments. Please see [this FAQ](#user-content-faq110) for a workaround.
Please see [this FAQ](#user-content-faq133) about ActiveSync support.
@ -529,7 +537,7 @@ Please see [this FAQ](#user-content-faq111) about OAuth support.
Identities represent email addresses you are sending *from* via an email (SMTP) server.
Some providers allow you to have multiple aliases. Some providers allow you to have multiple aliases. You can configure these by setting the email address field of an additional identity to the alias address and setting the user name field to your main email address.
Some providers allow you to have multiple aliases. You can configure these by setting the email address field of an additional identity to the alias address and setting the user name field to your main email address.
Note that you can copy an identity by long pressing it.
@ -544,7 +552,7 @@ See [this FAQ](#user-content-faq33) on editing the username of email addresses.
<aname="faq10"></a>
**~~(10) What does 'UIDPLUS not supported' mean?~~**
~~The error message *UIDPLUS not supported* means that your email provider does not provide the IMAP [UIDPLUS extension](https://tools.ietf.org/html/rfc4315). This IMAP extension is required to implement two way synchronization, which is not an optional feature. So, unless your provider can enable this extension, you cannot use FairEmail for this provider.~~ This IMAP extension is required to implement two way synchronization, which is not an optional feature. So, unless your provider can enable this extension, you cannot use FairEmail for this provider.~~
~~The error message *UIDPLUS not supported* means that your email provider does not provide the IMAP [UIDPLUS extension](https://tools.ietf.org/html/rfc4315). This IMAP extension is required to implement two way synchronization, which is not an optional feature. So, unless your provider can enable this extension, you cannot use FairEmail for this provider.~~
<br/>
@ -580,33 +588,33 @@ Signing in short:
* **Outgoing** messages are signed with the **private key** of the sender
* **Incoming** messages are verified with the **public key** of the sender
To sign/encrypt a message, just select the appropriate method in the send dialog. To sign/encrypt a message, just select the appropriate method in the send dialog. You can always open the send dialog using the three-dots overflow menu in case you selected *Don't show again* before.
To sign/encrypt a message, just select the appropriate method in the send dialog. You can always open the send dialog using the three-dots overflow menu in case you selected *Don't show again* before.
To verify a signature or to decrypt a received message, open the message and just tap the gesture or padlock icon just below the message action bar.
The first time you send a signed/encrypted message you might be asked for a sign key. The first time you send a signed/encrypted message you might be asked for a sign key. FairEmail will automatically store the selected sign key in the used identity for the next time. If you need to reset the sign key, just save the identity or long press the identity in the list of identities and select *Reset sign key*. The selected sign key is visible in the list of identities. If need to select a key on a case by case basis, you can create multiple identities for the same account with the same email address. If you need to reset the sign key, just save the identity or long press the identity in the list of identities and select *Reset sign key*. The selected sign key is visible in the list of identities. If need to select a key on a case by case basis, you can create multiple identities for the same account with the same email address.
The first time you send a signed/encrypted message you might be asked for a sign key. FairEmail will automatically store the selected sign key in the used identity for the next time. If you need to reset the sign key, just save the identity or long press the identity in the list of identities and select *Reset sign key*. The selected sign key is visible in the list of identities. If need to select a key on a case by case basis, you can create multiple identities for the same account with the same email address.
In the privacy settings you can select the default encryption method (PGP or S/MIME), enable *Sign by default*, *Encrypt by default* and *Automatically decrypt messages*, but be aware that automatic decryption is not possible if user interaction is required, like selecting a key or reading a security token.
The to be encrypted message text/attachments and the decrypted message text/attachments are stored locally only and will never be added to the remote server. The to be encrypted message text/attachments and the decrypted message text/attachments are stored locally only and will never be added to the remote server. If you want to undo decryption, you can use the *resync* menu item in the three-dots menu of the message action bar.
The to be encrypted message text/attachments and the decrypted message text/attachments are stored locally only and will never be added to the remote server. If you want to undo decryption, you can use the *resync* menu item in the three-dots menu of the message action bar.
*PGP*
You'll need to install and configure [OpenKeychain](https://f-droid.org/en/packages/org.sufficientlysecure.keychain/) first. FairEmail was tested with OpenKeychain version 5.4. Later versions will most likely be compatible, but earlier versions might not be. FairEmail was tested with OpenKeychain version 5.4. Later versions will most likely be compatible, but earlier versions might not be.
