We would like to count page views and clicks with Google Analytics, which sets cookies in your
browser. It is how we learn which pages are worth writing. Nothing loads until you choose, and
declining costs you nothing on this site. What we collect.
Your email address is the recovery key to every other account you own, which makes the mailbox a bigger target than anything in it. The question that decides this ranking is simple: if someone compels your provider, what can it actually hand over? For two of these the answer is almost nothing. For one of them it is everything, and that one has the best apps.
Proton Mail78 The default answer, and the only provider here that pairs zero-access storage with a full ecosystem: encrypted calendar, drive, password manager and VPN on one Swiss non-profit account.
Tuta75 The most thoroughly encrypted mailbox in the category — subject lines included, which Proton does not do — fully open source on both client and server, shipping post-quantum encryption ahead of everyone else, and cheaper than Proton at every tier with no renewal increase.
MB
Mailbox.org58 The best value in the category and the most practical for anyone who lives in a real mail client.
Swiss, non-profit-controlled, and the default answer for most people leaving Gmail.
78
Owner
Proton Foundation
Jurisdiction
Switzerland · Outside the alliances
No-logs audit
None — apps audited by Securitum, 2024
Price
from $2.99/mo · ~$4.49/mo over 3 yrs after renewal
Runs oniOSAndroidMacWindowsLinuxRouterBrowserTV
The default answer, and the only provider here that pairs zero-access storage with a full ecosystem: encrypted calendar, drive, password manager and VPN on one Swiss non-profit account. Its clients are open source and audited by Securitum, and it accepts cash and cryptocurrency. It has also lost a case and disclosed it, which tells you more than a perfect record would.
IMAP and SMTP need the paid Bridge app on desktop, and a 2021 Swiss order compelled it to log one account's IP address.
Privacy & trust
78
Features
100
Price & renewal
74
App quality
64
Swiss non-profit ownership, outside the intelligence alliances
Zero-access storage: Proton cannot read stored mail
Open-source clients audited by Securitum
IMAP and SMTP require the Bridge app, on paid plans only
A 2021 Swiss order compelled it to log an account IP address
German, open source, and the only one that encrypts the subject line too.
75
Owner
Tutao GmbH
Jurisdiction
Germany · Fourteen Eyes
No-logs audit
None — apps audited by Independent third party, 2024
Price
from $3.25/mo
Runs oniOSAndroidMacWindowsLinuxRouterBrowserTV
The most thoroughly encrypted mailbox in the category — subject lines included, which Proton does not do — fully open source on both client and server, shipping post-quantum encryption ahead of everyone else, and cheaper than Proton at every tier with no renewal increase.
No IMAP or SMTP at all, by design, so you must use its apps. Germany is inside the Fourteen Eyes, and a 2020 court order compelled monitoring of one account.
Privacy & trust
68
Features
92
Price & renewal
92
App quality
67
Encrypts subject lines and the whole mailbox, not just message bodies
Fully open source, clients and server
Post-quantum encryption shipping ahead of the field
No IMAP or SMTP at all, by design — you must use its apps
Germany is inside the Fourteen Eyes
A 2020 court order compelled monitoring of one account
Lab test pending — scored on public dataiOS app score 67/100 from 3,570 ratingsFull reviewVisit Tuta
3
MB
Mailbox.org
A full German office suite for €1 a month, with PGP done properly.
58
Owner
Heinlein Support GmbH
Jurisdiction
Germany · Fourteen Eyes
No-logs audit
None found
Price
from $1.00/mo
Runs oniOSAndroidMacWindowsLinuxRouterBrowserTV
The best value in the category and the most practical for anyone who lives in a real mail client. €1 a month buys full IMAP and SMTP, a mailbox that can be encrypted at rest with your own PGP key, and an office suite with calendar and storage attached. Run by a Berlin company that has kept mail servers running since 1992.
No end-to-end encryption by default — PGP must be set up — and no mobile apps of its own.
