How to Delegate Gmail Access to a VA Safely (Without Sharing Your Password)

By Replyf Team · May 23, 2026 · 6 min read

Article Contents

Do not share your password. Google has an official Gmail delegate feature that lets a VA read, send, and reply from your inbox without ever seeing your login details. Here is exactly how to set it up, based on Google's current documentation.

Why You Should Never Share Your Gmail Password

The temptation is understandable. You need to onboard a VA fast, they need access to your inbox, and just sharing the password feels like the quickest way to get started. It is also the riskiest option available.

Sharing the password gives your VA the same level of access you have, including changing recovery options, disabling two-factor authentication, reading old emails from any folder, and doing anything else your account allows. If the VA ever leaves or their device is compromised, revoking access means changing the password and forcing everyone else who had it to re-log in. There is a better way.

Google's Official Delegate Access Feature

Google has a built-in feature called Mail Delegation that lets someone else read, send, and reply to email from your inbox without ever seeing your password. They log in with their own Google account and gain access through a permission you granted, not through your credentials.

Delegate access is safer for three specific reasons: the delegate never sees your password, you can revoke access instantly from your account settings without disrupting anyone else, and every email your delegate sends is clearly logged as sent on your behalf by their email address. If something ever needs auditing, the paper trail exists.

How to Set Up Gmail Delegate Access, Step by Step

You can only set up delegate access on desktop, not from the Gmail mobile app. You also need to be logged into the Gmail account you want to delegate. Google will verify your identity as an added security step before letting you add anyone.

Step 1: Open Gmail Settings

On desktop, open Gmail. Click the gear icon in the top-right and choose See All Settings. Then click the Accounts and Import tab (or Accounts on a Google Workspace account).

Step 2: Find the Grant Access to Your Account Section

Scroll down to Grant access to your account and click Add another account. Google may prompt you to verify your identity here before continuing. This is expected, and confirms you actually requested the change.

Step 3: Enter Your VA's Google Account Email

Type in your VA's Google account (this must be a Google account, either personal Gmail or Google Workspace, not an email alias). Click Next Step, then Send email to grant access. Google sends them a confirmation email with the subject line "[Your name] has granted you access to their Gmail account." The invitation expires after one week if they don't accept it, and it can take up to 24 hours after they confirm before you see them listed as a delegate.

Step 4: Choose Whether Delegates Mark Emails as Read

During setup, Gmail also asks whether emails opened by your delegate should be marked as read in your inbox too, or stay marked unread until you open them yourself. Most people choose "leave conversation as new" so you can still see at a glance what your VA has and hasn't handled.

Who Sees the Delegate's Name on Sent Email

Emails your VA sends will show a from line like "Your Name (sent by VA's Name)" to the recipient. That transparency is on by default and is a good thing for auditing. On personal Gmail there's no way to turn it off. On Google Workspace, an administrator can change this at the organization level so replies show only the account owner's address, but it's not a per-user setting inside Gmail itself.

What Delegate Access Does Not Allow

A few things your VA cannot do with delegate access, which is exactly what you want. They cannot change your password, view or modify your recovery email or phone number, change your two-factor authentication settings, or chat on your behalf through Google Chat. They can read incoming email, read your sent folder, reply, send new emails, and manage labels.

For most VA workflows, that is exactly the right level of access. If your VA also needs to manage your calendar, that is a separate delegation set up in Google Calendar with its own permission scope.

What to Review After Setup

Two quick checks are worth doing in the first week after you delegate access.

  • Confirm the VA can actually send. Ask them to send a test email from your account to your personal email. If it arrives correctly and the sender line looks right (masked or clearly 'on behalf of'), the setup is working.
  • Review sent items after the first day. Skim what went out in the first 24 hours to make sure tone and content match your expectations before letting the workflow run unattended.
  • Set a monthly check-in. Once a month, look at your account's Devices and Sessions view in Google Account Settings to confirm only the sessions you expect are active, and review the delegate list to make sure it is still correct.

Removing Delegate Access Later

If a VA leaves or you change providers, removing their access takes seconds and does not require changing your password. Go back to Settings, Accounts and Import, Grant access to your account, and click Delete next to their email. Access is revoked immediately across all their sessions. If your VA uses Replyf as their email management tool inside your delegated inbox, that access ends the same way, because Replyf never has its own connection to your account beyond what the Chrome browser session provides.

Workspace Admin Considerations (For Company Accounts)

If the Gmail account is part of a Google Workspace (custom-domain Gmail hosted by Google), there are admin-level settings that can either enable or block delegate access entirely. Before spending time trying to set it up, check with whoever administers your Workspace:

  • Is Mail Delegation turned on for the whole organization? Workspace admins can toggle this off org-wide. If it's off, you can't enable it as an individual user.
  • Are external delegates allowed? Some Workspace settings only permit delegation within the same domain. If your VA has a personal @gmail.com account and your Workspace blocks external delegates, they won't be able to be added.
  • Are there data-loss-prevention (DLP) rules? Larger organizations sometimes have DLP rules that restrict what a delegate can see or send. Rare, but worth confirming for regulated industries (healthcare, legal, finance).
  • Is 2-Step Verification required? Doesn't block delegation but the delegate's Google account needs to be enabled and compliant with the domain's 2FA policy.

