Teams are moving off legacy email setups for three reasons — email authentication has become an entry requirement rather than a best practice, per-seat suite pricing has grown hard to justify when most bundled apps go unused, and separate tools for mail, calendar, and meetings create daily friction. NevTan Mail addresses all three: business email on your own domain with guided SPF, DKIM, and DMARC setup, calendar and meetings inside the inbox, and pricing per mailbox per year rather than per seat per month — starting with 10 mailboxes free forever.

This guide covers what actually changed, then gives you a migration plan.

What Changed: Authentication Became Mandatory

The most concrete shift is not about interfaces. It is that the major mailbox providers stopped treating authentication as optional.

Google and Yahoo introduced sender requirements in 2024, with Microsoft following in 2025. Domains sending without proper SPF, DKIM, and DMARC now face filtering or outright rejection. What was a best practice for a decade became the price of admission.

Most organizations have responded incompletely. Valimail's 2026 State of DMARC Report found that 78% of domains now publish a DMARC record, but only 42% have reached actual enforcement — a 36-point gap the report calls the "Enforcement Gap." Enforcement rose only from 35% to 42% across 2025, which suggests a large number of organizations published p=none to satisfy the mandates and stopped there. A p=none policy monitors. It does not protect.

This matters for provider choice because authentication is configured per domain, and how much help you get varies enormously. Platforms with guided setup that generates and verifies each record remove the step where most self-managed setups fail. Our guide to domain authentication and why business emails land in spam covers the records themselves.

What Changed: The Threat Environment

Business email compromise remains among the most financially damaging categories of cybercrime. The FBI's Internet Crime Complaint Center 2025 Annual Report recorded just over $3 billion in BEC losses across roughly 24,700 complaints — second only to investment fraud. The large majority moved by wire or ACH, which is why recovery is so often impossible.

The 2025 report also introduced a dedicated section on AI for the first time, logging more than 22,000 AI-related complaints and close to $893 million in associated losses. This changes what defense looks like. Generated phishing messages are fluent, contextual, and no longer identifiable by the awkward phrasing that older training taught people to watch for.

Two things follow for email infrastructure. First, authentication does more work than it used to, because it is one of the few controls that operates regardless of how convincing a message reads. Second, admin controls matter — the ability to revoke access immediately, separate billing authority from mailbox management, and see who has access to what. Our guide to protecting against business email compromise covers the layered approach.

What Changed: Consolidation Inside the Inbox

Switching between mail, calendar, and scheduling tools carries a real cost in attention, even if the precise number is hard to pin down honestly. Research on interruption and task-switching consistently finds that resuming focused work after a context switch takes substantially longer than the switch itself.

The practical case is simpler than any statistic. When a meeting invitation arrives, you want to check availability, accept, and get a reminder without leaving your inbox. NevTan Mail creates and manages meetings directly from mail, synced with your own Google Calendar, and lets you attach a Zoom, Google Meet, or other video link when scheduling. Tasks and notes sit alongside the inbox, and recipient fields autocomplete from people you have already emailed.

None of this is revolutionary. It is the removal of small daily frictions, which is exactly the kind of improvement that compounds without anyone noticing. See email, calendar, and tasks in one workspace.

What You Need Before Migrating

DNS administrative access. Non-negotiable — you will add TXT records for SPF and DKIM and modify MX records. If an agency manages your DNS, line up a contact in advance. Document your current records before changing anything, so you have a rollback reference.

An audit of current usage. List every active account, its owner, and any aliases or distribution lists depending on it. Flag large mailboxes, which take longer to transfer. Identify shared and functional accounts like info@ that need specific handling. For a 20-person team this takes a couple of hours and prevents the most common failure — discovering a forgotten shared address after cutover.

App passwords at your current provider. NevTan Mail imports mail from Google, Yahoo, or Zoho over IMAP using an app password you generate there. With two-factor authentication enabled, standard credentials will not work.

A timeline and a rollback plan. Pick a low-traffic window. Know exactly how to revert MX records. Communicate dates to your team in advance.

A Five-Step Migration Plan

Step 1: Set up your domain and authentication records. Add your custom domain in NevTan Mail and follow the guided setup for SPF, DKIM, and DMARC, which verifies each record automatically. Publish DMARC at p=none initially — you need to see who sends as your domain before you enforce.

Step 2: Create mailboxes and assign roles. Provision from your audit list. Use Admin and Super Admin roles to control who manages domains and billing. Remember that shared addresses do not all need mailboxes — NevTan Mail includes unlimited aliases and groups, so hello@ routing to one person can be an alias rather than a paid mailbox.

Step 3: Migrate your mail. Connect your old provider over IMAP with the app password. Transfer runs in the background while your team keeps working on the old system. Duration depends on mailbox sizes and how aggressively your old provider rate-limits connections — plan in days, not hours, for a full team. See the Gmail migration walkthrough.

Step 4: Verify, then switch MX records. Spot-check that mail, folders, and calendar data arrived before cutting over. Switch MX only after verification. Propagation typically takes hours but can run to 48.

