Thunderbird Community Forum

Hello.

I just installed thunderbird for the first time and i really liked it but there is a problem some of my emails particularly from from Fiverr don't show Fiverr logo at the top within the email maybe that logo has linked wrapped in it on which i can click and it take me directly to my fiverr profile. These are official emails from fiverr. What i have tried: I tried every possible solution that i can get on internet. Show Remote content turning on and off, Turing Simplified view on and off. Turning of the Proxy from auto detect and Turning the DNS off. Fiddling around view settings. Changing settings in Configuration like mailnews.message_display.disable_remote_image, browser.opaqueResponseBlocking.javascriptValidator, browser.opaqueResponseBlocking, etc. But it didn't load the logo image and keep showing broken image place holder. This is also the case with my bank mail, my bank email sometime have an image with warning about OTPs not just text it also don't load. I also tried disabling the spam protection and i only use minimize to tray extension which i disabled to check if image loads or not ans tried to run it in Troubleshoot mode but no luck. I will really appreciate If anyone could help me and fixed the issue . :)

Thanks.

Hi, somehow thunderbird forced me to use OAuth for caldav and carddav. (v140 on linux) Unless I've probably missed something this approach doesn't seem to have considered that people might use more than one device. In the past I had an application password per device with my mail provider. That password covered imap, smtp, caldav and carddav. The application password I could set with a specific name at my mail provider. If the device was lost, compromised or whatever I just deleted that one application password at my mail provider, problem solved.

Now a regular thunderbird setup has the application password for mail and 2 OAuth records per device under "Connected Apps" at my mail provider. But it is not possible to see anymore to which device the OAuth record belong, as there is nothing device specific coming along with these OAuth records, just an IP.

With that perspective OAuth weakened my security options, as I can only guess which OAuth record I have to delete in an emergency case. Did anyone who implemented that with Thunderbird considered that people may have more than 1 device? Maybe even more than 5 devices?

That OAuth approach looks unmanagable to me. Is there a way to switch OAuth off in thunderbird, until it becomes more useable in >1 device setups?

Cheers Tjareson

Hi, I just noticed that my computer has been infected by a trojan called "HEUR:Trojan.VBS.SAgent.gen", and I can't remove it via Kapersky...The trojan is found in the inbox file in Thunderbird. So it's not a file that I can remove (it's all code). Kapersky stated that these two files are the source of the Trojan (they are not found as an e-mail attachment in my inbox, it's all code in the inbox file in Thunderbird):

P000009384:Emirates_Marble-pdf.gz and P000009384:Emirates_Marble-pdf.vbs

So I'm simply wondering how I should go about to remove this trojan from my computer?

Source: https://threats.kaspersky.com/en/threat/HEUR:Trojan.VBS.SAgent.gen/

I've just received an email from breach-alerts@mozilla.com stating: You’ve been in a new data breach. Breach source: CarGurus. Yet there's no record of CarGurus in the Mozilla Monitor database. Is this an erroneous message? Or have I missed something obvious? Thanks

Even though I have created a main password I find that I suddenly I can open the application and view accounts and even security info, without putting it in anyway.

Dear all,

I would like to use Thunderbird on a shared computer at my universitys lab space (it is mainly my PC but other people have access and use it sometimes). However, as we are requested to keep mails confidential I thought it would be as easy as just setting a primary password and thunderbird would not start if that password is not set. However, that proofed to be a wrong assumption. Instead if I just cancel the dialog it will open and still display all the locally stored mails.

We are using IMAP server and I already set up that the mails are not stored locally. Still, some mails that I have used recently are visible. I am aware that there would anyway be the local copy in the profile folder but I guess none of the people sharing that computer would take the efford to check that, so I would be fine if I could simply prevent thunderbird from starting without the primary password.

Is there any option for that or any extention that would do so?

Thank you in advance! Juergen

It recently came to my attention that Gmail is using my (and others) emails to train their AI to provide "overviews" for email threads. I didn't find that in any of the recent Agreement changes so feel safe is stating Alphabet/Google never obtained my permission for this training. I'm not a fan of the far-flung use of AI and the mounting examples of how horrendously Google AI performs hasn't done anything to relieve my concerns.