Privacy & trust
50
Features
48
Price & renewal
98
App quality
—
Full IMAP and SMTP, so any mail client works
Encrypted mailbox with a PGP guard extension that encrypts incoming mail at rest
Office suite, calendar, contacts and cloud storage included
No end-to-end encryption by default; PGP must be set up
No mobile apps of its own — you use a standard mail client
€1 a month, anonymously payable in cash, and deliberately without custom domains.
53
Owner
Posteo e.K.
Jurisdiction
Germany · Fourteen Eyes
No-logs audit
None found
Price
from $1.20/mo
Runs oniOSAndroidMacWindowsLinuxRouterBrowserTV
The one you can buy anonymously. €1 a month, payable by sending cash in an envelope, with no name required at signup, inbound mail encrypted at rest with your PGP key, and a company that has fought German surveillance orders in court and won. Nothing else here combines those.
No custom domains, ever, which is a deliberate design choice that rules it out for many people. No apps of its own.
Privacy & trust
54
Features
48
Price & renewal
90
App quality
—
Anonymous signup and cash payment by post
Inbound mail can be encrypted at rest with your PGP key
Full IMAP, SMTP and encrypted calendar
No custom domains, ever — a deliberate design choice that rules it out for many
No end-to-end encryption by default
No apps of its own
Lab test pending — scored on public dataVisit Posteo
5
Fastmail
The best mail app in the category, from a company inside the Five Eyes with no end-to-end encryption.
49
Owner
Fastmail Pty Ltd
Jurisdiction
Australia · Five Eyes
No-logs audit
None found
Price
from $3.00/mo
Runs oniOSAndroidMacWindowsLinuxRouterBrowserTV
The honest outlier: no end-to-end encryption, no zero-access storage, and by a distance the best mail client in this comparison. Employee-owned, twenty-five years old, excellent aliasing and masked email, full IMAP and CalDAV. If your threat model is advertising surveillance rather than legal compulsion, it is the most pleasant product here.
Fastmail can read your mail, and Australia is a Five Eyes country with compelled-access legislation the company itself publicly warned against.
Privacy & trust
34
Features
34
Price & renewal
93
App quality
64
The fastest and best-designed web mail client of any provider here
Excellent aliasing, masked email and rules
Full IMAP, SMTP, CalDAV and CardDAV
No end-to-end encryption and no zero-access storage — Fastmail can read your mail
Australia is a Five Eyes country with compelled-access legislation
No anonymous signup, no crypto payment
Lab test pending — scored on public dataiOS app score 64/100 from 572 ratingsVisit Fastmail
Not unsafe, but hard to recommend: a US advertising technology company holds a significant stake in the group behind it, it is closed source, it has no mobile apps or encrypted calendar, and at around $5 a month it costs five times what Posteo or Mailbox.org charge for more.
What we weighed for encrypted email, and the exact weights
What the provider can hand over
Zero-access storage means the provider holds a blob it cannot read. Without it, a court order produces your mail. This is the single most important difference between these products.
Jurisdiction, and its record
Switzerland, Germany and Australia behave differently under legal pressure, and several of these companies have actually been tested. We weigh what happened, not what the marketing says.
Whether it works with a normal mail app
Zero-access encryption and IMAP are in tension. Providers resolve it differently, and the resolution determines whether you can keep using Thunderbird or Apple Mail.
Price, including at renewal
This category ranges from €1 a month to $5 a month for broadly similar things, and some providers raise the price after the first term while others never have.
Weights on this page: Privacy & trust 36% · Features 24% · Price & renewal 14% · App quality 14% · Support & refunds 12%. Formula.
The question that decides this ranking
Not “is it encrypted” — everything is encrypted in transit, including Gmail. The question is what your provider can produce if a court asks.
Zero-access storage means the provider stores your mailbox encrypted with a key derived from your password, which it does not hold. It can produce a blob. Proton, Tuta and Posteo work this way, and Mailbox.org can with its PGP guard.
Ordinary storage means the provider can read your mail, and therefore so can anyone who compels it. Fastmail and StartMail work this way, as do Gmail, Outlook and every free provider.
Both models are legitimate; they defend against different things. But the difference is enormous and it is routinely blurred by marketing that says “encrypted” and means “over TLS, like everybody”.
