Stedra
Sign inCheck my business
BlogHOW-TO6 min read

How to set up shared mailboxes for your critical accounts (domains@, billing@, socials@)

Steps verified against the official documentation below · last checked 2026-07-18

Half the disasters on this blog share one root cause: a business-critical account registered to one person's inbox. The renewal notice, the password reset, the security alert — all flowing to a mailbox that leaves when they do.

The fix costs nothing and takes an hour: a small set of shared mailboxes that the business owns and at least two people read, with your critical accounts re-registered onto them. Here's the exact setup in Google Workspace and Microsoft 365.

Create these five addresses

  • admin@ or it@ — tenant admin accounts, cloud consoles, DNS and hosting.
  • domains@ — registrar accounts and everything domain-adjacent. Deserves its own box: its mail is rare but never ignorable.
  • billing@ — payment platforms, subscriptions, invoices, card-expiry warnings.
  • socials@ — the Meta portfolio, LinkedIn, TikTok; the recovery address for every social login.
  • legal@ (optional) — compliance notices, trademark and registrar disputes, insurance.
Five is a guideline, not a rule — a three-person business might collapse these into admin@ and billing@. The principle is what matters: critical accounts register to addresses the business owns and multiple people read.

Google Workspace: groups as shared inboxes

  1. 1
    Admin console → Directory → Groups → Create group
    Name it (e.g. domains@yourbusiness.com). Groups don't consume a paid licence.
  2. 2
    Enable Collaborative Inbox features
    In the group's settings, turn on the Collaborative Inbox features so members can see and manage conversations.
  3. 3
    Add at least two members
    The owner plus one other current employee, minimum. Set posting permissions so external senders can reach it — registrars and platforms must be able to email it.
  4. 4
    Test from outside
    Send a mail from a personal address and confirm both members see it. An unmonitored shared mailbox is worse than none — it feels safe.

Microsoft 365: shared mailboxes

  1. 1
    Admin center → Teams & groups → Shared mailboxes
    Select 'Add a shared mailbox' and name it. Basic shared mailboxes don't require their own licence.
  2. 2
    Add members
    Under next steps, add the two-plus people who should see the mail; it appears alongside their own mailbox in Outlook.
  3. 3
    Don't enable sign-in on the mailbox account
    Members access it through their own accounts — the shared mailbox itself shouldn't become another password to leak.
  4. 4
    Test from outside
    Same rule as Workspace: verify external delivery and visibility before trusting it.

The migration pass: re-point your accounts

  1. 1
    Registrar and DNS first
    Change the account email and registrant contact to domains@ — renewal and transfer notices are the highest-stakes mail you receive.
  2. 2
    Payments and money
    Stripe/PayPal account emails and billing contacts → billing@.
  3. 3
    Social recovery addresses
    Linked/recovery email on each platform → socials@ (keep 2FA on devices that stay with the business).
  4. 4
    Everything else as you touch it
    Don't boil the ocean in one sitting — re-point each remaining account the next time you log in, and record the new owner column in your register.
Google Workspace — Make a group a Collaborative InboxMicrosoft Learn — Create a shared mailbox
This is one asset. How many others does your business not control?

The free scan maps your domain, email, cloud, social and tools from public records — and shows what you'd lose access to tomorrow. No login, nothing to install.

Check my business
How to build a digital asset register (in one afternoon)
7 min read
Your web agency owns your domain. Here's how to get it back.
7 min read