May 2026 Major Release

This release focuses on improving team account management, inbox performance, and frontend reliability across the Mailsac web app.

Summary

  • New “elevate to root” permission for safer admin delegation
  • Inbox UI rewritten with improved pagination and clarity
  • Faster debugging tools and message analytics
  • MFA enforcement tightened for account security

Features

Elevate to Root User

Team users can now be granted an “elevate to root” permission. This allows a user to temporarily assume root-level privileges within their session without exposing root account credentials.

Use cases:

  • Safer offboarding (no shared root access to rotate)
  • Delegating admin tasks without sharing credentials

Elevation is session-scoped and requires re-authentication.

Individual Inbox Refresh

The inbox UI has been rewritten on the new frontend framework.

Improvements:

  • Faster, more complete pagination and message navigation
  • Clearer indication of public vs private inboxes
  • Reduced UI latency when loading large inboxes

General Improvements

Continued migration to the new frontend framework across multiple app pages.

Faster loading for inbound message debugging and message count charts.

Direct access to forwarded inboxes from the Enhanced Addresses list.

POP3 settings consolidated into the Enhanced Address Management screen.

Security & Fixes

MFA is now required, as an additional security step, to remove MFA from both team and root accounts.

Fixed an issue where some inbound mail was not tracked correctly. As a result, Ops usage may increase for affected accounts.

Removed the spam feature due to low usage.

Upgraded frontend dependencies to address known security vulnerabilities.

Behavior Changes

Spam feature removed – account.disableSpam property no longer present.

Inbound message tracking corrected (may increase Ops usage as noted above).