Quick Start Guide

MDOfficeMail Secure Email — Revision 2.0, Sept 20, 2022

How can I log into my webmail?

Webmail login URL depends on the email ID suffix selected by you. Below is the list of web addresses for each email ID suffix:

Email SuffixWebmail URL
Your own domainhttps://xxxxx.mdofficemail.com (xxxxx is your domain-specific word)
@hipaamail.nethttps://hipaamail.mdofficemail.com
@hipaamail.ushttps://hipaa.mdofficemail.com
@mdofficemail.comhttps://mail.mdofficemail.com
@mdomail.comhttps://mdom.mdofficemail.com
@medsecuremail.comhttps://medsecure.mdofficemail.com
@phymail.comhttps://phy.mdofficemail.com
@medofficemail.comhttps://med.mdofficemail.com
@secur-mail.comhttps://secur.mdofficemail.com
@securdraft.comhttps://securedraft.mdofficemail.com
Is it necessary to configure Password Retrieval Questions and Answers? How can it be done?

User has to contact MDofficeMail Support to reset their password, along with their credentials including the last 4 digits of your credit card on file, if Password Retrieval Questions & Answers are not configured. Further, the user needs to wait until the Support Team responds to the request.

To avoid this, we strongly recommend MDofficeMail users configure Password Retrieval Questions & Answers:

  1. Log into webmail
  2. Go to Options > Change Password
  3. Questions and Answers can be entered in this window. Minimum 2 sets of Q & As are required
How can I change password?
  1. Log into webmail.
  2. Go to Options > Preferences > Change Password.
  3. Enter new password, confirm the new password, and click Change.
Password must be a minimum of 8 characters, consisting of numbers and letters in a combination of upper and lower case.
How can the Account Admin (of multi-user subscription) create/edit/delete other user accounts? How can the Account Admin reset the password of other users?
  1. Browse https://mdofficemail.com/subscriptions/accountadministration.aspx
  2. Login using your admin email ID and password (email ID created at the time of subscription)
  3. Click the tab "Manage Email Accounts"
  4. Add other users (email IDs and passwords) and save.
  5. From here you can edit/delete users and reset the password of a user.
How can the Domain Admin (with domain subscription) create/edit/delete user accounts? How can the Domain Admin reset user passwords?
To create users:
  1. Browse https://mail.mdofficemail.com/cgi/user.cgi (this page can be accessed from the Account Settings tab on the webmail login page).
  2. Login with your admin username (your admin email ID with @mdofficemail.com suffix) and password.
  3. Click "Users", enter desired username and password (alpha-numerical, minimum 8 characters).
  4. Click "Create Account".
To edit/delete users or reset password:
  1. Click "Account Settings" from the webmail login page (or browse https://mail.mdofficemail.com/cgi/user.cgi)
  2. Login with your admin username (your admin email ID with @mdofficemail.com suffix) and password.
  3. Click "Users", click "Search Accounts" next to your domain name. User list is displayed.
  4. Double-click the username you want to manage.
  5. To reset password, enter the new password and click "Save user".
  6. To delete the user, click "Delete User".
How can I send a secure, encrypted message?

a) If while subscribing you selected encryption preference as "Encrypted message delivery by default and plain message delivery on demand" (applies to your own domain, or @mdofficemail.com / @mdomail.com / @medsecuremail.com / @secur-mail.com / @hipaamail.net / @securedraft.com / @phymail.com):

Nothing needs to be done while sending messages from webmail or an email client program (MS Outlook / Apple Mail etc.). Messages are encrypted and securely sent as required.

b) If you selected encryption preference as "Plain message delivery by default and encrypted message delivery on demand" (applies to your own domain, or @hipaamail.us / @medofficemail.com):

  • While sending via an email client (MS Outlook, Apple Mail, etc.), type the word secure or the symbol ~ at the beginning of the subject line to send an encrypted message.
  • While using webmail, click the paddle lock icon so it displays a "locked" image.
Whether all of my sent messages are encrypted by following the above process?

No.

  • Messages between MDofficeMail users are secure but not delivered encrypted by default.
  • Messages between all domains hosted by MDofficeMail are not encrypted by default.
  • You can manually unlock and send a plain (unencrypted) message to any recipient outside your domain.
  • You can add email IDs of family & friends so that plain messages are sent to them by default.
How can I send a plain (un-encrypted) message (no-PHI message)?

a) If your encryption preference is "Encrypted message delivery by default and plain message delivery on demand" (your own domain, or @mdofficemail.com / @mdomail.com / @medsecuremail.com / @secur-mail.com / @hipaamail.net / @securedraft.com / @phymail.com):

  • While sending via an email client, type :: in the subject line to send a plain message.
  • While using webmail, click the Paddle lock icon so it displays an "unlocked" image.

b) If your encryption preference is "Plain message delivery by default and encrypted message delivery on demand" (your own domain, or @hipaamail.us / @medofficemail.com), nothing needs to be done — messages are sent without encryption.

How can I manage my email account settings?

