Most of what OpenEFA does happens before a message reaches anyone. The MailGuard portal is the part people actually touch: where they look at what was held, release what they want, and tell us when we got it wrong. Over the last six weeks it has changed more than in the previous year. Here is what is different.
A new interface
The portal now opens in a sidebar layout. The message list stays where it is; clicking a message opens a detail panel beside it instead of a new page, with the reasons it was held, the sender's history with your organization, and the actions you are likely to want: release, block, trust the sender, delete. Security advisories moved into a notification drawer so they are available without taking over the page.
Nothing you could do before has gone away. The classic layout remains available from your profile for a transition period, and every page works the same in both.
Ten languages
The portal, the quarantine digest and account emails are now available in English, Czech, Dutch, French, German, Italian, Polish, Portuguese, Slovak and Spanish. Each user picks a language from the top bar and the choice is remembered for their account. An administrator in one language and their users in another is fine. If your team needs a language that is not on the list, ask; adding one is a translation job, not an engineering one.
Passkeys for everyone
Passkey sign-in, with a fingerprint, face or hardware security key, was previously limited to administrators. It is now open to every role. A passkey cannot be phished, reused or guessed, which is why we would rather you used one than a password and a code. Authenticator codes, email codes and backup codes remain available for anyone who prefers them or needs a fallback.
Scam Watch
Every two weeks the portal shows one short tip about a scam pattern people are seeing right now: the fake toll notice, the "boss" who urgently needs gift cards, the QR code that asks you to verify your account, the voicemail that is really a login page. Each tip is a few plain sentences written for the person reading their mail, not for an administrator, and it can be dismissed. The idea is modest: the filter stops most of these, and the few that get through are stopped by someone who has read a sentence about them recently.
Impersonation alerts for administrators
When someone forges one of your domain's addresses and the message is blocked, your domain administrators now receive a notice listing the attempts: who was impersonated, who was targeted, and when. You choose a daily summary or immediate alerts per domain. The impersonated user is never copied, so an attacker cannot use the alert itself as a lure.
Smaller things you may notice
- No accidental duplicates. Releasing a message that someone already released now asks first, and tells you who released it and when.
- Account emails look like us. New-account, password-reset and archive-access emails carry the OpenEFA mark, arrive in your language, and are signed by the administrator who sent them, with replies going to that person.
- "Remember my login" remembers only your address. It no longer keeps a session open across visits.
- Bulk releases do not train the filter. Releasing a large batch, or many messages in quick succession, still delivers them but no longer teaches the system that each of those senders is trusted. Individual, considered releases still do.