Tencent Enterprise Mail · Complete Setup Guide
Tencent Enterprise Mail (exmail.qq.com) is an enterprise email service integrated into the WeCom (WeChat Work) ecosystem. It has the longest setup chain among the 7 major enterprise mailboxes, requiring two roles working together:
| Who | What | Required |
|---|---|---|
| Admin | Enable "IMAP/SMTP Service Scope" in the WeCom console and add you | Yes |
| You (user) | Toggle 2 switches (IMAP/SMTP Service + Secure Login) → generate Client-Specific Password | Yes |
→ When binding, fill the password field with the Client-Specific Password (not your Tencent Enterprise Mail login password).
Tencent Enterprise Mail has the longest setup chain — admin 1 step + user 3 steps, all 4 are mandatory:
- Admin: Console → enable "IMAP/SMTP Service Scope"
- User switch 1: Send/Receive Settings → enable IMAP/SMTP Service
- User switch 2: Mailbox Binding → enable Secure Login
- User: Generate Client-Specific Password
Tip: any missed step results in login failure. If you are the admin yourself, perform all 4 steps.
1. Server Parameters
Tencent Enterprise Mail provides 2 server sets:
| Protocol | Use | Recommended | Backup (Overseas Node) | SSL Port |
|---|---|---|---|---|
| IMAP | Receive | imap.exmail.qq.com | hwimap.exmail.qq.com | 993 |
| SMTP | Send | smtp.exmail.qq.com | hwsmtp.exmail.qq.com | 465 |
Encryption: SSL / TLS
Use the recommended servers by default. If they're unstable or binding fails, switch to the hw-prefixed backup (overseas) nodes.
2. Admin: Enable Client Access Permission (Role 1)
If you're not the admin, send this article link to your company's mailbox admin.
Steps:
- The admin scans the QR code with WeCom to log in to the WeCom Admin Console
- Go to Collaboration → Security Management → Client Access Restriction
- Click Modify Exchange/IMAP/SMTP Service Scope
- Check the members to authorize → click OK
When selecting members, the admin must include the account you'll set up in Laifaxin in the allowed scope — without it, no amount of user-side action will connect.
3. User: Toggle 2 Switches + Generate Specific Password (Role 2)
After the admin authorizes, the user logs in to the web mailbox (recommended: scan with WeCom at exmail.qq.com/login).
3.1 Switch 1 · Enable IMAP/SMTP Service
Go to Settings → Send/Receive Settings → check Enable IMAP/SMTP Service → save:
3.2 Switch 2 · Enable Secure Login
Go to Settings → Mailbox Binding → click Enable Secure Login:
In the popup, click Confirm to enable:
You'll see the success prompt:
3.3 Generate the Client-Specific Password
In the Client-Specific Password area, click Generate New Password:
Enter an identifier name for the password (we suggest Laifaxin) → copy the generated 16-digit specific password immediately → click OK to save:
4. Bind in Laifaxin
Go to Laifaxin email account and add the Tencent enterprise mailbox:
| Field | What to enter |
|---|---|
| Email address | Full enterprise email, e.g. yourname@yourcompany.com |
| Password | Paste the 16-digit Client-Specific Password (NOT the login password!) |
| IMAP server | imap.exmail.qq.com · Port 993 · SSL (switch to backup hwimap.exmail.qq.com if unreachable) |
| SMTP server | smtp.exmail.qq.com · Port 465 · SSL (switch to backup hwsmtp.exmail.qq.com if unreachable) |
Once verified, the mailbox status shows Normal — binding successful:
After binding, turn on mail sync + notifications (see Check New Emails).
Pitfall Summary
| Pitfall | Consequence | How to avoid |
|---|---|---|
| Admin didn't add you to the allowed scope | No user-side action will connect | Admin must include your account when selecting members |
| Only enabled IMAP/SMTP Service, not Secure Login | Can't generate the specific password | User must enable both switches |
| Binding with the Tencent Enterprise Mail login password | Authentication failed | Must use the Client-Specific Password, not the login password |
| Closed popup without copying the specific password | Password lost | Go to "Mailbox Binding", delete the old one, regenerate |
| Port set to 25 / 143 | No encryption / blocked | Use SSL: IMAP 993 / SMTP 465 |
| Using enterprise mailbox for bulk sending | Company domain goes to spam, hurts the whole org | Use a quality channel for bulk; reserve the enterprise mailbox for 1-on-1 |
FAQ
Q1 · Why use a Client-Specific Password instead of the mailbox password?
This is a security enhancement: it protects the main account password from leakage. With dedicated specific passwords for each client, you can revoke a specific app's authorization individually without affecting overall account security.
Q2 · So many steps — when login fails, which step do I check first?
