Skip to main content

AliCloud Enterprise Mail · Complete Setup Guide

AliCloud Enterprise Mail (including the "Foreign Trade Mail" bundled by Alibaba.com International) is a common enterprise email service for foreign trade. Binding it to Laifaxin requires two roles working together:

WhoWhatRequired
AdminEnable "Allow Third-Party Clients" + "IMAP/SMTP Service" in the consoleYes
You (user)Generate the "Client Security Password" in the web UIYes

→ When binding, fill the password field with the Client Security Password (not your AliCloud mail login password).

AliCloud Enterprise Mail is unique: Standard vs. Foreign Trade Mail use different servers

AliCloud Enterprise Mail has two editions, with different server addresses — don't mix them up:

EditionLogin EntryServer Prefix
Standard Enterprise Mailqiye.aliyun.comimap.qiye.aliyun.com
Foreign Trade Mail (bundled with International)mail.alibaba.comimap.alibaba.com

→ Confirm which edition you have first, then copy the matching server address.


1. Server Parameters​

Standard Enterprise Mail (qiye.aliyun.com)​

ProtocolUseServerSSL Port
IMAPReceiveimap.qiye.aliyun.com993
SMTPSendsmtp.qiye.aliyun.com465

Foreign Trade Mail · Bundled with International (mail.alibaba.com)​

ProtocolUseServerSSL Port
IMAPReceiveimap.alibaba.com993
SMTPSendsmtp.alibaba.com465

Encryption: SSL / TLS


2. Admin: Enable 2 Services in the Console (Role 1)​

Before the user can generate a password, the enterprise admin enables two services in the console.

2.1 Enable "Allow Third-Party Clients"​

  1. Log in to the admin console at qiye.aliyun.com/admin
  2. Go to Security Management → Account Security Policy
  3. Find Allow Use of Third-Party Clients and enable it — you can enable it for all members / a specific department / specific accounts. Best practice: principle of least privilege — enable only for members who actually need third-party clients

AliCloud Enterprise Mail admin console - enable third-party client permission: Security Management → Account Security Policy page, turn on "Allow Use of Third-Party Clients", can be enabled by department or account scope

2.2 Enable "IMAP/SMTP Service"​

  1. In the admin console, edit the specific user account
  2. Check Enable IMAP/SMTP Service and save

AliCloud Enterprise Mail admin console - enable IMAP/SMTP service for the account: edit the target user account, check "Enable IMAP/SMTP Service" and save

Note for Foreign Trade Mail users

Foreign Trade Mail (mail.alibaba.com) users should check and enable the IMAP/SMTP service in the mailbox settings page.


3. User: Generate the Client Security Password (Role 2)​

After the admin authorizes, the mailbox user logs in to their own web mailbox.

3.1 Enable the Feature and Generate the Password​

  1. Go to mailbox settings → Account & Security
  2. Find Third-Party Client Security Password and enable it
  3. Click Generate New Password

AliCloud Enterprise Mail - enable Third-Party Client Security Password: on the Account & Security page, find "Third-Party Client Security Password", enable the feature and click "Generate New Password"

3.2 Complete Phone Verification​

Follow the prompt and complete phone code verification:

AliCloud Enterprise Mail - phone security verification: popup requires entering the phone verification code to confirm identity, the password is generated only after verification passes

3.3 Add a Note → Copy the Password​

The password is generated → add a purpose note (we suggest Laifaxin) → click OK → copy the password immediately:

AliCloud Enterprise Mail - add a note for the client password and copy: in the generated password popup, fill in the purpose note (e.g. "Laifaxin"), click OK to save and copy the password immediately

Passwords are manageable and revocable

Generated passwords appear in a list. When a device is no longer used, delete the corresponding password in the list — access from that device is revoked immediately without affecting other devices.

AliCloud Enterprise Mail - manage Client Security Password list: generated passwords are shown as a list, each with a purpose note, can be individually deleted to revoke access from the corresponding device


4. Bind in Laifaxin​

Go to Laifaxin email account and add the AliCloud enterprise mailbox:

FieldWhat to enter
Email addressFull enterprise email, e.g. yourname@yourcompany.com
PasswordPaste the Client Security Password (NOT the login password!)
IMAP serverStandard imap.qiye.aliyun.com / Foreign Trade imap.alibaba.com · Port 993 · SSL
SMTP serverStandard smtp.qiye.aliyun.com / Foreign Trade smtp.alibaba.com · Port 465 · SSL

Laifaxin add email - enter Client Security Password in the password field: full enterprise email in the address field, paste the Client Security Password generated in the previous step into the password field

Once verified, the mailbox status shows Normal — binding successful:

Laifaxin email account list - binding successful: the status column on the AliCloud enterprise mailbox row shows a green "Normal" badge, binding complete and ready to send/receive

After binding, turn on mail sync + notifications (see Check New Emails).


Pitfall Summary​

PitfallConsequenceHow to avoid
Standard edition entered with Foreign Trade Mail's server (or vice versa)Send/receive failsConfirm the edition first: qiye.aliyun.com → *.qiye.aliyun.com; mail.alibaba.com → *.alibaba.com
Admin didn't enable "Third-Party Client" / "IMAP/SMTP"User can't generate a password / binding failsAdmin must complete the 2 console settings in section 2
Binding with the AliCloud login passwordAuthentication failedMust use the Client Security Password, not the login password
Closed popup without copyingPassword lostGo to "Account & Security", delete the old one, regenerate
Port set to 25 / 143No encryption / blockedUse SSL: IMAP 993 / SMTP 465
Using enterprise mailbox for bulk sendingCompany domain goes to spam, hurts the whole orgUse a quality channel for bulk; reserve the enterprise mailbox for 1-on-1

FAQ​

Q1 · What's the difference between the Standard edition and Foreign Trade Mail?​

The core functionality is similar; the main difference is the server addresses:

DimensionStandard Enterprise MailForeign Trade Mail (Intl. bundle)
Login entryqiye.aliyun.commail.alibaba.com
IMAP / SMTP*.qiye.aliyun.com*.alibaba.com
SourcePaid by the companyBundled with Alibaba.com International

→ Same setup flow, only the server addresses differ. Confirm your edition first.

