← Back to apps
Tutanota logo

Email

Tutanota

German-based encrypted email with zero-knowledge

and encrypted calendar

Privacy score 84 Free Technical: Beginner Featured
Visit website

Tutanota offers a privacy-conscious alternative in the email space, with a stronger focus on data protection than many mainstream tools.

🔀

Recommended alternatives

Web Android iOS Desktop

Who is this for?

Good for you if:

  • You want encrypted email with German privacy protections
  • You need encrypted calendar (Tutanota includes this)
  • You want free encrypted email option
  • You prefer open-source email service
  • You want anonymous registration (no phone number)

Think twice if:

  • You need to email people who don't use Tutanota ( limited)
  • You want the cheapest email (free tier has limitations)
  • You need extensive storage (free tier has limited storage)
  • You want email that works exactly like Gmail
  • You need IMAP/POP3 support (Tutanota uses proprietary protocol)

Overview

Tuta (formerly Tutanota) is a Germany-based email provider that emphasizes end-to-end encrypted mailboxes and clients. It encrypts mailbox content and, in many cases, more of the email interface than traditional providers. Transport encryption

(TLS) protects connections, and client-side cryptography is used to reduce provider access to content.

Operational notes: Tuta uses its own approach for encrypted mail and may not support full IMAP/POP access because those protocols would typically require exposing plaintext to external clients. This can be a privacy advantage but may limit interoperability. Metadata

and deliverability constraints of email still apply, especially for emails to or from non-Tuta recipients.

Privacy highlight

This score will be updated after a full review.

Quick facts

Country:
🇩🇪 Germany
Pricing:
Free
Platform:
Web, Android, iOS, Desktop
Technical:
Beginner
:
Yes
:
Minimal telemetry
:
No
Open-source status:
Partially open source
:
No
:
Yes

Key features

  • End-to-end encrypted mailbox and apps
  • Password-protected encrypted emails to non-users (feature-dependent)
  • Designed to minimize and ads
Security & encryption Click to expand
Yes
Encryption protocols
AES-256, RSA-2048, x25519, CRYSTALS-Kyber-1024
keys are generated in the client and protected by your password. Mailbox and decryption happen client-side, so the provider is designed not to have access to message content. Because of this approach, some traditional protocols (like IMAP/POP) may be limited or not supported.
Offline support
Yes
Telemetry & tracking Click to expand
Minimal telemetry
No
Ip no
Describe the pipeline here once you have confirmed the implementation.
Jurisdiction & compliance Click to expand
Germany.
Content is retained until deletion/account closure. Minimal service and security logs may be retained for operational reasons; exact windows vary.
Legal frameworks
GDPR; German Federal Data Protection Act (BDSG).
Revenue sources
Subscription, Freemium
Editorial signals Click to expand
84
Trust score
88
Trust breakdown (0–10)
Encryption: 92, Audits: 70, Open source: 80, Telemetry: 90, Jurisdiction: 75, Transparency: 85, Trackers: 90
Editorial notes
Usability: 7, Performance: 8, Family friendly: 8
User experience Click to expand
Signup requirements
Describe exact signup and identity requirements here.
Onboarding difficulty (1-5)
1
Accessibility features
Add technical accessibility details after testing.
Backup & portability Click to expand
Yes
Migration tools
Import tools (contacts/mail where supported); account migration is typically simpler when moving from a standard IMAP provider.
2FA recovery codes; account recovery depends on the recovery options configured at signup.

Similar privacy apps

Same category

Proton Mail

Score 88

Proton Mail offers a privacy-conscious alternative in the email space, with a stronger focus on data protection than ...

StartMail

Score 70

StartMail offers a privacy-conscious alternative in the email space, with a stronger focus on data protection than ma...

Mailbox.org

Score 75

Mailbox.org offers a privacy-conscious alternative in the email space, with a stronger focus on data protection than ...