You'll need to install and configure [OpenKeychain](https://f-droid.org/en/packages/org.sufficientlysecure.keychain/) first. FairEmail was tested with OpenKeychain version 5.4. Later versions will most likely be compatible, but earlier versions might not be.
**Important**: the OpenKeychain app is known to (silently) crash when the calling app (FairEmail) is not authorized yet and is getting an existing public key. You can workaround this by trying to send a signed/encrypted message to a sender with an unknown public key. You can workaround this by trying to send a signed/encrypted message to a sender with an unknown public key.
**Important**: the OpenKeychain app is known to (silently) crash when the calling app (FairEmail) is not authorized yet and is getting an existing public key. You can workaround this by trying to send a signed/encrypted message to a sender with an unknown public key.
**Important**: if the OpenKeychain app cannot find a key (anymore), you might need to reset a previously selected key. This can be done by long pressing an identity in the list of identities (Setup, step 2, Manage). This can be done by long pressing an identity in the list of identities (Setup, step 2, Manage).
**Important**: if the OpenKeychain app cannot find a key (anymore), you might need to reset a previously selected key. This can be done by long pressing an identity in the list of identities (Setup, step 2, Manage).
**Important**: to let apps like FairEmail reliably connect to the OpenKeychain service to encrypt/decrypt messages, it might be necessary to disable battery optimizations for the OpenKeychain app.
**Important**: the OpenKeychain app reportedly needs contacts permission to work correctly.
**Important**: on some Android versions / devices it is necessary to enable *Show popups while running in background* in the additional permissions of the Android app settings of the OpenKeychain app. Without this permission the draft will be saved, but the OpenKeychain popup to confirm/select might not appear. Without this permission the draft will be saved, but the OpenKeychain popup to confirm/select might not appear.
**Important**: on some Android versions / devices it is necessary to enable *Show popups while running in background* in the additional permissions of the Android app settings of the OpenKeychain app. Without this permission the draft will be saved, but the OpenKeychain popup to confirm/select might not appear.
FairEmail will send the [Autocrypt](https://autocrypt.org/) header for use by other email clients, but only for signed and encrypted messages because too many email servers have problems with the often long Autocrypt header. Note that the most secure way to start an encrypted email exchange is by sending signed messages first. Received Autocrypt headers will be sent to the OpenKeychain app for storage on verifying a signature or decrypting a message. Note that the most secure way to start an encrypted email exchange is by sending signed messages first. Received Autocrypt headers will be sent to the OpenKeychain app for storage on verifying a signature or decrypting a message.
FairEmail will send the [Autocrypt](https://autocrypt.org/) header for use by other email clients, but only for signed and encrypted messages because too many email servers have problems with the often long Autocrypt header. Note that the most secure way to start an encrypted email exchange is by sending signed messages first. Received Autocrypt headers will be sent to the OpenKeychain app for storage on verifying a signature or decrypting a message.
All key handling is delegated to the OpenKey chain app for security reasons. All key handling is delegated to the OpenKey chain app for security reasons. This also means that FairEmail does not store PGP keys.
All key handling is delegated to the OpenKey chain app for security reasons. This also means that FairEmail does not store PGP keys.
Inline encrypted PGP in received messages is supported, but inline PGP signatures and inline PGP in outgoing messages is not supported, see [here](https://josefsson.org/inline-openpgp-considered-harmful.html) about why not.
@ -625,15 +633,15 @@ Common errors:
*S/MIME*
Encrypting a message requires the public key(s) of the recipient(s). Signing a message requires your private key. Signing a message requires your private key.
Encrypting a message requires the public key(s) of the recipient(s). Signing a message requires your private key.
Private keys are stored by Android and can be imported via the Android advanced security settings. There is a shortcut (button) for this in the privacy settings. Android will ask you to set a PIN, pattern, or password if you didn't before. If you have a Nokia device with Android 9, please [read this first](https://nokiamob.net/2019/08/10/a-bug-prevents-nokia-1-owners-from-unlocking-their-screen-even-with-right-pin-pattern/).
Note that certificates can contains multiple keys for multiple purposes, for example for authentication, encryption and signing. Note that certificates can contains multiple keys for multiple purposes, for example for authentication, encryption and signing. Android only imports the first key, so to import all the keys, the certificate must first be split. This is not very trivial and you are advised to ask the certificate supplier for support. This is not very trivial and you are advised to ask the certificate supplier for support.