I began a search for a better, reliable email client and there is a depressing shortage of them that fulfill the average email users' needs. Thunderbird looks pretty good but reading through the Help section, Community Forum questions and just general articles hasn't clarified a couple of questions I have.

1. Is Thunderbird a comprehensive email client, independent of other clients, or does it provide service by partnering with another client?

2. Does Thunderbird utilize AI for any purpose that requires the "review" and storage of individual users' emails?

Many thanks, MarilynB

2019 MacBook Pro

For about the past 10 days or so Tbird has been presenting me with a request for my user name and password for, i am assuming, inclusion as an added account. They want

The problem is that in have no idea who caldav is or where they got my link to Tbird. My concern is that this may well be malicious. They want me to authenticate with username and password. What user name and what password?

Does anyone in the forum know what this is all about and how i can get them permanently excluded? With all the fake / criminal challenges on the net these days, i am very nervous (77 years old).

Any help would be really appreciated. Thank you

Assuming that I don´t want any Google server to track me what could I click in the attached? It's a nice feature but as it is not clear what the last three options do a bit of a guess.

Today is 01.16.2026 Hi Volunteers, thank you for the service you are providing Thunderbird users.

I didn't see a topic called Security, so I chose Settings.

For Thunderbird version 146, what specific version of LDAP is being used?

Regarding which LDAP version is the most up to date, I found this: https://pkg.go.dev/github.com/go-ldap/ldap/v3@v3.4.12

My concern is about LDAP's security. I believe it is reasonable to think that the latest available version of LDAP would have the latest and most up to date security patches applied.

I would like to feel secure knowing I have the protection of the newest version of LDAP which affords the best security protection available for Thunderbird laptop version 146.

However I have been unsuccessful in determining if Thunderbird 146 is using this LDAP latest version. Could you help me learn if Thunderbird 146 is utilizing the latest version of LDAP that is available? Thanks in advance.

Yes I know I am a bit verbose.

I am using Thunderbird with both Microsoft and Gmail accounts. My question is... is Microsoft able to see that i am using a Gmail account, and/or the account name/adress, and vise versa?

I have & use the T-Bird app on my desktop pc. I have it set up with a password for access when I click on the system tray icon to launch the program. It then asks me for my password, all good, yes, just as needed for security. But, as with other apps, I would like a second layer of security such as 2FA. I have an authenticator app on mobile phone for this additional layer of security for all my other apps, works great. I can't find this second layer of security on the T-Bird app, is it available, if so, where is it? Thank you.

Hello, I have the following problem: Bitdefender keeps sending me notifications about Thunderbird emails. I have already contacted their support team and they advised me to tell you that Bitdefender correctly detects and removes infected attachments in the temporary folder; However, some emails do not seem to be deleted or synchronized correctly with Gmail, causing repeated notifications. Can you please help me?

I have a problem with thunderbird. I can't fetch the certificate in my account settings, it seems it's not security approved. Normally when I type "fetch certificate" a window pops up asking me to confirm a security exception, but this function no longer works on thunderbird. Is there another way I can confirm the security exception?

Payment declined for Thunderbird: Free Your Inbox subscription

Google Play Your subscription will be cancelled UPDATE PAYMENT Hi k,

Your payment from Visa-xxxx was declined.

If you don't update your payment method, you'll lose all of the benefits provided by Valued Monthly Contribution (Thunderbird: Free Your Inbox). These benefits include the following:

   A monthly, voluntary contribution
   Enable us to build new features
   Help us take meaningful steps forward
   Contributions are not tax-deductible

To keep these benefits, you'll need to keep your subscription active. Update your payment method or use a different one.

SUMMARY Amount Due $10.73 Fix by Dec 26, 2025 UPDATE PAYMENT

Learn more

Thanks, The Google Play team See your Google Play Order History. View the Google Play Refund Policy and the Terms of Service.

Google LLC, 1600 Amphitheatre Pkwy, Mountain View, CA, 94043, United States