StayPrivateMail Secure email for your customers
Try it free

Guide

Set up email routing with Microsoft 365

Configure your Microsoft 365 tenancy so emails containing #private are securely routed to StayPrivateMail.

⚙️ Email routing setup 🔒 Admin access required

Automated setup

Use the automated setup process in the StayPrivate admin portal to configure routing for secure messages and shared files.

Before you start, create your StayPrivateMail account and have a Microsoft 365 administrator available to complete the configuration.
1

Sign in to the admin portal

Go to admin.stayprivate.com and sign in with your administrator account.

2

Start server configuration

Open Server configuration in the admin portal.

3

Choose Microsoft 365

Select Microsoft 365 and follow the automated setup process.

4

Grant permissions

Approve the required permissions so StayPrivateMail can create the routing configuration securely.

Once complete, your email system will automatically route emails containing #private to StayPrivateMail.

Alternative: manual setup

For manual setup, follow the Microsoft 365 configuration instructions provided in your StayPrivate admin portal. You will need the routing details for your account as well as the appropriate Exchange administrative permissions.

The outline below describes the process. Use your account’s configuration instructions for the connector settings, routing destination and rule conditions.
1

Open Exchange Admin Center

Go to Mail flow → Rules.

2

Create a new rule

Add a rule that applies to outbound messages.

3

Set the condition

Match emails where the subject or body contains #private.

4

Set the action

Route matching messages through the outbound connector configured for StayPrivateMail, using the settings supplied for your account. Your mail server must not send a separate copy that bypasses StayPrivateMail. StayPrivateMail may itself deliver to a business inbox using TLS.

What this setup does

With the routing rule configured and enabled, outbound emails matching #private are routed through StayPrivateMail.

  • Normal emails are unaffected
  • Users keep their usual email application
  • Add #private to the email body when secure sending is needed

Test your setup

From an approved business account, send a test email to an external address you control, including:

  • A simple, non-sensitive test message
  • An optional non-sensitive attachment
  • #private in the email body

Test a personal recipient address for a Keepd notification and secure access. Test a TLS-capable business address for inbox delivery through StayPrivateMail. Use #private-all when testing Keepd access for all recipients. Confirm there is no separate copy bypassing StayPrivateMail, test a reply in Keepd, and check that an ordinary email without #private still follows your usual mail flow.

Next step

Once setup is complete, your team can send secure messages and share files from their usual email accounts.

Send using #private