One address for the association, one password for everyone
The setup is almost always the same. A forty-unit condo association decides to self-manage instead of paying a management company. The newly elected treasurer creates a dedicated address, often a Gmail account like oakridgehoa@gmail.com, sometimes a plain mailbox that came with the community’s website hosting. The password goes into a spreadsheet, or a text message, and every board member checks the mailbox from their own phone, in the evening, between work and dinner.
It works for a few months. Then the familiar problems arrive. Google locks the account because it sees logins from five devices in three cities. Nobody knows whether anyone answered the roofing contractor. And after the annual meeting, when a board member steps down, the password they still know becomes a question nobody wants to raise.
This is not a niche situation. The Foundation for Community Association Research estimates there are about 373,000 community associations in the United States, home to 78.1 million residents. Its statistical review puts self-managed associations at 30 to 40 percent of the total: associations that may hire help for a specific project but have no professional manager or management company. That is a very large population of volunteer boards running their own mailbox with whatever tools they happen to have.
What actually flows through a board mailbox
Over a year, the shared address of a self-managed association receives most of what makes the community run:
- dues and assessment questions, payment arrangements, and the delicate threads with owners who are behind;
- vendor bids and project follow-up: landscaping, roofing, snow removal, the elevator contract;
- insurance claims and adjuster correspondence, often stretching across months;
- architectural review requests, and the approvals owners will point to years later;
- meeting notices and minutes, plus the questions and objections that follow them;
- requests from title and escrow companies during unit sales, usually with a deadline attached;
- everyday owner messages: a leak, a noise complaint, a broken gate code.
Two things make this flow different from an ordinary contact inbox. First, the threads are long. A water damage claim can produce thirty messages over eight months, between the upstairs owner, the insurer, the plumber, and the adjuster. Whoever picks up the file midway needs the full history, not a verbal summary in the parking lot.
Second, part of the content is confidential. An owner’s delinquency status and the details of a violation notice are not the other neighbors’ business. They also should not end up in a board member’s personal mailbox, where they will quietly remain after that member moves away.
A side question boards often ask at this point: should the address be a free Gmail account or a mailbox on the association’s own domain? A domain address like board@oakridgehoa.org looks more official and survives a change of email provider. But the honest answer is that ownership matters more than the domain. A Gmail account whose recovery options belong to the association, with credentials documented in the minutes, is safer than a domain mailbox registered under a former director’s personal hosting account. Whatever you choose, decide who owns the account, the recovery email, and the phone number on file, and record it somewhere the next board will find.
Boards turn over, the mailbox stays
Board composition is not stable, and it is not supposed to be. Directors are elected at the annual meeting, terms end, volunteers burn out, owners sell and move. A board that looks settled in March can have two new faces by October.
Every turnover asks the mailbox two questions. Who loses access, and how? Who gains it, and with how much history? With a shared password, both answers are bad. The departing member knows the password until someone changes it, and changing it means redistributing the new one to everyone, usually by text. The arriving member gets instant, total access to years of correspondence, with no idea what has been handled and what is still waiting for an answer.
There is a worse case, and it is common: the mailbox effectively belongs to one person. The Gmail account was created by a former treasurer, with their cell number as the recovery option. They sell their unit and move out of state. The address that every vendor, insurer, and title company has on file becomes unreachable, and the association starts rebuilding its records from nothing.
Why the shared password always breaks
Password sharing fails in three ways, and each one arrives sooner or later.
The first is technical. Gmail and Outlook treat simultaneous logins from different devices and locations as a sign of account theft, and both providers document it: Google blocks sign-in attempts “from a different location or device than normal”, and Microsoft blocks the sign-in and asks for a security code before it unlocks the account. That code usually goes to the recovery phone or email on file, which in practice means whoever created the account. If that person is unreachable, the association has no mailbox until they are. We walk through this mechanism in how to share a mailbox without sharing the password.
The second is accountability. When everyone acts under the same identity, nobody knows who did what. Someone told the roofer to go ahead, but who, and in which message? An email from the escrow company was archived without a reply, but by whom? For an association, this is not a cosmetic problem. Board decisions are supposed to leave a trail, and a mailbox where five people write as one person erases it.
The third is coordination. The read status of a message is shared: when one director opens an email on the bus, it shows as read for everyone else, who conclude it is being handled. That is exactly how a title company’s request sits for ten days while three people saw it arrive.
The records outlive every board
It is tempting to treat the email archive as a nice-to-have. For an association, it is closer to infrastructure. The architectural approval from 2019 settles a dispute in 2026. The claims correspondence explains why the insurance premium looks the way it does at renewal. The dated payment reminders matter if a delinquency ever reaches a lawyer. And when a unit sells, the buyer’s side asks for documents on a clock.
