How to delegate inbox triage safely without sharing your password

If anyone — a VA, an assistant, a freelancer, a friend — asks for your email password to "help with your inbox," the answer is no. Always. There is a safer way that takes about ten minutes to set up and works with any helper.

Why password sharing is never the right answer

Handing out a password means handing out everything: password reset links for your bank, two-factor codes texted to email, drafts, contracts, and the keys to every SaaS tool you've ever signed up for. It also breaks the terms of service of every major email provider, and it makes any breach forensically impossible to untangle — you can't tell what they did versus what you did.

The good news: Gmail and Outlook both ship a first-class feature for exactly this scenario.

The safe setup (Gmail)

1. Open Gmail → Settings → Accounts and Import → Grant access to your account.
2. Add the helper's Google account.
3. Choose "Mark conversation as read when opened by others" so you can see what's been triaged.
4. The helper opens your inbox from their own Gmail. They never see your password. You can revoke access in one click.

Delegates can read, send, archive, and label — but cannot change your password, see your full settings, or chat as you. That's exactly the scope you want.

The safe setup (Outlook / Microsoft 365)

Outlook calls it Delegate Access. In the desktop or web client: File → Account Settings → Delegate Access, add the helper, and pick "Reviewer" (read), "Author" (read + create), or "Editor" (full triage). Revocable anytime.

What to actually have them do

The setup is the easy part. The brief is what makes delegated triage useful instead of scary. A good one fits on one page:

• Archive immediately: newsletters, receipts under $X, calendar invites you've already accepted, LinkedIn notifications.
• Label and leave for me: anything from clients, anything mentioning legal/contract/invoice, anything from people in a "VIP" list.
• Draft a reply for my approval: scheduling requests, intro requests, vendor questions with a clear answer.
• Never send without approval. Drafts only — you press send.
• Never click links in suspicious mail. Forward to security@ or just delete.

Put that in a shared doc. Update it whenever you catch a mistake. Within two weeks the helper will triage faster than you do.

Where Offload fits

Offload's inbox-cleanup category is built around this exact model. You hand the doer Gmail/Outlook delegate access (not a password), share your rules doc, and they triage. Payment only releases when you approve the result, so there's no incentive to cut corners.

We don't ask for your password. We don't store your password. No Offload doer will ever ask for your password — if one does, report it and we remove them. That rule is non-negotiable.

A 10-minute starter kit

1. Turn on delegate access in Gmail or Outlook.
2. Write the one-page rules doc above (steal it — we don't mind).
3. Post a 2-hour "inbox triage" task with the rules attached.
4. Review the result. Approve. Repeat weekly.

The first session is the most expensive because you're teaching the rules. By the third, the helper is faster than you, and you've reclaimed the hour a day you were losing to your own inbox.

Ready to hand off your inbox the safe way? Post a task →