Q2 · Why does the admin need to enable permissions first?​

This is the enterprise mailbox's security policy: the company centrally controls "third-party app access" to prevent employees from arbitrarily authorizing apps to access corporate mail data.

→ Without "Allow Third-Party Clients" + "IMAP/SMTP Service" enabled by the admin, the user has no entry point even to generate a password. If you are the admin yourself, perform both roles.

Q3 · What if I forget / lose the Client Security Password?​

Cannot be recovered, but easy to handle — AliCloud's client passwords are manageable and revocable:

  1. Log in to the web UI → Account & Security → Third-Party Client Security Password
  2. Delete the old password entry in the list
  3. Click Generate New Password to create a new one → re-bind in Laifaxin

Q4 · Is an admin always required for AliCloud Enterprise Mail setup?​

Yes. "Allow Third-Party Clients" and "IMAP/SMTP Service" must be enabled by the admin in the console. Only after that can the user generate the Client Security Password.

→ If you're not the admin, ask your company IT / mailbox admin to enable it first.

Q5 · Is AliCloud Enterprise Mail suitable for foreign trade?​

Yes. Especially Foreign Trade Mail — it's purpose-built by Alibaba for International users, integrated with the Alibaba.com International ecosystem, well-suited to foreign trade.

But bulk sending should still go through a quality channel — sending bulk directly from the enterprise mailbox damages the company domain reputation.

Q6 · How many emails can I send per day with AliCloud? How to warm up?​

The daily send limit varies by plan; don't run outreach at the cap:

StageDaily sendNotes
Week 1 (newly bound)Start at 505–10 min interval
Weeks 2–4100–200Watch bounce rate (keep ≤ 3%)
Stable phaseUp to 300Bulk sends via quality channel

Learning Suggestions​

StageSuggestion
Confirm the edition firstStandard or Foreign Trade Mail? Determines which server set to use
Admin enables the 2 servicesAllow Third-Party Clients + IMAP/SMTP Service
User generates the passwordAccount & Security → Third-Party Client Security Password → Generate
One client, one password + noteEach client gets its own password with a clear note (e.g. Laifaxin / iPhone Mail)
Periodic cleanupDelete passwords for devices you no longer use, in the password list
Use a quality channel for bulkFor mass sends, don't send directly from the enterprise mailbox — use the quality channel

TopicLinkDescription
Enterprise Mailbox Overview200-qiyeyouxiang-enterprise-mailboxQuick reference for 7 major enterprise mailboxes
263 Enterprise Mail202-263-qiyeyouxiang-263-business-mailAnother Chinese enterprise mailbox setup
Email Account Setupemail-accountBinding flow + error code troubleshooting
Check New Emailscheck-new-emailsTurn on sync after binding
Bulk Sendingemail-mass-sendingUse a quality channel for mass sends

Setup trouble?

Scroll to the bottom of this page and scan the support WeChat QR code (in the footer) for 1-on-1 help — real-time during business hours, replied first thing the next morning otherwise.


About AliCloud Enterprise Mail​

What is AliCloud Enterprise Mail?​

AliCloud Enterprise Mail is AliCloud's self-developed enterprise email service — stable, secure, professional. After binding DingTalk with the mailbox account, employees can send/receive email through DingTalk chat-style, with calendar sync across devices.

It has two common editions:

EditionDescription
Standard Enterprise MailPaid by the company, uses own domain, qiye.aliyun.com
Foreign Trade MailBundled by Alibaba.com International as a member benefit, mail.alibaba.com

Is Foreign Trade Mail worth using?​

Worth using for foreign trade teams. Foreign Trade Mail is purpose-built by Alibaba for International sellers:

  • Integrated with the Alibaba.com International account ecosystem
  • Free for International members — low cost
  • Uses own domain — looks professional to overseas clients

→ If your team is already on Alibaba.com International, Foreign Trade Mail is the natural choice.

AliCloud Client Security Password Mechanism​

AliCloud Enterprise Mail uses the Client Security Password to isolate third-party clients from the main account:

DimensionLogin passwordClient Security Password
PurposeLog in to AliCloud web mailboxFor third-party clients (Laifaxin, etc.)
GenerationSet at registrationGenerated under "Account & Security" in the web UI, requires phone verification
Management—List-based management, can delete individual entries
Leak riskMain account compromisedOnly that device affected, delete to invalidate

→ Setting up Laifaxin requires the Client Security Password, not the login password.

AliCloud Enterprise Mail Setup Summary​

  1. Admin: Console → enable "Allow Third-Party Clients" + "IMAP/SMTP Service"
  2. User: Web UI "Account & Security" → enable "Third-Party Client Security Password" → generate (phone verification)
  3. Add note, copy password
  4. Bind in Laifaxin: Email + Client Security Password + server parameters for the matching edition

Permalink: https://laifa.xin/youxiang/203-aliyun-qiyeyouxiang-alibaba-cloud-enterprise-mailbox