~/tools/email
Email Providers
last updated 2026-08-02 · 6 recommendations + pgp tools · what changed
Email is where everything else lives: password resets, receipts, your real name.
Moving it off Gmail or Outlook is one of the bigger wins you can get,
and it's less painful than it sounds.
before you pick
Email was never designed to be private. Even the best provider here can't encrypt
a message end-to-end when the other side is on Gmail.
What you're choosing is who stores your mail, under which laws, and how much
of it they can read. Set your expectations there and you'll choose well.
what actually matters
encryption at rest
Can the provider read your stored mail? "Zero-access" means even they can't open your inbox.
jurisdiction
The laws the provider answers to. Switzerland and Germany are popular for a reason: strong privacy law, no gag-order culture.
standard protocols
IMAP/SMTP support means you can use any mail client and leave anytime. Some providers trade this away for stronger encryption.
custom domain
Your address shouldn't be hostage to a provider. A domain you own means you can switch later without telling anyone.
recommendations
Proton Mail
the default pick
🇨🇭 switzerlandzero-knowledgepartially open sourceauditedfree tier
Proton Mail is the most technically robust encrypted provider you can get.
Mail between Proton users is end-to-end encrypted automatically, everything at
rest is zero-access, and the apps are polished enough that nobody in your
family will complain. The wider ecosystem (Calendar, Drive, VPN, Pass,
SimpleLogin aliases) makes it a clean one-stop Google exit,
and the VPN bundle discount is genuinely good value.
Be clear-eyed about one thing: Proton has cooperated with Swiss court orders
on the narrow data it does hold (IP logs, metadata), while
sticking to its stated data-minimization policy. The cases that drew criticism
came down to users assuming protections Proton never claimed to offer.
Not a scandal; a threat-model calibration issue.
good
- Zero-access storage; E2EE between Proton users and via PGP
- Polished apps on every platform
- Custom domains, catch-all, and built-in aliasing on paid plans
- Long track record and regular independent audits
mind the
- No direct IMAP: desktop clients need Proton Bridge (paid plans)
- Will comply with Swiss courts for the metadata it does hold: calibrate accordingly
- VC-backed and increasingly commercial: worth monitoring, not currently a red flag
- Subject lines aren't encrypted (PGP limitation)
mailbox
the standards pick
🇩🇪 germanyimap/smtppgppaid
mailbox is for people who want privacy without leaving standard email
behind. It rebranded from Mailbox.org to simply "mailbox" in September
2025, with product names Mail, Office, Meet, and Drive replacing the old
branding; it's the same German company (Heinlein Group) and the same data
centers. Full IMAP/SMTP means Thunderbird, FairEmail, or anything else just
works: no bridge, no lock-in. The optional PGP "Guard" encrypts your mail at
rest, and you get a full calendar, contacts, and office suite for pocket change.
good
- Real IMAP/SMTP: use any client, migrate out anytime
- Cheap, transparent pricing; no free-tier upsell games
- Custom domains on every plan
- Boring in the best way: stable German company since the 90s
mind the
- Encryption at rest is opt-in, not the default
- Web interface looks dated next to Proton or Tuta
- No free tier (30-day trial only)
Tuta
the all-in encryption pick
🇩🇪 germanypost-quantumopen sourcefree tier
Tuta goes further than anyone on encryption: its own protocol covers subject
lines, calendars, and contacts, and it's already rolling out post-quantum
algorithms. The trade-off is that you live inside Tuta's apps.
If maximum encryption matters more to you than client choice, this is the one.
good
- Encrypts more than PGP can, including subject lines
- Very affordable paid plans; fair free tier
- Fully open-source clients
- Encrypted calendar included even on free
mind the
- No IMAP at all: official apps only
- No PGP interop with other encrypted providers
- Search and offline behavior can feel limited
Posteo
the anonymity pick
🇩🇪 germanyanonymous signupcash acceptedimap/smtppaid
Posteo asks for no name, no phone number, and you can literally mail
them cash. It strips identifying data on purpose and keeps the price
at a euro a month. The catch comes from that same philosophy: no custom
domains, because your address would link back to you.
good
- Truly anonymous signup and payment options
- IMAP/SMTP supported; optional full-storage encryption
- €1/mo, no tiers, no upsells
mind the
- No custom domains: by design, but a real lock-in trade-off
- 2GB base storage is small (expandable cheaply)
- Spartan web interface
StartMail
the alias-first pick
🇳🇱 netherlandsaliasingimap/smtppgppaid
StartMail comes from the Startpage family, and aliasing is its headline
feature: unlimited burner and custom aliases built straight into the
inbox, no separate service to wire up. Standard IMAP/SMTP means any
client works, and the web interface handles PGP for the rare correspondent
who has it. It's the pragmatic pick if alias-per-signup is the habit you're
building your email life around.
good
- Aliases are first-class: create and burn them inline as you sign up
- IMAP/SMTP support; custom domains available
- Simple one-tier pricing, EU jurisdiction
mind the
- Same System1 (ad-tech) ownership caveat as Startpage
- Encryption at rest is vault-based, not zero-access like Proton/Tuta
- No free tier; smaller ecosystem (no calendar/drive suite)
Disroot
the nonprofit pick
🇳🇱 netherlandsnonprofitimap/smtpfree
Disroot isn't a company selling you a product: it's a nonprofit,
ethically-run collective offering email alongside a wider suite of
federated and open-source services (cloud storage, chat, calendars, and
more), funded by donations instead of subscriptions. Standard IMAP/SMTP
means any client works, and there's no upsell funnel because nothing's
being sold. The trade-off is the one you'd expect from volunteer-run
infrastructure: no SLA, no support line, and modest storage.
good
- Nonprofit, donation-funded: no ads, no data monetization incentive
- Free, with standard IMAP/SMTP access
- Part of a wider ethical-services suite beyond just email
- EU jurisdiction (Netherlands)
mind the
- No zero-access encryption at rest: trust is in the collective's ethics, not cryptography
- Volunteer-run: no formal SLA or paid support
- Modest default storage; donations keep the lights on, so consider chipping in
at a glance
prices are ballpark annual rates, check the provider before you commit.
pgp tools
PGP (through the OpenPGP standard) is how you get true end-to-end
encryption over plain email, independent of any provider on this page.
