Skip to content
Coritan Docs

Get a coritan.gg mailbox

Take an address on coritan.gg when you create your Coritan account, or claim one later in webmail.

View as Markdown

In the dashboard

A Coritan account can have one mailbox of its own on coritan.gg, such as alex@coritan.gg. You take the address when you create your account, or you claim it later in webmail. You read the mail in webmail, and in any mail app over IMAP.

This page covers claiming the mailbox later. To take one while you sign up, see Sign up with a new mailbox.

  • Be signed in on coritan.com. Webmail offers the address only to your Coritan sign-in, so a mailbox you opened with its own address and password cannot claim one.
  • Have your Coritan password.
  • Check that you have no mailbox yet. An account can claim one mailbox, and a mailbox you took at sign-up is that one.

The name is the part before @coritan.gg. It must:

  • be 3–40 characters long;
  • use only letters, digits, dots, dashes and underscores, which webmail reads in lowercase;
  • start and end with a letter or a digit;
  • have no two dots in a row and no plus sign.

Some names are reserved, such as support, billing and webmail. A name is also taken when a Coritan account already signs in with that address.

  1. Go to Webmail. While your account has no mailbox, webmail shows Claim your @coritan.gg address.
  2. Type a name in Your address, or select one of the ideas under the field. Webmail checks the name as you type, and the line under the field says alex@coritan.gg is free. when it is.
  3. Enter your Coritan password in the field under it. It confirms that it is you, and it becomes the mailbox's password too.
  4. Select Create my mailbox.

A message says alex@coritan.gg is yours., and your new inbox opens. You go on signing in to Coritan with the email you use now. The new address is where your mail arrives.

The same page lists any invitation to a mailbox someone shared with you, with Accept and Decline. Under Have a mailbox already?, Add a mailbox adds one you manage to your account, as Add a mailbox to your account describes.

  • 5 GB of storage by default. The line under the folder list shows how much you use.
  • Sending limits, lower in its first 7 days. See Sending limits.
  • Sign-in from mail apps over IMAP and SMTP, with the mailbox's address and password. See Set up mail apps and devices.

We count each person a message goes to, in To, Cc and Bcc, so a message to three people counts as three. By default, a coritan.gg mailbox can send to:

  • in its first 7 days: up to 10 people in one message, 20 in a clock hour and 50 in 24 hours;
  • after that: up to 50 people in one message, 100 in a clock hour and 300 in 24 hours.

The hourly count starts again at the top of each hour. The 24-hour count covers the hour you are in and the 23 before it. A mailbox made from a hosting, VPN, proxy or Tor address keeps the limits of its first days for 30 days.

When a message would go past a limit, webmail does not send it and says how long to wait (Write and send email in webmail). A mail app gets a refusal from the mail server instead (A message is refused when you send it).

The mailbox sends from its own address only. A mail app that puts another address in the sender or in From is refused.

A new coritan.gg mailbox earns its sending. For its first 14 days, and for 14 days after we pause it, put it on hold or refuse one of its messages for what it said:

  • It sends from webmail only. A mail app can read its mail, and gets a refusal when it sends.
  • Each message waits 5 minutes in Scheduled before it goes. The bar at the bottom of webmail says Sending at and the time. Select Undo to take the message back, or cancel it in Scheduled as Schedule a message explains.
  • Webmail may ask you to pass a quick check, One check before your message goes, before a message goes.

After that, a mail app can send from the mailbox too, except over a hosting, VPN, proxy or Tor network, where webmail still works. When the Coritan account behind the mailbox has paid for anything, none of this applies.

When we see many mailboxes misused at once, we can treat every coritan.gg mailbox as new for a few hours.

What we check before your mail leaves

Section titled What we check before your mail leaves

Before a message from a coritan.gg mailbox leaves, we read what it says. We do not send it when:

  • its sender name is a brand, such as Apple, PayPal or Coritan. Send under your own name. A mailbox with no name sends as its own address, which is fine, and so is any other coritan.gg address.
  • its subject names a brand and its links go to another site.
  • a link shows one site and takes the reader to another.
  • it links to a site that a list of spam and phishing sites has.
  • in the mailbox's first 7 days, it links to a site that appeared in the last 14 days.
  • in the mailbox's first 7 days, it names a brand, asks the reader to act, for example to confirm a payment or a password, and links to another site.
  • it matches mail we blocked as spam.
  • our spam filter scores what it says as spam.

Webmail says why, and the message opens again with everything you wrote. A mail app gets a refusal that says why (A message is refused when you send it). When a message uses a brand's name, links to a listed site or matches mail we blocked, we also pause the mailbox.