Note that certificates can contains multiple keys for multiple purposes, for example for authentication, encryption and signing. Android only imports the first key, so to import all the keys, the certificate must first be split. This is not very trivial and you are advised to ask the certificate supplier for support.
Note that S/MIMEsigning with other algorithms than RSA is supported, but be aware that other email clients might not support this. S/MIME encryption is possible with symmetric algorithms only, which means in practice using RSA. S/MIME encryption is possible with symmetric algorithms only, which means in practice using RSA.
Note that S/MIMEsigning with other algorithms than RSA is supported, but be aware that other email clients might not support this. S/MIME encryption is possible with symmetric algorithms only, which means in practice using RSA.
The default encryption method is PGP, but the last used encryption method will be remembered for the selected identity for the next time. You might need to enable the send options in the three dots menu again to be able to select the encryption method. You might need to enable the send options in the three dots menu again to be able to select the encryption method.
The default encryption method is PGP, but the last used encryption method will be remembered for the selected identity for the next time. You might need to enable the send options in the three dots menu again to be able to select the encryption method.
To allow different private keys for the same email address, FairEmail will always let you select a key when there are multiple identities with the same email address for the same account.
@ -648,7 +656,7 @@ Common errors:
* *Private key does not match any encryption keys*: the selected key cannot be used to decrypt the message, probably because it is the incorrect key
* *No private key*: no certificate was selected or no certificate was available in the Android keystore
In case the certificate chain is incorrect, you can tap on the little info button to show the all certificates. After the certificate details the issuer or "selfSign" is shown. A certificate is self signed when the subject and the issuer are the same. Certificates from a certificate authority (CA) are marked with "[keyCertSign](https://tools.ietf.org/html/rfc5280#section-4.2.1.3)". In case the certificate chain is incorrect, you can tap on the little info button to show the all certificates. After the certificate details the issuer or "selfSign" is shown. A certificate is self signed when the subject and the issuer are the same. Certificates from a certificate authority (CA) are marked with "[keyCertSign](https://tools.ietf.org/html/rfc5280#section-4.2.1.3)". Certificates found in the Android key store are marked with "Android".
In case the certificate chain is incorrect, you can tap on the little info button to show the all certificates. After the certificate details the issuer or "selfSign" is shown. A certificate is self signed when the subject and the issuer are the same. Certificates from a certificate authority (CA) are marked with "[keyCertSign](https://tools.ietf.org/html/rfc5280#section-4.2.1.3)". Certificates found in the Android key store are marked with "Android".
A valid chain looks like this:
@ -662,7 +670,7 @@ Please see [here](https://support.google.com/pixelphone/answer/2844832?hl=en) ho
The use of expired keys, inline encrypted/signed messages and hardware security tokens is not supported.
If you are looking for a free (test) S/MIME certificate, see [here](http://kb.mozillazine.org/Getting_an_SMIME_certificate) for the options. Please be sure to [read this first](https://davidroessli.com/logs/2019/09/free-smime-certificates-in-2019/#update20191219) if you want to request an S/MIME Actalis certificate. Please be sure to [read this first](https://davidroessli.com/logs/2019/09/free-smime-certificates-in-2019/#update20191219) if you want to request an S/MIME Actalis certificate. If you are looking for a cheap S/MIME certificate, I had a good experience with [Certum](https://www.certum.eu/en/smime-certificates/).
If you are looking for a free (test) S/MIME certificate, see [here](http://kb.mozillazine.org/Getting_an_SMIME_certificate) for the options. Please be sure to [read this first](https://davidroessli.com/logs/2019/09/free-smime-certificates-in-2019/#update20191219) if you want to request an S/MIME Actalis certificate. If you are looking for a cheap S/MIME certificate, I had a good experience with [Certum](https://www.certum.eu/en/smime-certificates/).
How to extract a public key from a S/MIME certificate:
@ -679,19 +687,19 @@ S/MIME sign/encrypt is a pro feature, but all other PGP and S/MIME operations ar
<aname="faq13"></a>
**(13) How does search on device/server work?**
You can start searching for messages on sender (from), recipient (to, cc, bcc), subject, keywords or message text by using the magnify glass in the action bar of a folder. You can start searching for messages on sender (from), recipient (to, cc, bcc), subject, keywords or message text by using the magnify glass in the action bar of a folder. You can also search from any app by selecting *Search email* in the copy/paste popup menu.
