Phishing warning

If you receive a message with the subject “Dear Runbox User” or “RUNBOX.COM” (or similar) which asks you for your Runbox username and password, or asks you to click on a suspicious link, then please delete the message. We are deleting all the instances of this message we can find in Runbox accounts, but we might miss some.

These messages are not sent from Runbox staff and is an attempt to trick Runbox customers into entering their login information at a malicious website.

When Runbox contacts you we will always address you by your name, and we will never ask you for your login details.

For more information about phishing, please see the Phishing section of this article.

Continue Reading →

Notice to Apple Mail users regarding APOP

Today we disabled SSL 3.0 for POPS (Secure POP) and changed how we terminate POP connections to make it more secure.

Some Apple Mail users are using the server address apop.runbox.com and/or the authentication setting: Authenticated POP (APOP) in Apple Mail.

To change the account settings, please follow these instructions:

  1. Mail => Preferences to open the Accounts dialog.
  2. Select your Runbox account in the left pane.
  3. In “Incoming Mail Server”, enter: secure.runbox.com
  4. Click the Advanced button.
  5. Make sure the port is set to: 995
  6. Under “Authentication”, select: Password (Previously Authenticated POP)
  7. Click the red button in the top left corner to close Accounts.
  8. Click Save.

We added a Apple Mail compatible setup on the 13th of February 2013 after an update to Mail from Apple broke authentication for many users.

The new settings is a more secure way of using POP and will make sure your connection with our servers always use TLS (Transport Layer Security) or it will fail.

Continue Reading →

SSLv3 disabled on POP connections

For security reasons we have turned off SSLv3 on POP connections (port 995) today. That means we now only allow TLS 1.0, TLS 1.1 and TLS 1.2 on POP connections.

As a Runbox user you should not have to do anything — your email program should already support TLS and use it automatically. If not, please make sure your email program is up-to-date.

Apple Mail users: Please see our notice regarding APOP.

If you do experience any problems, please contact Runbox Support.

Continue Reading →