Inbox
Security mail for the addresses on your accounts, in a two-pane client. Verification codes sit above the body on purpose.
Two-pane client
Inbox is mail for the security addresses on your accounts. The left rail is the address list (unread, total, last message). The middle is the message list. The right is the reader. Unread counts survive a reload — they are a server watermark, not a socket guess.
Encoded subjects (=?utf-8?B?…?=) decode. Copy and unsubscribe sit on each address; on a phone they stay visible at rest so you are not hunting for a hover.
Domains
You can subscribe to addresses on the global domains everyone may use, and you can add your own domain. Own-domain setup is DNS / forwarding at your registrar (Cloudflare is the usual path). A new global domain is never silently used as the address the secure flow writes onto a Microsoft account — that switch is separate and defaults off.
Verification codes
When a message looks like a Microsoft / Xbox / Mojang code, the reader promotes it above the body. The extractor wants a nearby word such as code, OTP, or verification — a year, a port, or an order id is not offered as a code. That is the point of this inbox.