All of that history belongs to the association, not to whichever volunteer happens to hold the password. A board that keeps its correspondence in one shared, transferable archive can hand a complete file to its successors. A board that runs on forwarded copies in personal mailboxes cannot, because half of the record left with the people who wrote it.
There is also a transparency angle. Owners ask for records: the bid that justified a special assessment, the insurer’s position on a claim, the approval an earlier board gave for a deck. Governing documents generally promise owners some access to association records, and a board that can search one shared archive answers those requests in minutes. A board that has to canvass former members’ personal mailboxes answers late, incompletely, or not at all, and every incomplete answer feeds the suspicion that makes volunteer board service miserable.
This is the real standard to hold your mailbox to: could a brand-new board, elected next month, pick up every open file without calling the old one?
Three operating rules, before any tool
Whatever software you use, a mailbox run by several volunteers needs three rules. They cost nothing and solve half the problem on their own.
One front door. Everything association-related goes through the shared address. If an owner writes to a board member’s personal email, the reply comes from the shared address, or the message gets forwarded there before anyone acts on it. The opposite habit, forwarding messages from the shared box to personal mailboxes “so people actually see them”, destroys the archive: the reply goes out from a personal account and exists nowhere else.
One owner per topic. The roof project is Dana’s. The unit 3B claim is Miguel’s. The rule applies message by message too: every incoming email has one named owner, even when the answer gets discussed by the whole board. Without this, everyone assumes someone else is on it, and the most important message is the one that waits.
A done state that tells the truth. An association mailbox accumulates dozens of parallel open threads. You need to see at a glance what is finished and what still needs action, and to note context as you go: “bid approved at the March meeting, waiting on the invoice”, “insurer nudged on the 3rd, follow up in two weeks”. If that context lives in one person’s head or in a group text, it evaporates at the next election.
A twenty-minute weekly review
Rules decay without a rhythm. The boards that keep their mailbox healthy do one short review a week, often just before the regular board call. One person opens the shared address and walks the open threads out loud: what came in, who owns it, what has been waiting more than a week. Anything without an owner gets one on the spot. Anything finished gets marked done.
Twenty minutes is usually enough, because the point is not to answer messages during the review. The point is to make sure nothing is ownerless and nothing is silently stuck. The review also spreads knowledge: the whole board hears that the elevator bid arrived and that the adjuster went quiet, so no single volunteer becomes the only person who knows the state of the association’s files. When that person is the one who leaves after the next election, this difference is what saves you.
Keep the address, drop the shared password
You can enforce those rules through discipline in any mailbox. A shared inbox tool enforces them by design, and this is exactly the use case Trupeo was built for.
The principle: the association keeps its existing address. Trupeo connects to the current mailbox, whether that is Gmail, Outlook, Microsoft 365, or any plain IMAP mailbox. The IMAP point matters more here than almost anywhere else, because many association addresses are ordinary IMAP boxes that came with the community’s website hosting or a local internet provider. They connect like any other mailbox, with no migration and no change of address.
Each board member then signs in with their own login. The mailbox password is never shared again. When someone leaves the board after the annual meeting, you revoke their access in one click; the address, the history, and every open file stay where they are. When someone joins, they get their own access and inherit everything: the 2024 claim, the three roofing bids, the last payment reminder and its date.
Day to day, every conversation has a visible owner, an open or done status, and internal notes that owners never see: “spoke with the adjuster, report expected end of month”. The question “did anyone answer the title company?” is answered on the conversation itself, not in a group text with eleven participants.
Trupeo charges a flat monthly price, not a price per user, so a five-person board costs the same as a two-person one. What Trupeo does not do is worth stating too: no accounting, no violation tracking module, no owner portal. It is the mail layer, which is the layer most self-managed associations are missing.
Plan the handover before the next annual meeting
The best time to get off the shared password is a quiet month, not the week after the election. Clean up the mailbox, name an owner for every open file, and write down what is pending: open claims, bids waiting on a vote, reminders to follow up. We cover the association-specific steps in handing over the board mailbox, and the general playbook for any volunteer team in handing over a mailbox between volunteers.
A volunteer board changes hands by design: a seat is a term, not a possession. The mailbox should be built the same way. The address and the archive belong to the association. The access follows the terms.
Sources:
- Statistical Review: Summary of Key Association Data and Information (Foundation for Community Association Research): an estimated 373,000 community associations in the U.S., home to 78.1 million residents.
- 2020-2021 U.S. National and State Statistical Review (Foundation for Community Association Research): 30 to 40 percent of U.S. community associations are self-managed, using professional help at most for specific projects.
- ‘Suspicious sign in prevented’ email (Google Account Help): Google blocks sign-in attempts on unusual activity, such as a sign-in from a different location or device than normal.
- What happens if there’s an unusual sign-in to your account (Microsoft Support): Microsoft may block a sign-in from a new device or location and unlocks the account after a security code sent to a recovery contact is entered.