Custom domains
Use your own domain with SPF, DKIM, DMARC, MTA-STS and DANE for authenticated, transport-protected delivery.
Create account
For organisations
End-to-end encrypted email
Your email, readable only by you
EineEmail encrypts your mail on your device before it is stored. Our servers keep only ciphertext – we cannot read your messages, contacts or calendar.
Create account
OpenPGP
An open standard, not a proprietary format
Security model
Built so that we cannot read your mail
Encryption is only as strong as the keys you trust. EineEmail combines zero-access storage with verifiable key distribution.
Zero-access encryption
Mail between EineEmail users is end-to-end encrypted. Plaintext mail arriving from other providers is encrypted to your public key on arrival, before it is written to storage.
Key Transparency
Public keys are published in an append-only transparency log. Independent witnesses cosign its state with threshold signatures, so a substituted key becomes detectable by clients and auditors.
Open standards
EineEmail uses OpenPGP, so you can exchange encrypted mail with users of other OpenPGP-compatible tools.
No system is perfect: Key Transparency does not prevent an attack, it makes key substitution detectable. Mail sent to non-encrypting providers leaves our system as regular email.
Create account
How it works
Three steps from sign-up to private mail
Step one
Create your account
Your keys are generated on your device. Save your recovery kit – it is the only way back in if you lose your password.
Step two
Use the apps you like
Use the web app, the iOS, Android and desktop apps, or your existing mail client through the local EineEmail Bridge.
Step three
Write and receive privately
Messages are encrypted before storage and decrypted only on your devices. Key Transparency lets your apps check recipients' keys.
Apps
Web, mobile, desktop – and your own mail client
EineEmail runs in the browser at mail.eineemail.com and as apps for iOS, Android and desktop. The local EineEmail Bridge offers IMAP and SMTP on your computer, so clients like Thunderbird or Apple Mail can work with your encrypted mailbox.
Web app
iOS
Android
Desktop
IMAP/SMTP via Bridge
Features
Everything you expect from email, encrypted
Private by design, without giving up the tools you use every day.
Zero-access mailbox
Message bodies are encrypted with keys that never leave your devices in readable form. The server stores and serves ciphertext only.
Encrypted contacts
Your address book is encrypted end to end and synchronised across your devices.
Encrypted calendar
Your calendar events are encrypted end to end before they leave your device.
On-device search
Search runs locally over an encrypted index on your device, so your queries and mail never have to be decrypted on our servers.
Zero-leak notifications
Push notifications carry no message content, sender or subject – just a signal for your app to fetch and decrypt locally.
Recovery kit
A BIP-39 recovery phrase lets you restore access to your encrypted data. Keep it safe – we cannot reset it for you.
24
words in your recovery phrase
4
platforms: web, iOS, Android and desktop
7
languages on this website
0
trackers and analytics tools on this website
Our principles
What you can hold us to
FAQ
Frequently asked questions
The key answers about encryption, recovery and your mail clients.
Can EineEmail read my email?
No. Message bodies are stored encrypted with keys we do not have in readable form. Like all email services, we do process some metadata needed for delivery, such as sender and recipient addresses.
What happens to mail from Gmail, Outlook and other providers?
Incoming mail from outside arrives in plaintext over SMTP. EineEmail encrypts it to your public key on arrival, before it is stored.
What if I forget my password?
Use your BIP-39 recovery kit to restore access. Because we cannot read your data, we cannot recover it for you without the kit.
Can I use Thunderbird or Apple Mail?
Yes. Install the EineEmail Bridge on your computer; it provides local IMAP and SMTP and handles encryption for your client.
What does Key Transparency protect against?
It makes it detectable if someone – including us – tries to hand out a different public key for your address. Independent witnesses cosign the log so a single party cannot rewrite it unnoticed.
How much does it cost?
Starter is $1 per month, Pro $3.99, Business $6.99 and Enterprise $13.99 per seat per month, with lower prices when paying yearly. Prices apply from public launch – you can already join the beta.
Pricing
Plans for every need
Monthly or yearly – all prices in US dollars, end-to-end encryption included.
Beta: prices apply from public launch. Sending to external providers is being enabled during the beta.
Starter
$1 / month
Your own address on your own domain.
- 1 custom domain
- EineEmail Bridge for Apple Mail & Thunderbird (beta: one recipient per message)
- 1 GB encrypted storage
- 1 user
Pro
$3.99 / month
More room and more options.
- 1 custom domain
- EineEmail Bridge (beta: one recipient per message)
- 20 GB encrypted storage
- Encrypted large-file sharing
- Aliases
Business
$6.99 per seat / month
For teams and companies.
- Multiple custom domains
- EineEmail Bridge (beta: one recipient per message)
- 50 GB per seat
- Admin console
- User and organization quotas
- Security log (180 days, truncated network address)
Enterprise
$13.99 per seat / month
or a custom licence for self-hosting
For organizations with stricter requirements.
- Unlimited custom domains
- 100 GB+ per seat
- SCIM and SSO
- Legal hold
- Metadata e-discovery
- Optional organization recovery (off by default, disclosed to users)
- TLS audit log export
Start right in your browser
Nothing to download: the web app runs at mail.eineemail.com, and your keys are generated on your device.
For organisations
Your domain, your policies
Bring your own domain and manage your team from a single admin panel.
For organisations
For organisations
For organisations
For organisations
For organisations