One inbox, a whole team of logins: the "+" trick for Maropost Identity.

You have got thirty staff. Most of them are casuals.

They rotate through the POS, and Identity now wants each of them logging in as their own person.

You do not want thirty casuals using their personal Gmail to get into your store.

You also do not have thirty spare mailboxes sitting around.

Here is the fix. It costs nothing and it takes about five minutes.

The trick

Almost every modern mail provider (Gmail, Google Workspace, Outlook, Fastmail) supports something called plus addressing.

Anything you put after a + in your address is kept as part of the address, but ignored when the mail is delivered.

So if your email is justin@yotabyte.io, every one of these lands in that same inbox:

  • justin+jane@yotabyte.io
  • justin+john@yotabyte.io
  • justin+barry@yotabyte.io

To you, that is one inbox.

To Maropost, those are three different people.

Why this works with Identity, not against it

The new Identity system wants a unique email per user. Fair enough. That is how it keeps a clean record of who did what on the till.

Plus addressing gives it exactly what it asks for: a genuinely unique address for every staff member. Nothing is shared, nothing is faked, every login is its own distinct account.

The only change is that you, the owner, still receive every verification code and every password reset in the one place.

Jane keeps her own Maropost identity. You keep your one inbox.

Setting it up

1. Pick a naming pattern. you+firstname is the obvious one. you+pos1, you+pos2 works just as well if you would rather not use names.

2. In Maropost, create each staff user with their plus address.

3. When Identity sends a verification or reset to you+jane@..., it arrives in your inbox. Read the code out, forward it, or click the link yourself.

That is the whole thing.

Two honest caveats

Plus addressing is standard, but not completely universal. If your mail sits on an older or unusual host, send a quick test to you+test@yourdomain first and confirm it arrives before you set up the team.

And every one of these accounts funnels through you. That is the point, but it does make you the single contact for resets. For a small crew with a lot of casuals, that is a feature. For a bigger team where staff need to sort their own logins, real individual mailboxes may be worth paying for.

Used in the right spot, the "+" turns thirty staff, thirty mailboxes into thirty staff, one inbox, without bending a single rule the new system actually cares about.

Quick questions

Is this a security hole? Am I tricking the system?

No. You are not bypassing anything. Identity asks for a unique, real email per user and that is exactly what each plus address is. The mail genuinely belongs to you and genuinely arrives at your server. You are using your own domain the way it was designed to be used.

What happens when a casual leaves?

Same as any other account. Deactivate their Maropost user. Because the address was only ever an alias of yours, there is no separate mailbox to close down and no personal account of theirs left holding access to your store.

Justin Lillico

Solo Maropost specialist for Australian Maropost merchants. Ex-Maropost (2021). Helping merchants get more from their store since then. Based in Australia.