You hold a key pair, your contact holds theirs, and whoever sits in the middle
only ever sees ciphertext. The fine print: PGP encrypts message bodies and
attachments, but subject lines, addresses, and most headers stay readable on
every server your mail crosses.
One more thing to know before the entries below: the standard itself
has split. The IETF published a modernized OpenPGP spec (RFC 9580) in
2024, but GnuPG broke away and follows LibrePGP, a competing fork by GnuPG's
own founder, and so do the tools built on it and on the RNP library. The two
formats aren't fully interoperable at the newer edges (v5 and v6 key
fingerprints look similar but are calculated differently). It's a genuine
standards dispute, not one side being wrong; just know which side your tools
sit on.
GnuPG
the reference implementation
all platformspgpopen sourcefree
GnuPG is the program nearly everything else in this section wraps. It handles
key generation, signing, and encryption from the command line, and when a
mail client or a package manager verifies a signature, GnuPG is
usually doing the work underneath.
good
- Preinstalled or one package away on practically every Linux distribution
- The code Gpg4win and GPG Suite build on directly
- Experimental post-quantum support already landing in the 2.5 branch
mind the
- Follows LibrePGP, not the IETF's RFC 9580: the standards split above starts here
- The 2.4 branch reaches end of life in mid-2026 per GnuPG's own release notes; check gnupg.org before installing
Gpg4win
the windows pick
windows onlypgpopen sourcefree
Gpg4win packages GnuPG for Windows together with Kleopatra, a graphical key
manager, plus GpgOL, its plugin for Outlook. It's the official Windows
distribution of GnuPG: you get the reference cryptography without
touching a terminal.
good
- Kleopatra handles keys graphically; no command line needed
- Developed with GnuPG's own maintainers, with historical funding from Germany's BSI
- The classic desktop Outlook plugin (GpgOL) is the original, mature one
mind the
- The GpgOL/Web add-in for the new web-based Outlook is still labeled experimental by Gpg4win itself
- That web add-in only supports standard Microsoft 365 accounts so far
- Inherits GnuPG's LibrePGP side of the standards split
GPG Suite
the macos option
macos onlypgpfree tier
GPG Suite brings GnuPG to macOS with GPG Keychain for managing keys and GPG
Mail, a plugin that adds OpenPGP to Apple Mail. Go in with eyes open:
the Mail plugin's recent track record is bumpy.
good
- GPG Keychain and the command-line tools are free
- GPG Mail works on macOS Sequoia 15.5+, GPGTools' own recommended setup
- A Tahoe-compatible beta already exists
mind the
- macOS Tahoe currently crashes Apple Mail around certain GPG Mail banners; GPGTools recommends avoiding Tahoe if you rely on it daily
- GPG Mail is paid, and version 8 is a paid upgrade even for existing support-plan holders
- Users have publicly asked whether the project is still maintained; a maintainer responds, but the communication gap is real
OpenKeychain
the android standby
android onlyf-droidpgpopen sourcefree
OpenKeychain manages OpenPGP keys on Android and exposes an API that other
apps plug into. You keep your keys in one place and let your mail client call
out to it for signing and decryption. It still works, and it's still the
standard on Android; it just stopped growing.
good
- Still the supported path in Thunderbird for Android's (formerly K-9 Mail) own official docs
- One place for your keys instead of per-app copies
- Still receives security fixes and basic upkeep
mind the
- In official maintenance mode since August 2021: no new features, per the project's own README
- Last stable release landed in February 2024
Thunderbird
the low-friction pick
desktop apppgpopen sourcefree
Thunderbird has had OpenPGP built in since version 78 in 2020, with
no separate GnuPG install required. For most people this is
the lowest-friction way to actually use PGP.
good
- No GnuPG, no plugin: OpenPGP ships in the client
- Sidesteps the Outlook and Apple Mail plugin problems above entirely
- You turn it on in account settings and manage keys inside the client
mind the
- Uses the RNP library, which follows LibrePGP: the standards note at the top of this section applies here too
- Desktop only: on Android, Thunderbird hands OpenPGP to OpenKeychain instead
worth knowing
Get a domain before you migrate. A [email protected]
address means you can change providers in an afternoon without updating a single
account. It's the cheapest insurance on this page.
Don't hand your address to everyone. Pair your provider with an
aliasing service (SimpleLogin, addy.io, or the aliasing built into Proton's paid
plans and StartMail): a unique alias per signup means leaks are traceable and
revocable.
Pick a recovery address outside your main ecosystem. A free
account at an ethically run independent provider like Disroot makes a solid
recovery/backup address, meaningful redundancy without re-concentrating
everything in one company's hands.
Migrate in layers. Forward your old inbox to the new one, move
important accounts first (banks, government, recovery emails), and let the long
tail update itself over a few months. Nobody actually does it in one weekend.
Email ≠ secure messaging. If the content truly can't leak,
it belongs in a private messenger, not an inbox.