Click the Account Settings tab on the webmail login page and enter your email account credentials.

Direct URL: https://mail.mdofficemail.com/cgi/user.cgi

How can I validate a new recipient?

To make sure your email reached the correct person, you can use the validation feature. By sending a message with a validation request, the recipient needs a 6-digit token to open the message, which can be conveyed to them by phone. The validation token is required only by a new recipient, and only for the first message they receive from you.

  1. While composing/sending a message, click "Options" next to Toggle Cc/BCC.
  2. Select "Validate" from the dropdown next to "if new".
  3. Once the message is sent, an auto-generated message with a 6-digit token is delivered to your inbox.
  4. Call the recipient of the message and give them the token number.
How can I expire (disable recipient from viewing) an already sent message?

You can prevent the recipient from viewing a message, provided: (i) you sent an encrypted message, and (ii) the recipient hasn't already viewed it.

  1. Go to "Account settings page" in your webmail login page or browse https://mail.mdofficemail.com/cgi/user.cgi
  2. Enter your username and password.
  3. Click "MD Vault" tab on the left side.
  4. Click "Delete" against the message you want to force expire.
How can I import email messages from my other email account?

To import emails from your previous/other accounts (POP or IMAP mail server):

  1. Log in to your webmail.
  2. Click "Options" > "Preferences"
  3. Under Preferences, select "Extras"
  4. Select "Import", click "Configure"
  5. Enter details and click "Fetch now"
Remote HostPOP server address of your existing email account followed by : and port number (e.g. pop.gmail.com:995 for Gmail, pop.mail.yahoo.com:995 for Yahoo)
User nameUsername of your existing email account (e.g. your.name@gmail.com)
PasswordPassword associated with that account
Retrieval typeSelect POP if you want to import the whole message. Check "Leave on server" if you want to leave a copy in your existing account.
If the import isn't completed in 30 seconds, it continues in the background and you'll be notified by email. Only the Inbox can be imported.
How can a message be decrypted by the recipient?
  1. Click "View message" in the intimation message received in your Inbox.
  2. An https page will open in your web browser.
  3. First-time recipients need to create their credentials as explained below:
Token NumberDisplayed only if the sender wanted to validate your email account. You need to contact the sender to get this 6-digit validation code. It's automatically delivered to the sender's Inbox as soon as the message is sent to the recipient.
PasswordPlease remember this password for future use.
Password (confirm)Enter the same password again.
Password HintImportant — required if the password is forgotten.
WatermarkUseful to identify the sender in the future.
This is a one-time process. The same password can be used to view all encrypted messages received from MDofficeMail users in the future. Set a helpful Password Hint — resetting is time-consuming.
How can the recipient save a decrypted message to a local folder/email client?

The recipient of a secure message can download and save the message. After decrypting and viewing the message, click the Save button to download the message to the desired location.

How can the recipient of an encrypted message send a secure reply?

The recipient of a secure message can send a secure reply without having an MDofficeMail account. Click the "Secure Reply" tab after decrypting and viewing the message, compose, and send.

How can the recipient retrieve a forgotten password for decryption?
  1. Click "Send me password hint" — an email with the password hint will be sent to the recipient.
  2. If a Password Hint was not set by the recipient:
    1. Click "Ask sender to reset password"
    2. The sender of the message will get an email with a password reset request.
    3. Sender clicks the link in the message, leading to a webpage.
    4. Sender clicks "Reset destination account".
    5. Recipient will receive a message to reset password, then can reset it by clicking "View Message".
How to configure MS Outlook, Apple Mail, or any other email client application?

MDOfficeMail accounts can be configured in most desktop email client applications, including MS Outlook, Outlook Express, Windows Mail, Apple Mail, etc. Main settings are as follows:

SettingValue
Incoming mail server (POP)mail.mdofficemail.com
Outgoing mail server (SMTP)mail.mdofficemail.com
Outgoing authenticationCheck "My outgoing server requires authentication"
Incoming (POP) advancedSelect "This server requires an encrypted connection", Port 995, SSL
Outgoing (SMTP) advancedPort 465, SSL
IMAP servermail.mdofficemail.com, SSL, Port 993

For more information on configuring your account on an email client, visit: https://mdofficemail.com/support/index.html

Can I send plain messages by default to some selected email IDs?

You can add email addresses to a list so that plain unencrypted messages are sent to them by default:

  1. Log into webmail > Click Compose > Type email ID > Right-click on the email ID > Select "Unlock Recipient"
  2. All messages to this address will be plain (unencrypted) by default.
  3. You can reverse this by selecting "Lock this Recipient".
Please make sure you do not send ePHI to unlocked email addresses.
How can someone send me a HIPAA-compliant and secure message?

There are two easy ways:

  1. Anyone can browse https://EmailYourDoc.com, compose, and send a secure message to an MDofficeMail user.
  2. The recipient of an encrypted message can send a secure reply by clicking the "Secure Reply" tab in the message.

For more details, visit: https://mdofficemail.com/support/index.html

We respect your privacy. Please click here to view our privacy policy.