Continuous monitoring

Outlook Personal Integration

Monitor your own Outlook.com, Hotmail, or Live mailbox with one Microsoft sign-in. Nothing to install: every new message in your inbox is analyzed for phishing within seconds and reported to your Monitoring Hub.

Recommended for personal accounts and personal licenses only

This integration connects one consumer mailbox that you personally own, on your personal Blue Lantern account with a single-seat license. It is not intended for organizational licenses: a company mailbox should be covered by the Microsoft 365 Org Integration, which monitors every mailbox in the tenant with admin-managed consent, seating, and posture checks. Organization accounts cannot add a personal mailbox.

Your inbox, read-only

You grant Blue Lantern read-only mail access. We never send, move, or delete anything, and only the inbox is watched: mail Microsoft has already filed to Junk is never sent to us.

Real-time analysis

Microsoft notifies us as new mail lands; each message runs through the Email Threat Analyzer and appears in the Monitoring Hub with a verdict. Alert rules deliver anything malicious to you immediately.

Your seat, your mailbox

Monitoring is covered by your Seat License; the connected mailbox occupies your seat. One mailbox per account, and reconnecting replaces it rather than adding another.

How setup works

About a minute, entirely in the browser. No app registration, no admin console, no keys to paste.

  1. 1

    Have a Seat License on your personal account

    Personal mailbox monitoring is a seat feature. If you are on the Free Tier, add a single seat from your Account page first.

  2. 2

    Click Connect with Microsoft

    From the button above, or from Account → Integrations → Add Integration → Outlook.com / Hotmail. We create a single-use consent link and send you to Microsoft.

  3. 3

    Sign in and approve read-only mail access

    Sign in with the personal Microsoft account whose mailbox you want monitored and accept the single permission requested: Mail.Read. The link is valid for ten minutes; if it expires, start again.

  4. 4

    You are returned to Blue Lantern, connected

    The integration shows as connected on the Integrations page and monitoring starts with the next message that arrives. Mail already in your inbox is not scanned retroactively.

If it says Reconnect needed

Microsoft periodically invalidates app access: a password change, a security checkup, six months of inactivity, or removing the app yourself. Monitoring pauses and the integration shows Reconnect needed. Click Reconnect on the Integrations page and sign in again; nothing else needs redoing.

Removing it

Remove on the Integrations page stops inbox notifications, deletes our copy of your Microsoft sign-in token, and erases the mailbox record. Microsoft does not let apps revoke their own grant, so also remove Blue Lantern at account.live.com/consent.

What you are granting, and what we keep

  • Read-only, inbox-only access to one mailbox

    The only permission requested is read access to mail. Automatic quarantine is not part of this integration; if it is offered later it will be a separate consent you can decline.

  • Your sign-in token

    The refresh token Microsoft issues is stored in AWS Secrets Manager (never our database), used only to read your inbox, and permanently deleted the moment you remove the integration or your account.

  • What we retain

    Message payloads are analyzed and deleted within 24 hours and analysis reports within 90 days. Verdicts and minimal metadata remain so your Monitoring Hub history and alerts keep working.

Full reference: Outlook Personal Mailbox docs