Step 5: Confirm and keep a safety net. Send test messages in both directions with an external account. Check that SPF and DKIM pass in the headers. Keep the old provider active for at least 30 days — longer than the 7 days often suggested, because the missing-email discovery usually happens weeks later, not days.

Only after you have watched DMARC reports for a couple of weeks should you move the policy to p=quarantine, then p=reject. Our guide to common email migration mistakes covers what goes wrong at each stage.

Five Mistakes That Derail Migrations

1. Skipping the audit. Forgotten shared mailboxes and aliases are the top cause of lost mail after cutover.

2. Switching MX before authentication is in place. If SPF and DKIM are not correct and propagated, your first weeks of mail get filtered — and sender reputation damage takes far longer to repair than it takes to cause.

3. Jumping straight to DMARC enforcement. Without the observation period, you will block your own invoicing tool, CRM, or marketing platform. Publish p=none, read the reports, then tighten.

4. Migrating during peak hours. Choose a weekend or evening window, and stage the team in batches rather than all at once.

5. Decommissioning the old provider too early. It is your rollback path and your archive of last resort. Thirty days minimum.

How Modern Webmail Works

The protocols have not changed. Mail still moves over SMTP and synchronizes over IMAP. What differs is the implementation around them.

Encryption in transit. Connections between your browser and the service are TLS-encrypted, so intermediaries on the network cannot read content in transit. This is separate from encryption at rest and from end-to-end encryption — three distinct things frequently conflated in marketing. Our guide to email encryption for business explains what each layer covers.

Authentication at the receiving end. When your message arrives, the receiving server checks SPF to confirm the sending server was authorized, DKIM to confirm the message was not altered, and DMARC to decide what to do if either fails. This is the layer that determines inbox placement, and it is why guided record setup is more than a convenience feature.

Integrated calendar. Meeting invitations arrive as structured attachments the mail client parses into calendar events. NevTan Mail syncs these with your own Google Calendar, requesting only calendar-events permission, and you can disconnect the Google account at any time from the Calendar screen.

Admin as a control plane. The admin console creates mailboxes, manages aliases and groups, and assigns roles without anyone touching a server. This is what makes offboarding a two-minute task rather than a password handover.

Frequently Asked Questions

How long does migrating a team take?

Plan for several days end to end. Data transfer runs in the background over roughly 24–48 hours for a typical team, DNS propagation can take up to 48 hours, and the MX cutover itself is quick. Add two weeks if you monitor DMARC properly before enforcement, which you should.

Will I lose emails during migration? Not if you sequence it correctly. The transfer copies rather than moves — nothing is deleted from your old provider. Keeping the old account active for 30 days afterwards covers anything missed.

Can I migrate from Gmail without downtime?

Yes. Mail imports over IMAP in the background while your team continues working on the old system. The only transition point is the MX record switch, and mail sent during propagation is queued and retried by sending servers rather than lost.

What are SPF, DKIM, and DMARC?

SPF lists which servers may send for your domain. DKIM adds a cryptographic signature proving a message was not altered. DMARC tells receiving servers what to do when the first two fail, and reports back to you. All three are now effectively required by the major mailbox providers.

Does NevTan Mail support custom domains?

Yes, on every plan including the free tier. Guided setup walks you through the DNS records and verifies each one.

How does the cost compare with bundled suites?

The billing unit differs. Bundled suites charge per user per month; NevTan Mail charges per mailbox per year, from free up to $12 per mailbox for 250 GB. Compare total annual cost at your actual headcount rather than headline rates.

What happens to calendar and contacts?

Calendar and contact data are handled separately from mail and are the most commonly overlooked part of a migration. Verify both during a pilot before migrating the whole team rather than assuming they transferred.

Can I keep my email address after switching?

Yes, provided you own the domain. Your addresses stay the same; only the infrastructure behind them changes. This is the practical argument for being on your own domain in the first place — see business email on your own domain.

What if the migration fails midway?

Revert your MX records to the old provider, which stays active throughout. Because the transfer copies rather than moves, your original mailboxes remain intact.

Conclusion

The case for moving in 2026 is not that legacy email stopped working. It is that the requirements around it changed: authentication became mandatory, threat volume kept climbing, and per-seat pricing became harder to defend for teams using a fraction of what they pay for.

The migration itself is well-understood. Audit, authenticate, transfer, verify, cut over, and keep a safety net. The step that rewards patience is DMARC — resisting enforcement until you know every legitimate sender on your domain.

NevTan Mail is built for teams making exactly this move: business email on your own domain with guided SPF, DKIM, and DMARC setup, calendar and meetings in the inbox, unlimited aliases and groups, role-based admin controls, TLS-encrypted connections, and no ads or data selling on any plan. Ten mailboxes with 5 GB each are free forever, so you can run a real pilot before committing anything.

Get your 10 free mailboxes, read what NevTan Mail includes end to end, or compare directly with Google Workspace, Microsoft 365, Zoho Mail, or Proton Mail.