Push ThouShaltNotClick to all your staff

Before you start

You'll need:

• Admin access to your Google Workspace or Microsoft 365 tenant
• Your TSNC admin account already set up (sign up at thoushaltnotclick.com if you haven't yet)
• About 15 minutes per platform

Step 1 — Get the extension ID

Our Chrome Web Store extension ID is:

(You can verify this by visiting our Chrome Web Store listing.)

Step 2 — Open Google Admin Console

1. Sign in to admin.google.com as your domain super admin.
2. Go to Devices → Chrome → Apps & extensions → Users & browsers.
3. (Optional) Pick the organizational unit you want this to apply to. To deploy to everyone, select the root org. To pilot with one group first, select that OU.

Step 3 — Add the extension

1. Click the + (plus) button in the bottom-right.
2. Choose Add Chrome app or extension by ID.
3. Paste the extension ID from Step 1: cpnepnmopionnobdffmnoikbjgnnfkpf
4. Leave From the Chrome Web Store selected and click Save.

Step 4 — Force-install

1. The extension now appears in your list with Allow install set by default.
2. Click the extension's installation policy dropdown and change it to Force install.
3. Click Save at the top of the page.

Within ~6 hours, every Chrome browser signed into a managed account in this OU will have the extension installed automatically. Staff don't need to do anything. They'll see the TSNC icon appear in their toolbar.

Step 5 — Pin the extension (strongly recommended)

Force-installing the extension puts it in Chrome but tucks it behind the puzzle-piece icon in the toolbar. Most staff won't notice it's there. Pinning it makes the TSNC icon always visible while they're reading email — which is exactly when they need it.

1. On the same extension entry in Google Admin Console, click the extension name to open its settings panel.
2. Find the section Permissions and URL access (or Allow installation > Pinning in newer Admin Console layouts).
3. Set Allow user to pin to Force pinned.
4. Click Save.

Force-pinned means staff can't accidentally hide the icon. The TSNC trust badge will always sit next to their address bar, where they can see it on every email and click it to report suspicious mail.

Step 1 — Get the manifest URL

Our manifest URL is:

Microsoft fetches the manifest from this URL and uses it to know which Outlook capabilities the add-in needs.

Step 2 — Open Microsoft 365 Admin Center

1. Sign in to admin.microsoft.com as a Global Admin or Exchange Admin.
2. Go to Settings → Integrated apps.
3. Click Upload custom apps.

Step 3 — Upload via manifest URL

1. Choose Office Add-in as the app type.
2. Choose Provide link to manifest file.
3. Paste: https://outlook.thoushaltnotclick.com/manifest.xml
4. Click Validate. Microsoft checks the manifest and confirms it's well-formed.

Step 4 — Choose deployment scope

1. Pick who gets the add-in:
   • Entire organization — every Outlook user in your tenant
   • Specific users / groups — pilot with a subset first (recommended)
2. Review the permissions the add-in requests (read mailbox, write mailbox).
3. Click Next, accept terms, then Finish deployment.

Microsoft says deployment takes up to 6 hours but in practice it usually appears within an hour. Staff will see the TSNC icon in the Outlook ribbon when reading any email.