Tencent Enterprise Mail has the longest setup chain. When login fails, check these 4 steps in order:
| Check | Who | Where |
|---|---|---|
| 1. IMAP/SMTP Service Scope | Admin | WeCom console — confirm your account is in the allowed scope |
| 2. Enable IMAP/SMTP Service | User | Settings → Send/Receive Settings |
| 3. Enable Secure Login | User | Settings → Mailbox Binding |
| 4. Using specific password | User | The password in the binding field is the specific password, not the login password |
→ Admin who enabled their own permission but still fails — usually missed user-side switches 2 and 3.
Q3 · How to choose between Recommended and Backup (Overseas) servers?
| Server | Address | When to use |
|---|---|---|
| Recommended | imap.exmail.qq.com / smtp.exmail.qq.com | Default |
| Backup (Overseas Node) | hwimap.exmail.qq.com / hwsmtp.exmail.qq.com | When recommended is unreachable or unstable |
Q4 · Do I have to log in via WeCom QR code?
Strongly recommended. Tencent Enterprise Mail is deeply integrated with WeCom — whether the admin entering the console or the user logging in to the web mailbox, scanning the WeCom QR code is the smoothest and least error-prone method.
Q5 · Is Tencent Enterprise Mail suitable for foreign trade? How many emails per day?
Decent among Chinese enterprise mailboxes. Good for domestic office + WeCom ecosystem; overseas delivery rate doesn't match Google Workspace.
Warm-up strategy (don't run outreach at the cap):
| Stage | Daily send | Notes |
|---|---|---|
| Week 1 (newly bound) | Start at 50 | 5–10 min interval |
| Weeks 2–4 | 100–200 | Watch bounce rate (keep ≤ 3%) |
| Stable phase | Up to 300 | Bulk sends via quality channel |
Learning Suggestions
| Stage | Suggestion |
|---|---|
| Admin authorizes first | WeCom console → enable IMAP/SMTP Service Scope, confirm your account is included |
| User toggles 2 switches | Send/Receive Settings → enable IMAP/SMTP Service + Mailbox Binding → enable Secure Login |
| Generate the specific password | Generate in the "Client-Specific Password" area → name → copy → OK |
| Log in via WeCom QR | Smoothest way to enter console / web mailbox |
| Least privilege | Admin only grants third-party client access to members who truly need it |
| Use a quality channel for bulk | For mass sends, don't send directly from the enterprise mailbox — use the quality channel |
Related Features
| Topic | Link | Description |
|---|---|---|
| Enterprise Mailbox Overview | 200-qiyeyouxiang-enterprise-mailbox | Quick reference for 7 major enterprise mailboxes |
| NetEase Enterprise Mail | 204-wangyi-qiyeyouxiang-netease-enterprise-mailbox | Another Chinese enterprise mailbox setup |
| Email Account Setup | email-account | Binding flow + error code troubleshooting |
| Check New Emails | check-new-emails | Turn on sync after binding |
| Bulk Sending | email-mass-sending | Use a quality channel for mass sends |
Scroll to the bottom of this page and scan the support WeChat QR code (in the footer) for 1-on-1 help — real-time during business hours, replied first thing the next morning otherwise.
About Tencent Enterprise Mail
What is Tencent Enterprise Mail?
Tencent Enterprise Mail is Tencent's enterprise email service, deeply integrated into the WeCom (WeChat Work) ecosystem. Companies register with their own domain, and the admin centrally manages member accounts in the WeCom console. Website: exmail.qq.com
Highlights:
| Highlight | Description |
|---|---|
| WeCom ecosystem | Integrated with WeCom — scan to log in, send/receive mail |
| 2 server sets | Recommended + Backup (overseas node), switch sets if one fails |
| Multi-layer security switches | Admin service scope + user IMAP/SMTP Service + Secure Login — three layers |
| Client-Specific Password | Third-party clients use a dedicated specific password, not exposing the main password |
Is Tencent Enterprise Mail suitable for foreign trade?
Suitable for teams that are mainly domestic-office with secondary foreign trade:
- Good WeCom ecosystem experience, smooth domestic office collaboration
- Overseas delivery rate doesn't match Google Workspace — for Europe/US focus, prioritize an overseas enterprise mailbox
Foreign trade selection guidance:
- Europe/US focus → prefer Google Workspace
- Domestic office + using WeCom → Tencent Enterprise Mail is the natural fit
Tencent Enterprise Mail Setup Summary
Tencent Enterprise Mail's setup chain is the longest of the 7 major enterprise mailboxes; remember these 4 steps:
- Admin: WeCom console → Client Access Restriction → enable IMAP/SMTP Service Scope (include yourself)
- User: Settings → Send/Receive Settings → enable IMAP/SMTP Service
- User: Settings → Mailbox Binding → enable Secure Login
- User: Generate the Client-Specific Password → bind in Laifaxin
→ All 4 are mandatory; troubleshoot login failures in this order.
Permalink: https://laifa.xin/youxiang/205-tengxun-qiyeyouxiang-tencent-enterprise-mailbox