How to set up shared mailboxes for your critical accounts (domains@, billing@, socials@)
Steps verified against the official documentation below · last checked 2026-07-18
Half the disasters on this blog share one root cause: a business-critical account registered to one person's inbox. The renewal notice, the password reset, the security alert — all flowing to a mailbox that leaves when they do.
The fix costs nothing and takes an hour: a small set of shared mailboxes that the business owns and at least two people read, with your critical accounts re-registered onto them. Here's the exact setup in Google Workspace and Microsoft 365.
Create these five addresses
- admin@ or it@ — tenant admin accounts, cloud consoles, DNS and hosting.
- domains@ — registrar accounts and everything domain-adjacent. Deserves its own box: its mail is rare but never ignorable.
- billing@ — payment platforms, subscriptions, invoices, card-expiry warnings.
- socials@ — the Meta portfolio, LinkedIn, TikTok; the recovery address for every social login.
- legal@ (optional) — compliance notices, trademark and registrar disputes, insurance.
Five is a guideline, not a rule — a three-person business might collapse these into admin@ and billing@. The principle is what matters: critical accounts register to addresses the business owns and multiple people read.
Google Workspace: groups as shared inboxes
- 1Admin console → Directory → Groups → Create groupName it (e.g. domains@yourbusiness.com). Groups don't consume a paid licence.
- 2Enable Collaborative Inbox featuresIn the group's settings, turn on the Collaborative Inbox features so members can see and manage conversations.
- 3Add at least two membersThe owner plus one other current employee, minimum. Set posting permissions so external senders can reach it — registrars and platforms must be able to email it.
- 4Test from outsideSend a mail from a personal address and confirm both members see it. An unmonitored shared mailbox is worse than none — it feels safe.
Microsoft 365: shared mailboxes
- 1Admin center → Teams & groups → Shared mailboxesSelect 'Add a shared mailbox' and name it. Basic shared mailboxes don't require their own licence.
- 2Add membersUnder next steps, add the two-plus people who should see the mail; it appears alongside their own mailbox in Outlook.
- 3Don't enable sign-in on the mailbox accountMembers access it through their own accounts — the shared mailbox itself shouldn't become another password to leak.
- 4Test from outsideSame rule as Workspace: verify external delivery and visibility before trusting it.
The migration pass: re-point your accounts
- 1Registrar and DNS firstChange the account email and registrant contact to domains@ — renewal and transfer notices are the highest-stakes mail you receive.
- 2Payments and moneyStripe/PayPal account emails and billing contacts → billing@.
- 3Social recovery addressesLinked/recovery email on each platform → socials@ (keep 2FA on devices that stay with the business).
- 4Everything else as you touch itDon't boil the ocean in one sitting — re-point each remaining account the next time you log in, and record the new owner column in your register.
SOURCES & OFFICIAL DOCUMENTATION
This is one asset. How many others does your business not control?
The free scan maps your domain, email, cloud, social and tools from public records — and shows what you'd lose access to tomorrow. No login, nothing to install.
Check my businessKEEP READING