The best email privacy services in 2026

Skiff was a well-liked encrypted email service. Notion bought it in February 2024 and shut the mail product down that August, which left users about six months to move their address, their contacts and every login that pointed at it. I think about that before I think about cipher suites.

This list is for people who want out of Gmail or Outlook, or who at least want to stop handing every newsletter and shop checkout their real address. It’s also for anyone who has read about data brokers and suspects their inbox is the thread holding the whole profile together. I’m writing from Singapore, so I also care whether a German provider works well from here and whether I can pay without a US card.

I haven’t lab tested any of these. What follows comes from vendor documentation, published policies, the standards involved and my own judgement, so read the verdicts as opinion with the reasoning shown. Prices move, so where I’m giving a number I’m giving it as approximate, and you should check the vendor page before paying.

How I picked

what the provider can read: end-to-end encrypted, encrypted at rest with a key only you hold, or plain readable mail on the server like anywhere else. I don’t score marketing claims, only what the docs describe.
where the company sits and what it has said publicly about legal requests. Jurisdiction is context here, and this is not legal advice.
who pays for it. I only wanted services where the customer pays and there’s no ad model sitting behind the inbox.
how hard it is to leave. Custom domain support, IMAP or a proper export. After Skiff, a provider that locks you in loses points.
price and sign-up friction, including anonymous payment options and how the service behaves from Asia.

The picks

Six picks, and one of them isn’t a mailbox.

Proton Mail

Proton Mail is the default answer for a reason. It’s based in Switzerland, mail between Proton accounts is end-to-end encrypted, and mail to anyone else can go out as a password-protected message that the recipient opens through a link. It also speaks OpenPGP, the standard now specified in RFC 9580, so you can swap properly encrypted mail with people on other PGP tools.

The record has one mark on it worth knowing about. In 2021 Proton complied with a Swiss court order that led to a French climate activist’s IP address being logged, and it confirmed this publicly at the time. Encryption doesn’t hide who you are from the company itself, so if that matters, connect over Tor or a VPN and pay with cash or Bitcoin, both of which Proton has accepted.

What I like:

end-to-end encryption between Proton users, plus PGP for outsiders
open-source apps that have been through third-party security audits
one login also covers Calendar, Drive, Pass and a VPN, and Pass includes aliases built on SimpleLogin

What I don’t:

custom domains and the IMAP Bridge for desktop mail clients need a paid plan, so the free tier works as a trial
as with any PGP-based mail, subject lines and addresses stay outside the encrypted body

Pricing: free tier with about 1 GB. Mail Plus is roughly US$4 a month on annual billing, and the bundled Unlimited plan costs more.

Link: proton.me/mail

Tuta

Tuta, called Tutanota until it rebranded, is a German provider based in Hannover and was founded in 2011. It goes further than Proton on what it encrypts: subject lines, contacts and calendar entries are covered, not only the message body. In 2024 it added post-quantum key exchange to its own protocol.

The price of that is isolation. There’s no IMAP and no PGP, so you can’t point Thunderbird at it and you can’t trade PGP mail with outsiders. You use Tuta’s own web, desktop and mobile apps, which are open source. I’d pick it for someone whose contacts are mostly on Tuta or who’s fine with the password-protected link for everyone else.

What I like:

subject lines, contacts and calendar are encrypted, which most rivals here don’t do
a free 1 GB tier that lets you try it properly before paying
German jurisdiction and more than a decade of operating history

What I don’t:

no IMAP or POP3, so no third-party mail clients
no PGP, which rules it out if a contact insists on PGP-encrypted mail

Pricing: free tier with 1 GB. Paid tiers start at a few euros a month and rise with storage and features, so check the current page.

