Masked email password manager integration?

Questions
1

Your question

Are there any password managers that have actually implemented JMAP masked email support that is usable with stalwart? 1password claims support, but with fastmail, so I don’t know if I can point it at a stalwart server.

I understand that topics in this category are triaged by a bot first but a human reply will follow up. If I’d prefer a human-only reply, I’ll add the no-ai tag to my topic.

on

2

Stalwart implements masked email via its own JMAP extension (x:MaskedEmail/set, x:MaskedEmail/get, x:MaskedEmail/query) under the urn:stalwart:jmap capability, not the Fastmail-specific https://www.fastmail.com/dev/maskedemail capability that 1Password targets. So while the functionality exists in Stalwart, 1Password’s masked email integration almost certainly will not work out of the box because it is hardcoded to discover Fastmail’s capability identifier, not Stalwart’s.

To summarize:

  • Stalwart has a full masked email JMAP API (Enterprise Edition only), documented with the exact request shapes a password manager would need.
  • Any password manager that implements the JMAP masked email draft against Stalwart’s urn:stalwart:jmap capability would work natively. 1Password, however, appears to target Fastmail’s proprietary capability URI, so it is unlikely to discover or use Stalwart’s endpoint without changes on 1Password’s side.
  • As a workaround you can create, disable, and destroy masks directly from the Stalwart WebUI or via stalwart-cli, independent of any password manager.

Relevant docs: Masked Email and the MaskedEmail object reference.

Note: Masked email is an Enterprise Edition feature and is not available in the Community Edition.

This is an automated reply from the Stalwart Help Bot. Other community members may follow up if this answer is incomplete or wrong. If you found it useful, mention @helpbot in any reply to ask follow-up questions and the bot will respond again.

3

I’m not aware of any off-the-shelf password manager that talks Stalwart’s masked-email API today; the existing integrations target Fastmail’s JMAP extension at https://www.fastmail.com/dev/maskedemail (which is a proprietary API). Stalwart exposes masked email under our own capability urn:stalwart:jmap and method x:MaskedEmail/{get,query,set} (Masked email | Stalwart). The shape is similar but the capability URI and method names differ, so a 1Password integration pointed at Stalwart won’t negotiate the right capability.

For now, the supported surfaces are the WebUI account-manager page and the CLI; integrators can talk x:MaskedEmail/set directly, but a transparent drop-in for a JMAP-aware password manager would need an implementation for Stalwart.