For the VA: How to Accept and Use Delegate Access

Once your client sends you a delegate access invitation, here's what happens on your side and how to start using it well:

  • Accept the invitation. Google sends an email to the account you were added under. Click the link, accept.
  • Access the delegated inbox. In your own Gmail, click your profile picture in the top-right corner. You'll see a list including any inboxes you've been delegated to. Click your client's name to open their inbox in a new tab.
  • Bookmark the direct URL. Faster than the profile-picture menu. Something like `https://mail.google.com/mail/u/1/` where `u/1` refers to the second account you have access to. Bookmark it labeled with the client name.
  • Never sign out of the delegated account from that tab. Signing out signs you out of your own Gmail too, which is disruptive. Just close the tab when you're done.
  • Understand what shows on their sent emails. By default, sent emails show your name in parentheses next to the client's name (e.g., “Client Name (sent by Your Name)”). This is Google's transparency default. Some Workspace admins let you turn this off; check with the client if they want it hidden.

Troubleshooting: Common Delegate Access Issues

A few issues come up repeatedly during delegate access setup. Fixes for each:

  • “Grant access to your account” option is greyed out. This is a Workspace admin restriction. Contact the admin to enable Mail Delegation for the account.
  • Delegate never received the invitation. Check the spam folder of the delegate's Google account. If not there, remove and re-add the delegate address (case-sensitive on some setups).
  • Delegated inbox doesn't appear in the profile picture menu. Sign out of both accounts, sign back in to the delegate's account first, then try again. Google occasionally needs a session refresh.
  • Sent emails show the delegate's name in parentheses when the client doesn't want that. Workspace admin can enable a setting called “Delegates can send messages without disclosing the delegate's email address.” Not available in personal Gmail.
  • Two-factor authentication blocking the delegate. The delegate's own Google account 2FA is what matters, not the client's. Make sure the delegate has 2FA properly enabled on their account before accepting the invitation.

Want every reply to sound like your client, not a robot?

Try Replyf Free

Related reading

How to Send an Email on Behalf of Someone Else (Gmail, Done Right)

Gmail gives you three ways to send email on someone else's behalf. One (password sharing) is a security disaster. One (Send As alias) has annoying limits. One (delegate access) is what Google actually built for this. Setup and permission scope below.

Managing Multiple Client Inboxes Without Losing Your Mind

Juggling tone, context, and urgency across multiple inboxes is the real job. Here's how to make it sustainable.

Start Writing Emails Faster with Replyf →

FAQs about How to Delegate Gmail Access to a VA Safely (Without Sharing Your Password)

Everything you need to know

Is Gmail delegate access safe for confidential client emails?

Yes, when set up correctly. Delegate access is Google's official way to share inbox access without password sharing, and it can be revoked instantly. The delegate never sees the client's password, cannot change account settings, and every action is logged in the client's Google security dashboard. For confidential content specifically, verify Workspace admin settings around DLP and confirm the delegate uses 2FA on their own account.

Can I use Gmail delegate access without a Google Workspace subscription?

Yes. Delegate access is available in personal Gmail accounts (free @gmail.com) as well as Google Workspace. The setup is identical. Personal Gmail supports up to 10 delegates per account, which is more than most VAs and clients will ever need.

How many delegates can I add to my Gmail account?

Personal Gmail supports up to 10 delegates per account. Google Workspace supports up to 1,000 delegates, though only about 40 can actively access the account simultaneously. For a client hiring one VA, one delegate is what you actually need.

Does the client see when I read their email as a delegate?

No live notifications. The client's Gmail doesn't ping when a delegate reads a message. However, the account's Google security dashboard shows sessions and logins including delegate sessions, so an admin or the client can audit access if needed. Emails you read as a delegate are marked as read for the client too (the message shows as read in their inbox), so there's no way to read an email invisibly.

Is delegating Gmail access safer than sharing my password?

Yes, significantly. Delegate access lets your VA read and send email from your inbox without ever seeing your password, and you can revoke it instantly from settings. Password sharing gives them full account control including the ability to change recovery options and two-factor settings.

Can I delegate Gmail access from a Workspace account?

Yes, and it is more common there than in personal Gmail. In a Google Workspace account the feature is on by default, but a Workspace admin can restrict who is allowed to delegate access, so check with your admin if the option is greyed out.

Does my VA need a Google account to be a delegate?

Yes. Google Mail Delegation requires the delegate to have their own Google account (personal Gmail or Google Workspace). You cannot delegate access to a non-Google email address.

Will my VA see emails I have already read or previously sent?

Yes. Delegate access shows your VA the full contents of your inbox and sent folder, including archived and previously read emails. If there is a folder or label that should stay private, do not put anything there that you would not want your delegate to see.

Can my VA read and send from the Gmail mobile app once delegate access is set up?

Google has been rolling out delegated-mailbox support in the Gmail mobile apps for Android, iPhone, and iPad, but it may not be available on every account yet. Desktop Gmail in a browser has always been the reliable place to use delegate access, and it's what most VAs default to.

Does a Chrome extension like Replyf still work when a VA is using delegate access?

Yes. When your VA opens your delegated inbox in Chrome, Replyf runs the same way it would in any Gmail account. Their tone profile for your inbox is set up once from their own Replyf account, and replies are drafted in your voice regardless of whether they are logged in through delegation or directly.