What actually happened when these providers were tested
Three of them have been, which is unusual and useful.
Proton, 2021. A Swiss court compelled it to log the IP address of one activist’s account. It complied, then disclosed it and changed its onboarding language. Message content was never produced, because it could not be. The case is often cited as a failure; read properly it is the clearest demonstration in the industry of exactly where the boundary sits.
Tuta, 2020. A German court ordered it to provide access to future mail in one account. It complied, criticised the ruling publicly, and responded by encrypting more so that less could be compelled next time.
Posteo, 2016. It challenged the scope of a German disclosure order and won at the constitutional level, narrowing what small providers can be forced to give up.
A provider that has never been tested is not safer than these. It is untested.
Price, which is not what people expect
Posteo and Mailbox.org cost €1 a month. Tuta is about €3. Proton Plus is about $4.49 on a two-year plan, rising at renewal. Fastmail is $5. StartMail is $5.
The two cheapest are also the two run by small German companies with long operating histories and no venture funding — which is the same pattern that puts Mullvad and IVPN at the top of the VPN privacy list. Nobody is buying customers, so nobody needs to recover the cost.
Migrating without losing anything
The practical blockers, in order: whether IMAP works, whether you can bring a custom domain, and whether the provider imports from Gmail. Proton and Tuta both have import tools. Custom domains work everywhere except Posteo, which refuses them deliberately. If you use a custom domain you can move providers later without changing your address, which is the single best reason to set one up before you need it.
What we have not tested
Deliverability — whether mail from these providers reaches inboxes rather than spam folders — is the one thing that would most change this ranking, and we have not measured it. Nor have we tested import fidelity or search performance over encrypted mailboxes. Those are the obvious next steps, and until they land this page relies on documentation, court records, published audits and pricing.
A question mark means we have not confirmed the feature, not that it is missing. Hover a feature name for what it means.
Everything else we track, on this page's weighting
#
Name
Score
Owner
Jurisdiction
Main drawback
6
StartMail
56
Startpage B.V. group
Netherlands
A US advertising technology company holds a significant stake in the group
Frequently asked questions
What is the most secure email provider in 2026?
Tuta encrypts the most — including subject lines — and is fully open source. Proton Mail encrypts nearly as much, is Swiss and non-profit controlled, and has a far larger ecosystem around it. For most people Proton is the better product and Tuta the more thorough encryption, and either is a large improvement on Gmail.
Is encrypted email actually end-to-end encrypted?
Only between users of the same provider, or when both sides use PGP. Mail to a Gmail address leaves the provider's boundary and is encrypted only in transit. What Proton and Tuta really guarantee is zero-access storage: mail sitting in your mailbox cannot be read by the provider, even under compulsion. That is the property that matters, and it is worth being precise about it.
Can Proton Mail be forced to hand over my emails?
It can be compelled to hand over what it holds, and what it holds for stored mail is an encrypted blob it cannot read. In 2021 a Swiss court compelled it to begin logging the IP address of one account, which it did and then disclosed — an important case, because it shows the limit precisely: metadata could be compelled going forward, message content could not be produced.
Why does Fastmail rank at all if it has no end-to-end encryption?
Because a ranking that only measured encryption would be dishonest about what most people are choosing between. Fastmail's threat model is advertising surveillance and Big Tech data collection, and against that it is excellent — no ads, no profiling, employee-owned, and the best mail client here. Its card says plainly that it can read your mail and that Australia is a Five Eyes country.
Do I lose IMAP if I switch to encrypted email?
With Tuta, yes, entirely and by design. With Proton, you need the Bridge app on desktop and a paid plan. With Mailbox.org, Posteo, Fastmail and StartMail, IMAP works normally. If you rely on Thunderbird, Apple Mail or Outlook, that constraint should probably decide your shortlist before anything else does.
Is it worth paying for email?
Free email is paid for with your data — Gmail's terms permit scanning for features and its parent's business is advertising. At €1 a month, Posteo and Mailbox.org cost less than a coffee a year and remove that entirely. This is one of the cheapest meaningful privacy changes available.