Link: tuta.com

Mailbox.org

Mailbox.org is run by Heinlein Support from Berlin, and it’s the one I’d hand to someone who wants a normal mailbox with a calendar and contacts that just isn’t ad-funded. It isn’t zero-knowledge. By default, mail sits on the server in a form the company could in principle read, unless you turn on its built-in OpenPGP encryption in the webmail. It says it runs on renewable energy and doesn’t run ads or tracking.

The servers are in Germany, so from Singapore expect a round trip somewhere around 150 to 200 milliseconds. You won’t notice that for email. The webmail is functional and a bit dated, and I’d use it through IMAP in Thunderbird or a phone client instead.

What I like:

custom domains on paid plans and standard IMAP, so leaving later costs little
OpenPGP built into the webmail, so encrypted mail doesn’t need a browser extension
calendar, contacts and tasks come with the mailbox, which replaces a chunk of what people use Google for

What I don’t:

not zero-knowledge by default, so stored mail is only as private as the company’s own access controls
the webmail interface is dated, and I’d rather use a native client

Pricing: the Light plan is from around â‚¬1 a month and Standard is around â‚¬3, with more storage and features as you go up.

Link: mailbox.org

Posteo

Posteo is a Berlin provider with a short feature list and a price to match: about â‚¬1 a month, 2 GB to start, no free tier and no ads. You don’t have to give your name, and you can pay by bank transfer or by mailing cash. Its crypto mail storage option encrypts your saved mail with a key derived from your password, so by Posteo’s own description it can’t read what’s stored.

The gaps are plain. As far as I know there are no custom domains and no first-party mobile app, so your address is @posteo.net or one of its siblings for good and you can’t carry it to another provider. I’d still send it to a friend who wants a boring mailbox that costs less than a coffee a month.

What I like:

about â‚¬1 a month with no ads, so the business model is simply you paying
sign-up asks for very little, and cash by post is an option
encrypted mailbox storage, and PGP works fine through Thunderbird or other mail clients

What I don’t:

no custom domains, so the address isn’t portable
2 GB is small if you keep years of attachments

Pricing: about â‚¬1 a month for 2 GB. No free tier.

Link: posteo.de/en

Fastmail

Fastmail is the outlier because it isn’t end-to-end encrypted at all. It’s an Australian company, mail is readable on its servers like ordinary mail, and Australia passed the Assistance and Access Act in 2018, which lets agencies issue notices to communications providers. If your worry is a state reading your mail, look at Proton or Tuta instead.

I include it because most people’s real problem isn’t a state. It’s ad targeting, account sprawl and a mailbox too painful to switch to. Fastmail has no ads, good custom-domain handling and fast apps, and it has Masked Email, which creates a throwaway address per site and plugs into password managers like 1Password. I’d argue that does more for everyday privacy than an encryption toggle you never use.

What I like:

Masked Email aliases built into the mailbox
custom domains with straightforward setup, plus IMAP and JMAP so leaving is easy
a 30-day free trial so you can move real mail before paying

What I don’t:

no end-to-end encryption and no built-in PGP
Australian jurisdiction, and no free tier beyond the trial

Pricing: the Standard tier is around US$5 a month on annual billing, with cheaper and pricier tiers either side.

Link: fastmail.com

SimpleLogin

SimpleLogin isn’t a mailbox. It’s an alias service: each website gets its own address, mail is forwarded to your real inbox, and you can reply through a reverse alias so the site never sees your actual address. Proton bought it in April 2022, the code is open source, and with your own domain attached you can rebuild the same aliases elsewhere if the company ever changes course.

Your email address is a join key. Data brokers and ad networks match records on it, which is part of how data brokers profile you. One alias per site means a leaked or sold address doesn’t connect the rest of your accounts, and when spam arrives on a shop’s alias you know who passed your address along.

What I like:

one alias per site, and you can switch a single one off without touching the rest
reverse aliases let you reply without exposing your real address
open source, with optional PGP encryption of forwarded mail

What I don’t:

forwarded mail passes through SimpleLogin’s servers, so it’s one more company in the delivery path
some sign-up forms reject known alias domains, and the free plan caps how many aliases you get

Pricing: free plan with a small alias cap. Premium, which adds unlimited aliases and custom domains, is around US$30 a year.

