Multi-Account & Unified Inbox

Adding accounts

• Up to 10 accounts supported
• Mix Gmail, Outlook, and IMAP/SMTP freely
• Each account has independent OAuth or IMAP credentials
• Account credentials encrypted with AES-GCM via Android KeyStore

Switching accounts

Three ways:

1. Profile card — tap your avatar in the top-left to open the account switcher
2. Horizontal swipe — swipe horizontally on the profile avatar to cycle through accounts
3. Quick switch — tap the account name in the profile card to show the account list

The profile card

Tap your avatar to open:

• Current account avatar, display name, and email
• Number of linked accounts
• Settings button
• Sign Out button
• Add Account button
• Account list for quick switching (horizontal scroll)

Unified Inbox

Enable in Settings → Navigation → Unified Inbox (requires 2+ accounts). Adds a Unified tab to the dock bar that combines all accounts into a single feed. The Unified tab is automatically removed from the dock bar when the feature is disabled.

Account management

Google Sign-In

Uses Android Credential Manager API for identity, then GoogleAuthUtil.getToken() for Gmail OAuth2 token. Token refresh is automatic.

Troubleshooting: If you see "No Google account found", ensure you have a Google account added in Settings → Accounts on your device.

Microsoft Sign-In

Uses MSAL 5.4.0 with MultipleAccountPublicClientApplication. Opens browser-based auth. Supports silent token refresh.

IMAP/SMTP Setup

Manual configuration required. Presets available for Gmail, Outlook, Yahoo, Zoho, and Custom.

Field	Description
Provider	Dropdown with presets that auto-fill host/port/SSL
IMAP host	e.g., imap.gmail.com
IMAP port	Typically 993 (SSL) or 143 (STARTTLS)
SMTP host	e.g., smtp.gmail.com
SMTP port	Typically 465 (SSL) or 587 (STARTTLS)
Username	Your email address
Password	Stored encrypted via Android KeyStore AES-GCM

A connection test validates IMAP and SMTP settings before saving.

Session restoration

On app launch, session restoration is two-phase:

1. Phase A (quick): Reads cached auth state from encrypted DataStore synchronously. No blocking on network. Used for instant splash dismissal.
2. Phase B (background): Same as Phase A, plus token refresh and push registration. Runs after the first frame.

Sign out

• Signing out clears OAuth tokens and unregisters from push notifications.
• If no accounts remain, all local data is wiped.
• Multiple accounts can be signed out individually or all at once.

Performance warning

When adding a 4th+ account, a dialog appears advising of potential performance impact on resource-constrained devices.