You can start searching for messages on sender (from), recipient (to, cc, bcc), subject, keywords or message text by using the magnify glass in the action bar of a folder. You can also search from any app by selecting *Search email* in the copy/paste popup menu.
Searching in the unified inbox will search in all folders of all accounts, searching in the folder list will search in the associated account only and searching in a folder will search in that folder only.
Messages will be searched for on the device first. Messages will be searched for on the device first. There will be an action button with a search again icon at the bottom to continue searching on the server. You can select in which folder to continue the search. You can select in which folder to continue the search.
Messages will be searched for on the device first. There will be an action button with a search again icon at the bottom to continue searching on the server. You can select in which folder to continue the search.
The IMAP protocol doesn't support searching in more than one folder at the same time. Searching on the server is an expensive operation, therefore it is not possible to select multiple folders. Searching on the server is an expensive operation, therefore it is not possible to select multiple folders.
The IMAP protocol doesn't support searching in more than one folder at the same time. Searching on the server is an expensive operation, therefore it is not possible to select multiple folders.
Searching local messages is case insensitive and on partial text. The message text of local messages will not be searched if the message text was not downloaded yet. Searching on the server might be case sensitive or case insensitive and might be on partial text or whole words, depending on the provider. The message text of local messages will not be searched if the message text was not downloaded yet. Searching on the server might be case sensitive or case insensitive and might be on partial text or whole words, depending on the provider.
Searching local messages is case insensitive and on partial text. The message text of local messages will not be searched if the message text was not downloaded yet. Searching on the server might be case sensitive or case insensitive and might be on partial text or whole words, depending on the provider.
Some servers cannot handle searching in the message text when there are a large number of messages. For this case there is an option to disable searching in the message text. For this case there is an option to disable searching in the message text.
Some servers cannot handle searching in the message text when there are a large number of messages. For this case there is an option to disable searching in the message text.
It is possible to use Gmail search operators by prefixing a search command with *raw:*. If you configured just one Gmail account, you can start a raw search directly on the server by searching from the unified inbox. If you configured multiple Gmail accounts, you'll first need to navigate to the folder list or the archive (all messages) folder of the Gmail account you want to search in. Please [see here](https://support.google.com/mail/answer/7190) for the possible search operators. For example: If you configured just one Gmail account, you can start a raw search directly on the server by searching from the unified inbox. If you configured multiple Gmail accounts, you'll first need to navigate to the folder list or the archive (all messages) folder of the Gmail account you want to search in. Please [see here](https://support.google.com/mail/answer/7190) for the possible search operators. For example:
It is possible to use Gmail search operators by prefixing a search command with *raw:*. If you configured just one Gmail account, you can start a raw search directly on the server by searching from the unified inbox. If you configured multiple Gmail accounts, you'll first need to navigate to the folder list or the archive (all messages) folder of the Gmail account you want to search in. Please [see here](https://support.google.com/mail/answer/7190) for the possible search operators. For example:
`
raw:larger:10M`
@ -703,7 +711,7 @@ Searching through a large number of messages on the device is not very fast beca
This means that searching for a message text requires that files containing the message texts need to be opened one by one to check if the searched text is contained in the file, which is a relatively expensive process.
In the *miscellaneous settings* you can enable *Build search index* to significantly increase the speed of searching on the device, but be aware that this will increase battery and storage space usage. The search index is based on words, so searching for partial text is not possible. Searching using the search index is by default AND, so searching for *apple orange* will search for apple AND orange. Words separated by commas result in searching for OR, so for example *apple, orange* will search for apple OR orange. Both can be combined, so searching for *apple, orange banana* will search for apple OR (orange AND banana). Using the search index is a pro feature. The search index is based on words, so searching for partial text is not possible. Searching using the search index is by default AND, so searching for *apple orange* will search for apple AND orange. Words separated by commas result in searching for OR, so for example *apple, orange* will search for apple OR orange. Both can be combined, so searching for *apple, orange banana* will search for apple OR (orange AND banana). Using the search index is a pro feature.
In the *miscellaneous settings* you can enable *Build search index* to significantly increase the speed of searching on the device, but be aware that this will increase battery and storage space usage. The search index is based on words, so searching for partial text is not possible. Searching using the search index is by default AND, so searching for *apple orange* will search for apple AND orange. Words separated by commas result in searching for OR, so for example *apple, orange* will search for apple OR orange. Both can be combined, so searching for *apple, orange banana* will search for apple OR (orange AND banana). Using the search index is a pro feature.
