How to install and use the Phish Alert Button for the Outlook Mobile App (iOS and Android) and Office 365

The Phish Alert Button (PAB) add-in for the Microsoft Outlook mobile app (iOS and Android) and Office 365 gives your end-users the ability to report suspicious emails from not only their computer but from their mobile inbox as well. This empowers your employees to take an active role in managing the problem of phishing and other types of malicious emails. The tool can also provide your IT or Risk Management team with early warning of possible phishing attacks or malicious emails so they may take timely and effective actions to prevent security breaches or network compromise.

We encourage you to inform all of your users of this tool before making it accessible. Below are helpful resources that you can use to assist with your implementation of the PAB:

• Best Practices for PAB Implementation (For admins)
• How do I Use the Phish Alert Button for Office 365? (For end-users)

Paid Integration: If you are using our full-featured Phishing and Training console, the PAB will also track if your users report our simulated phishing emails, so you can see which users are successfully identifying potentially malicious emails.

Jump to:
Installation prerequisites
How to install
How to uninstall
User experience

• Outlook app (for Android)
• Outlook app (for iOS)

Additional resources
Frequently Asked Questions (FAQs)

Installation prerequisites

This installation requires one of the following servers:

• Office 365
• Exchange Server 2016 (Hybrid only) - version 15.1.544.27 (CU3) or newer

This version can be used on the following mail clients:

• Office 365 OWA
• Outlook 2016 for Windows (Click-to-Run install only)
• Outlook 2016 for Mac
• Outlook for iOS
• Outlook for Android

You must enable and configure your PAB in the KnowBe4 admin portal. You’ll also need to download the following file to begin installation:

• O365Manifest.xml

For instructions on how to enable and configure your PAB in the admin portal, visit our main PAB article.

Back to top

How to install

Step 1: Log in to your mail server Admin portal. Under the Admin centers menu, click Exchange.

Step 2: On the Exchange dashboard screen, click add-ins under the organization heading. This will take you to the add-in management screen.

Step 3: Click the "+" sign and select the Add from file option.

Step 4: The Add From File pop-up window will open. Click the Choose File button. Then, locate and add the O365Manifest.xml file from your Account Settings and click the Next button to install.

Step 5: Ensure the add-in is installed for all of your users (by default, it will be set to disabled). To do this, double-click on the add-in and you will be taken to a screen that will allow you to make the add-in optional or mandatory. We recommend that you make the add-in mandatory, but you can choose to make it optional with an enabled or disabled default.

How the add-in should look once configured in the Exchange area:

Back to top

How to uninstall

Step 1: Log in to your mail server Admin portal. Then, navigate to Admin centers > Exchange > dashboard > add-ins.

Step 2: Highlight the Phish Alert add-in. Then, click the trash icon.

Back to top

User Experience

Once installed, the PAB add-in will be available from any open email in the compatible mail clients, including the Outlook app for iOS and Android. 

In O365, the Phish Alert Button will appear on the top right of the email message, as shown below.

A user can report any email as a phishing email. The reported email will be in the users' Sent Items as a forwarded message and will be deleted from the user's inbox. If the user incorrectly reported the email, they can retrieve it from their Deleted items/Trash. 

Outlook Mobile App (for Android)

If users want to report an email using the PAB from the Outlook App on an Android device, they'll first tap the three dots at the top right of the screen, as shown below.

Then, they'll see Phish Alert listed in their add-ins. 

Once they've selected the Phish Alert add-in, they'll be brought to the screen shown below to confirm that they want to report the email. From this screen, they'll tap the Mobile Phish Alert button to confirm submission. 

After the email has been reported, the message you've set in your Account Settings will display at the bottom of the screen, as shown below.

Outlook mobile app (for iOS)

If users want to report an email using the PAB from the Outlook App on an Apple device, they'll first click the three dots at the top right of the screen, as shown below. 

Then, they'll see Phish Alert listed in their add-ins.

Once they've selected the Phish Alert add-in, they'll be brought to the screen shown below to confirm that they want to report the email. From this screen, they'll tap the Mobile Phish Alert button to confirm submission.

After the email has been reported, the message you've set in your Account Settings will display at the bottom of the screen, as shown below. 

Back to top

Additional Resources

• Phish Alert Button Guide for Exchange 2013/2016 (Server-based)
• Feature Webinar: Outlook PAB - Server Installation
• How Do I Change the Phish Alert Text for Server-Based PAB (Exchange & Office 365)
• Multiple Phish Alert Button Instances (Multi-PAB): Office 365/Exchange
  

Back to top

Frequently asked questions (FAQs)

Below are questions you may have regarding the Office 365 PAB. If you don't see your question answered below, contact support.

Q: My users aren’t seeing the PAB in their Outlook app on their phones. Why?
A: When installing the PAB, did you make the add-in mandatory? This is step 5 of the installation process. The PAB will not appear in Outlook for mobile if the add-in is not mandatory. Your users must enable the PAB themselves in their Outlook app settings.

Q: Can I publish the PAB add-in using Centralized Deployment?
A: Yes, centralized deployment is supported for this version of the PAB.

Back to top