Link: simplelogin.io

Comparison table

service	price	primary strength	primary weakness
Proton Mail	free; about US$4/month paid	end-to-end encryption plus OpenPGP	custom domains and Bridge need a paid plan
Tuta	free; from a few euros/month	encrypts subject, contacts and calendar	no IMAP, no PGP
Mailbox.org	from about â‚¬1/month	normal mailbox with calendar, PGP optional	readable on the server by default
Posteo	about â‚¬1/month	minimal data, encrypted storage, cash payment	no custom domains, 2 GB start
Fastmail	about US$5/month	best day-to-day usability, Masked Email	no end-to-end encryption
SimpleLogin	free; about US$30/year	alias per site, reply without exposure	extra company in the mail path

How to choose

Start with what you’re protecting against. Ordinary email between two providers is usually encrypted in transit using STARTTLS, defined in RFC 3207, which protects the wire and does nothing for the copies sitting on each server. End-to-end encryption fixes that, but only if the other side plays along. With Proton or Tuta that means the recipient is on the same service or opens a password-protected link, and with Proton it can also mean they hold your PGP key. A big share of most people’s mail goes to Gmail and Outlook, so plenty of it will still travel readable. The EFF’s Surveillance Self-Defense guide is the clearest walkthrough of threat models I know, and it’s worth twenty minutes before you spend anything.

Here’s the part you might argue with: I think aliases matter more than which mailbox you pick. A good mailbox with one address used everywhere still gives every shop and every data broker the same key to your identity. If you’re an iPhone user, iCloud+, the paid tier, already includes Hide My Email, and Apple’s Mail Privacy Protection loads remote images through a proxy so senders can’t see when you open a message. Tracking pixels are covered further in the best ad and tracker blockers in 2026. If your address is already sitting in broker files, the best data broker removal services in 2026 covers the cleanup side.

Whatever you pick becomes the recovery address for your bank, your cloud storage and every other account, so it’s the master key whether you meant it that way or not. Lock it with an authenticator app or a hardware key, and keep recovery codes in a password manager. What a password manager does and doesn’t cover is in what a password manager actually protects. And use a custom domain if the provider allows one. It’s the cheapest insurance against a Skiff-style shutdown, because you can point the domain at a new provider and keep every address.

Running your own mail server is where some people end up, and I’d talk most of them out of it for privacy alone. You take on deliverability, patching and blocklists, and every message you send to a Gmail address still lands on Google’s servers anyway. The wider trade-off is in self-hosting vs trusting a provider. Email is also the wrong tool for anything truly sensitive. For that, Signal vs Session for private messaging is a better starting point. And if you’re weighing AI assistants that read your inbox, our sister site AI Tool Gazette is a good place to start reading about those tools. Check what any of them can see before connecting a private mailbox. More like this is in the blog index.

Verdict / top pick

Proton Mail is my top pick for most readers. It’s the only one here that combines end-to-end encryption, OpenPGP compatibility and aliases under one login. Pay for Mail Plus, add your own domain, and turn on two-factor login.

If you want cheap and simple, Posteo at about â‚¬1 a month is the one I’d send to a friend. If you want something that behaves like the Gmail you’re leaving, with custom domains and Masked Email, that’s Fastmail. Tuta suits people who can live without IMAP and want contacts and calendar encrypted as well. Mailbox.org fits anyone who wants a full office-style mailbox from a German provider.

And whichever you choose, add aliases on top. That habit protects you more than the logo on the mailbox.

Written by Xavier Fok

disclosure: this article may contain affiliate links. if you buy through them we may earn a commission at no extra cost to you. verdicts are independent of payouts. last reviewed by Xavier Fok on 2026-09-20.