From version 1.1315 it is possible to use search expressions like this:
@ -728,7 +736,7 @@ Searching on the device is a free feature, using the search index and searching
An Outlook / Live / Hotmail account can be set up via the quick setup wizard and selecting *Outlook*.
To use an Outlook, Live or Hotmail account with two factor authentication enabled, you need to create an app password. See [here](https://support.microsoft.com/en-us/help/12409/microsoft-account-app-passwords-two-step-verification) for the details. See [here](https://support.microsoft.com/en-us/help/12409/microsoft-account-app-passwords-two-step-verification) for the details.
To use an Outlook, Live or Hotmail account with two factor authentication enabled, you need to create an app password. See [here](https://support.microsoft.com/en-us/help/12409/microsoft-account-app-passwords-two-step-verification) for the details.
See [here](https://support.office.com/en-us/article/pop-imap-and-smtp-settings-for-outlook-com-d088b986-291d-42b8-9564-9c414e2aa040) for Microsoft's instructions.
@ -739,7 +747,7 @@ For setting up an Office 365 account, please see [this FAQ](#user-content-faq156
<aname="faq15"></a>
**(15) Why does the message text keep loading?**
The message header and message body are fetched separately from the server. The message text of larger messages is not being pre-fetched on metered connections and will be fetched on demand on expanding a message. The message header and message body are fetched separately from the server. The message text of larger messages is not being pre-fetched on metered connections and need to be fetched on opening the message. The message text will keep loading if there is no connection to the account, see also the next question, or if there other operations, like synchronizing messages, are being executed.
The message header and message body are fetched separately from the server. The message text of larger messages is not being pre-fetched on metered connections and will be fetched on demand on expanding a message. The message text will keep loading if there is no connection to the account, see also the next question, or if there other operations, like synchronizing messages, are being executed.
You can check the account and folder list for the account and folder state (see the legend for the meaning of the icons) and the operation list accessible via the main navigation menu for pending operations (see [this FAQ](#user-content-faq3) for the meaning of the operations).
@ -1463,6 +1471,7 @@ For security reasons the files with the original message texts are not accessibl
* Did you know that you can long press the people's icon to show/hide the CC/BCC fields and remember the visibility state for the next time?
* Did you know that you can insert the email addresses of an Android contact group via the three dots overflow menu?
* Did you know that if you select text and hit reply, only the selected text will be quoted?
* Did you know that you can long press the trash icons (both in the message and the bottom action bar) to permanently delete a message or conversation? (version 1.1368+)
@ -388,7 +388,15 @@ Operations are processed only when there is a connection to the email server or
You should try to fix this by contacting your provider or by getting a valid security certificate because invalid security certificates are insecure and allow [man-in-the-middle attacks](https://en.wikipedia.org/wiki/Man-in-the-middle_attack). If money is an obstacle, you can get free security certificates from [Let’s Encrypt](https://letsencrypt.org).
Alternatively, you can accept the fingerprint of the invalid server certificate as shown below the error message by ticking a checkbox. In case of an existing account (IMAP, receive) and/or identity (SMTP, send) you will need check/save it via setup step 1 and 2 to get the error message. This will "pin" the server certificate to prevent man-in-the-middle attacks. Note that you should make sure the internet connection you are using is safe if you do this.
Alternatively, you can accept the fingerprint of invalid server certificates like this:
1. Make sure you are using a trusted internet connection (no public Wi-Fi networks, etc)
1. Go to the setup screen via the navigation menu (swipe from the left side inwards)
1. In step 1 and 2 tap *Manage* and tap the faulty account and identity
1. Check/save the account and identity
1. Tick the checkbox below the error message and save again
This will "pin" the server certificate to prevent man-in-the-middle attacks.
Note that older Android versions might not recognize newer certification authorities like Let’s Encrypt causing connections to be considered insecure, see also [here](https://developer.android.com/training/articles/security-ssl).
@ -1463,6 +1471,7 @@ For security reasons the files with the original message texts are not accessibl
* Did you know that you can long press the people's icon to show/hide the CC/BCC fields and remember the visibility state for the next time?
* Did you know that you can insert the email addresses of an Android contact group via the three dots overflow menu?
* Did you know that if you select text and hit reply, only the selected text will be quoted?
* Did you know that you can long press the trash icons (both in the message and the bottom action bar) to permanently delete a message or conversation? (version 1.1368+)