Have a look at Proton and Tuta (used to be Tutanova)
Used to be Tutanota*
Oops. Correct 👍
Been with Posteo for years now. They're very solid.
I've been with Mailbox for years now too. Also very solid.
I am using mailbox.org for years now.
One thing to consider about mailbox.org is that if you don't use your own custom domain and keep an @mailbox.org address (which afaik is considered a best practice for privacy because it lets you "hide" in the crowd), if you decide to move on later they will make your old address available to others later.
proton.me is not bad.
Proton Mail, Tuta mail, runbox.com, to name three.
Tuta mail
I considered them, but had a problem with two things about them: they both a) don't allow custom domains (which is fine for privacy) and b) recycle email addresses, meaning that if you move on later they will make your old email address available to others.
'Safe' is a bit too vague: what are you looking for?
- If you just need an email that doesn't belong to GAFAM and is not subjected to US privacy-less laws but need no extra security (no end to end encryption): Infomaniak KSuite(Swiss) is available both as a free plan (20GB email + 15GB Cloud free) and as a paid version (unlimited email storage and 1To Cloud). They also offer just the email, if you don't need cloud: Kmail ;) . There is also mailbox.org (Germany)
- End to end encryption: Tuta (German), Proton (Swiss).
Edit: moved mailbox out of the E2EE section.
Stop posting protonmail you bozos, what kind of person only needs a single email tied to a phone number? Preposterous. I won't even bother bringing up them putting some idiot climate activists in jail since I know "privacy" to redditors means posting about GDPR and turning your brain off
Tuta is allegedly okay (we're not international drug traffickers so we can pretend other (European) people's computers are trustworthy bc we don't need them to be usually) but it doesn't have imap, so you just use it as the recovery email and then use some other generic free disposable privacy email w imap
But proton doesn't need a phone number? You can just do a captcha. I would never use an email that asks for a phone number. Or even a phone.
They began demanding my phone number after I signed up without it. Not sure why. Was years ago tho
That's the same trick discord pulls btw it's shady
Stop posting protonmail you bozos, what kind of person only needs a single email tied to a phone number?
And this is before even getting into their recent scandal with their VPN service.
I won't touch that shit with a 39 ^1^/~2~ft poleeee~🎵
Define "safe"?
Like, preferably not spied on like with Gmail or whatever the MS one is.
I've been using fastmail.com for a long time and am satisfied, though it's on the expensive side and I haven't looked into every alternative.
If you want cheap email hosting for your own domain, mxroute.com has been around for a while and cranemail.com is new, but both are small companies run by people who know what they are doing (online acquaintances of mine if that matters).
For my own domains I'm using Migadu since they support unlimited domains per account. Quite happy with them..
Not a recomendation... i just like to recall that it seems pointless to me to use a private/secure mail provider just to end up communicating with gmail users. There are other private/secure means of communication over the internet, just not so much through emails.
Purelymail. Really good and cheap it all you need is email. No extra cost to bring your own domain.
Don’t Proton just get caught revealing a French activist’s IP address to authorities? Might stay away from that one for now.
This happened years ago afaik, but lemmy keeps sharing it around for some reason.
For context, proton encrypts the traffic, not the IP Address. While I dont remember how long IP Addresses stay in their logs, you can easily avoid exposing your true IP address by using a VPN, which is clearly not what that acitvist had done.
Proton is still compelled to follow government laws in order to operate, and will hand over what info they have when compelled to. If that info is something their service can encrypt, such as emails, cloud storage, passwords, and so on, then it will look like jumped data when handed over. You IP address can't reasonably be encrypted, and neither can your primary email that is associated with you proton account. If your primary email has revealing info, then thats on you for not obfuscating it more. If you arent using a VPN to access services, then your IP address will be indicative of where your traffic might be coming from. The end user does need to take extra steps to make sure their traffic is secure, and proton does talk about this in their documentation.
Proton is one of very few companies Ive seen pass third party security audits. They may not be perfect, but they are secure, and I've yet to see that truly disproven.
Proton is not what you want to use if you are trying to hide from the government but if you are trying to starve google of your data its a solid option.
Any webservice, like mail, cloud services and social platform, as even eg, Lemmy and other online platform, is forced to reveal the user data they have, if there is an court order a cause of an criminal investigation. Proton can't in this case evade the info they have, it is the IP and the account data, content of the mail is encrypted, so they can give only encrypted data in this case.
This has nothing to do with privacy rights, this protect the privacy only from access of private data without an court order in the EU. In the same case as with this activist, also Tuta, Murena and any other private mail service would have done exactly the same thing as Proton.
If you are searched by law, never is a good idea to create an account anywhere. Drug barons use pen and paper for communication because of this.
I've been using Tuta for almost two years now and I can't recommend it enough. It's really good. Check out tutanota@lemmy.world or https://tuta.com/
It's hosted in Germany and is very privacy-focused
Proton Mail is good, just don't use the paid version of any Proton service. The paid version will delete your email address if you don't keep up with payments.
You can get a lifetime subscription to Proton Pass sometimes, and that's what I did. I suspect that may protect my account from deletion due to inactivity if I'm picked up by ICE or hit by a car and put in a coma (just examples, I'm not American). I'm not sure if it has that effect though.
The paid version will delete your email address if you don't keep up with payments.
I emailed them a little over a year ago about this because the terms of service were unclear. I was told by support that my main address wouldn't be deleted, but I would be moved down to the free tier in every way -- so I would lose my extra addresses and aliases, as well as extra storage space. I was also told that there was a 30-day grace period in case my renewal payment didn't go through for some reason.
I'm far from a privacy expert, but here are some things that I have been considering while researching this for myself:
- Zero-knowledge encryption providers like Proton and Tuta are great for privacy at the expense of convenience, like possibly not being able to use common IMAP email clients. Proton has a bridge app for their paid plans that allows this on Windows and Mac but not ~~Linux or~~ mobile, and last time I checked, Tuta doesn't have this on any platform. This means that your email can only be accessed from their client, and more importantly, if a bridge app is not available for your provider on your preferred platform, all your email will be stuck in your mailbox forever with no ability to archive locally.
- What are the privacy, security, and law enforcement/intelligence cooperation policies of the provider and country where the provider's legal entity and IT infrastructure are located? If located in a country with bad policies, spying on your email is much easier, especially if it's not a zero-knowledge encryption provider.
- While using the provider's own domain for your address is better than using a custom domain, most providers appear to have a policy of making your address available to others after you leave them. Mailbox, Posteo, and Fastmail do this. One of the only providers I've found that has a policy of not doing this is Runbox.
- Does the provider have a good reputation for email deliverability? This is a tricky one that requires some research. First, look at the provider's DMARC policies with a tool like DMARC Check Tool. Mailbox and Runbox appear to pass all tests, but Posteo and Fastmail fail the DMARC quarantine/reject policy test, which apparently makes it easier to spoof your email and could make your emails less likely to be delivered. Also search the web for comments on users' experience with email delivery, like " email delivery issues", to find out what people have said.
Proton bridge is available for Linux as well.
Thanks for the correction, I didn't see it mentioned on their page. I've edited my post.
Privacy
A place to discuss privacy and freedom in the digital world.
Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.
In this community everyone is welcome to post links and discuss topics related to privacy.
Some Rules
- Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
- Don't promote proprietary software
- Try to keep things on topic
- If you have a question, please try searching for previous discussions, maybe it has already been answered
- Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
- Be nice :)
Related communities
much thanks to @gary_host_laptop for the logo design :)