What it actually does differently
Every provider in this category says it encrypts your email. Tuta encrypts more of it.
Message bodies are the easy part and everyone does them. Tuta also encrypts subject lines, the address book and the calendar, so what sits on its servers is a mailbox rather than a set of encrypted payloads wrapped in readable envelopes. Subject lines matter more than people expect: a list of them is often a serviceable summary of your correspondence, your medical appointments, your legal matters and who you bank with, with no message bodies required.
It is also fully open source on both client and server, which is a stronger position than the open-source clients most of this category offers, and it has shipped post-quantum encryption ahead of the field. Audits are on file from Cure53 in 2022 and an independent third party in 2024, both covering the apps.
That is the case for Tuta, and it is a serious one. Now the costs.
The interoperability problem
Tuta does not use OpenPGP. It uses its own encryption scheme.
This is the decision the whole product follows from. Standards-based mail encryption inherits the constraints of a format designed in the 1980s, which is why subject lines are outside the encrypted payload almost everywhere else. Building its own let Tuta encrypt the parts PGP leaves exposed and move to post-quantum primitives on its own schedule.
What it costs is interoperability, in two directions.
First, you cannot exchange encrypted mail with a PGP user the way PGP users expect. Mail leaving Tuta for a non-Tuta address either goes as ordinary unencrypted email, or as a password-protected link where the recipient reads the message on Tuta’s infrastructure using a secret you passed to them by some other channel. That mechanism is genuinely useful and it is not encrypted email, because nothing encrypted ever reaches their mailbox.
Second, and more disruptively for daily use, there is no IMAP and no SMTP at all. A conventional mail client has nothing it can read, so Thunderbird, Apple Mail and Outlook are out. Proton Mail addresses the same underlying tension with a Bridge app on paid plans, which is a compromise. Tuta declines the compromise.
If you live in a mail client, this alone should decide your shortlist, and our encrypted email ranking puts Mailbox.org and Posteo ahead for exactly that reader.
Ownership and the German problem
Tutao GmbH is founder-owned and has been operating since 2011, originally as Tutanota. Founder ownership is worth something concrete here: there are no investors requiring an exit, which is the mechanism that has consolidated most of the privacy market into the holding groups documented on our ownership explorer.
Germany is the complication. It is a Fourteen Eyes member, and unlike most jurisdictional concerns on this site, this one has already been tested. In 2020 a German court ordered Tutao to provide access to future emails in one account. The company complied, because it had to, and criticised the order publicly.
We take the same view of this as of Proton’s 2021 Swiss case. A tested provider tells you more than an untested one, and what both cases show is the same thing: jurisdiction determines whether you get an order, and encryption architecture determines what the order can actually extract. Tuta’s answer since has been to encrypt more, which is the only answer that works.
What it costs
| Plan | Intro | Renewal | True cost per month over 3 years |
|---|---|---|---|
| Free | $0 | $0 | $0 |
| Revolutionary, 1 year | $39.00 | $39.00 | about $3.25 |
| Legend, 1 year | $96.00 | $96.00 | about $8.00 |
The pricing is the quietly excellent part of this product. Nothing rises at renewal, which almost nothing else in this catalogue can say, and Revolutionary at $39 a year undercuts Proton’s Mail Plus both at introduction and, by a much wider margin, at renewal. A 30-day money-back guarantee applies. Cryptocurrency is accepted; cash is not, which is one place Proton Mail goes further.
The free tier gives 1 GB with one address and includes the encrypted calendar, which is more than most free encrypted mail tiers offer.
Features
Custom domains, aliases, encrypted calendar and contacts, anonymous signup, apps on iOS, Android, macOS, Windows, Linux and the browser. Zero-access storage, so what Tuta holds it cannot read.
The omissions are the ones already covered: no IMAP, no SMTP, no PGP. There is no ecosystem of adjacent products the way Proton has one, so if you want an encrypted drive, a password manager and a VPN on the same account, this is not that.
The iPhone app
Our App Store analysis used a sample of 100 recent reviews from the United States and Great Britain storefronts, against a listing rating of 4.72 stars from about 3,570 ratings.
The sample mean was 3.53 and sentiment was mildly positive and improving. The most common theme was iOS integration at 14 per cent, followed by interface and usability at 12 per cent, privacy concerns at 11 per cent, crashes at 9 per cent and billing or auto-renew at 8 per cent. The iOS integration figure is the one that fits the product: an app that cannot fall back on the system mail client carries the whole burden of the experience itself, and complaints about how it sits inside iOS are what you would predict from the architecture. A sample of 100 is small, so read the ranking of themes rather than the percentages.
Where it lands
The most thoroughly encrypted mailbox available, at the lowest sustained price in the category, from a founder-owned company that responded to being compelled by encrypting more. If those are your priorities, nothing else here competes.
The compatibility cost is not a detail you will get used to. No IMAP means no existing client, and no PGP means the encryption effectively stops at Tuta’s boundary for anyone you write to outside it. Decide on those two before you decide on anything else.
What we have not tested
We have not run our own hands-on testing of Tuta’s apps, its post-quantum implementation, or the password-protected message flow to external recipients. Our provider record flags ownership, jurisdiction and audit history as still needing a primary-source check, and neither audit entry carries a published report URL on file. The App Store figures are drawn from Apple’s public review feed, not from testing we performed.