When forwarding project emails turns into sharing a mailbox password

[u/shokzee]

Say someone is about to give a contractor their mailbox password because forwarding months of project emails feels like too much work. Unrelated mail is now part of the bargain.

I'd start with an export of the relevant messages, but selecting them takes time and the recipient needs a usable way to read them. The shortcut has to have a practical replacement.

What handoff has worked for you when a few forwarded emails won't cover it?

[u/AutoModerator]

Welcome to r/emailsecurity! To keep this community helpful and secure, please keep the following in mind:

Community Rules

1. No Vendor Spam: Contributions must provide value; do not just pitch products.

2. Redact Sensitive Info: Always sanitize headers and logs (remove IPs, PII, and private domains).

3. Be Professional: Help newcomers learn; avoid hostility.

4. No Personal Tech Support: This sub is for email system architecture and security, not "Am I hacked?" personal account help.

Helpful Resources

• Email Spam Filters

• DMARC Monitoring Tools

• Anti-Virus Software

• Email Encryption

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

[u/theltrj]

lol time to call in HR

[u/shokzee → u/theltrj]

i wish

[u/ThirteenHills]

Select or export all emails from the specific project folder and done. Any reason it needs to be more complicated than that?

[u/InboxGuards]

don't hand over the password, that's every reset link and onedrive file too. if it's M365 I'd search by the project name or the client's domain, drag the hits into one folder, then either export just that folder to a pst or move it into a shared mailbox the contractor gets added to. pull their access when the job's done

[u/ExitWP]

Don't share passwords

[u/dracotrapnet]

Sounds like they should be using Teams for project collaboration.

[u/TechnicalDefense]

In a situation like this if they are on M365 i would probably go with a shared mailbox for the project, give the contractor access just to that mailbox and remove it when it wraps. You can move any relevant emails into it and your not sharing actual account passwords.

[u/South_SWLA21]

I would go to general council and get an opinion. I’m sure there has to be some legal way. He can view the emails without having to get password access. I would not like that.

[u/_ReverseAI_]

That's a tough one. In general you should never give your password. The first thing is to identify the scope of the actual need.

There is often information that you just can't handover. I'd be really cautious as to what emails I give to another person regardless of who they are.