When we pause or hold the mailbox

Section titled When we pause or hold the mailbox

We pause a coritan.gg mailbox when the mail it sends looks like spam. We check every two minutes for any of these:

  • It suddenly sends to far more people than it usually does. A mailbox that sent nothing in the week before is paused when it sends to 50 people or more in an hour.
  • A mail app keeps sending after the hourly or 24-hour sending limit refuses it: 10 recipients refused in one hour. Webmail checks the limits before it sends, so mail sent from webmail never counts here.
  • In the last 24 hours it wrote to 20 people or more, and mail to a fifth of them or more bounced because the address does not exist or its server refused the mail.
  • People it wrote to marked its mail as spam: one is enough in the mailbox's first 30 days, and two in 24 hours after that.
  • It tried to send phishing: a brand as its sender name or in a subject that links elsewhere, a link that hides where it goes, a link to a site on a list of spam and phishing sites, or mail we blocked (What we check before your mail leaves). We pause it at once.
  • In 24 hours it sent the same text or the same links as two or more other coritan.gg mailboxes, or, in its first 7 days, the same subject as two or more other new ones. We pause all of them.
  • In 24 hours it sent the same message to 5 people or more, one at a time.
  • Three or more coritan.gg mailboxes send from the same network in one hour, and the hourly or 24-hour limit refuses any of them. We pause all of them.

When we pause a mailbox for phishing and the Coritan account behind it has paid for nothing, we also suspend the account. A paused mailbox cannot sign in, send or receive mail, and mail it had not sent yet does not go out. If your account has another email address, we write to it. Webmail does not open the mailbox, and says why. To use it again, contact support. If you did not send that mail, someone else knows your password, so change your account password first.

We put a mailbox on hold when we pause another one made from the same network. A mailbox on hold signs in and receives mail as usual, and sends nothing. Webmail says Sending from alex@coritan.gg is on hold while we check it. above the list, and mail apps cannot sign in to send. Contact support to have the hold lifted.

What we keep about the mail you send

Section titled What we keep about the mail you send

When your coritan.gg mailbox sends a message, we keep a short record of it for 8 days to stop spam sent from free mailboxes: when it was sent, whether it came from webmail or a mail app and from which network, how many people it went to, the first 120 characters of its subject, and the domains it links to. We never keep the message itself. Our staff read these records only when a mailbox is paused or held.

The mailbox password starts as your Coritan password. When you change your account password, the mailbox password changes with it, and mail apps need the new one.

You can give the mailbox a password of its own on the Security tab of webmail settings. From then on it stays as it is when your account password changes. See Change the mailbox password.

That address is already taken.
Someone has a mailbox with that name, or a Coritan account signs in with that address. Choose another name.
That name is reserved.
We keep that name back. Choose another name.
Pick at least 3 characters., Keep it under 40 characters., Two dots in a row are not allowed. or a message about the characters to use
The name breaks one of the naming rules. Change it until the line under the field says it is free.
Pick a free address first.
You selected Create my mailbox with no name in Your address. Type a name, and wait until the line under the field says it is free.
Could not check that name just now. You can still try it.
We could not check the name. Select Create my mailbox anyway, or type the name again after a moment.
Incorrect account password.
Enter the password you sign in to your Coritan account with.
The mail service is not accepting new mailboxes right now. Try again in a moment.
We could not create the mailbox at that moment. Nothing was created, so try again later.
This account already has a mailbox.
Your account has its mailbox already, and webmail opens it.
No mailbox in your account yet
This site does not give out addresses, so the page offers only Add a mailbox and the invitations waiting for you. For mailboxes on a domain you own, see Mail Hosting.
A message that starts Could not create the mailbox: and says there were too many requests
An account can try to claim a mailbox 5 times an hour. One network can make 3 coritan.gg mailboxes an hour and 5 a day, counting the ones made at sign-up, and an IPv6 address counts as its /64 network. Wait, then try again.
Could not create the mailbox: Mailboxes cannot be made from this network.
We do not make mailboxes for the network you are on. Claim it from another network, such as your home connection or your phone's.
Could not create the mailbox: Mailboxes cannot be made from a hosting, VPN, proxy or Tor network.
Turn off the VPN or proxy, then claim the mailbox again.
Could not create the mailbox: We paused a mailbox made from this network in the last 7 days, so it cannot make another for now.
A mailbox made from the same address was paused for the mail it sent. Claim yours from another network, or contact support.
Your account could not be read
Webmail could not load what your account can claim. Select Try again.

The claim itself happens in webmail only. The public API has the two checks that the sign-up form makes before an account exists. Neither needs authentication.

Ask whether the storefront offers a mailbox, and on which domain, with GET /auth/mailbox-domain:

Shell
curl https://api.coritan.com/api/v1/auth/mailbox-domain
JSON
{"enabled": true, "domain": "coritan.gg"}

Check a name with GET /auth/mailbox-availability:

Shell
curl "https://api.coritan.com/api/v1/auth/mailbox-availability?local_part=alex"
JSON
{"available": false, "reason": "taken", "detail": "That address is already taken", "address": "alex@coritan.gg"}

reason is ok, invalid, reserved or taken, and detail says why a name cannot be used. When the storefront offers no mailbox, the domain check answers "enabled": false and the availability check answers 404 Mailboxes are not offered on this storefront. One IP address, or one IPv6 /64 network, can check up to 60 names a minute.

To create an account together with its mailbox, send mailbox_local_part to POST /auth/register, as Create an account shows.

API operations on this page

MethodPathWhat it does
GET/api/v1/auth/mailbox-domainMailbox domain
GET/api/v1/auth/mailbox-availabilityLive check behind the sign-up form's username field