Could somebody recommend me a reliable and safe email service to use instead of Google and Microsoft ones?
from ArchmageAzor@lemmy.world to privacy@lemmy.ml on 09 Nov 22:03
https://lemmy.world/post/38573753

#privacy

threaded - newest

JASN_DE@feddit.org on 09 Nov 22:05 next collapse

Define “safe”?

ArchmageAzor@lemmy.world on 09 Nov 22:09 collapse

Like, preferably not spied on like with Gmail or whatever the MS one is.

solrize@lemmy.ml on 09 Nov 22:08 next collapse

I’ve been using fastmail.com for a long time and am satisfied, though it’s on the expensive side and I haven’t looked into every alternative.

If you want cheap email hosting for your own domain, mxroute.com has been around for a while and cranemail.com is new, but both are small companies run by people who know what they are doing (online acquaintances of mine if that matters).

[deleted] on 09 Nov 22:23 next collapse

.

antithetical@lemmy.deedium.nl on 09 Nov 22:34 next collapse

For my own domains I’m using Migadu since they support unlimited domains per account. Quite happy with them…

solrize@lemmy.ml on 09 Nov 22:48 collapse

Yes, I forgot Migadu. I played with it a little and it was nice, though I think it costs more now.

[deleted] on 10 Nov 00:14 collapse

.

solrize@lemmy.ml on 10 Nov 00:31 next collapse

I wonder if any comparable services don’t re-use the address when it’s on the service’s domain, maybe after a grace period. I use fastmail mostly for my own domains though I do have some addresses on theirs. Certainly if you let a domain expire, the registrar will sell it to someone else. Seems similar.

Someone once offered me a nice chunk of cash for one of my domains. I might have accepted it if they didn’t want the domain handed over immediately. It’s a domain I receive some email through, so would have wanted a shutdown period to prevent at least some of the email for ending up with the domain’s new owner.

popcornpizza@lemmy.blahaj.zone on 10 Nov 02:34 collapse

deleted

quoll@lemmy.sdf.org on 10 Nov 06:19 collapse

That’s the most absurd thing an email service can do,

that’s how i lost my first hotmail address 😢

[deleted] on 10 Nov 06:32 collapse

.

timmytbt@sh.itjust.works on 09 Nov 22:12 next collapse

Have a look at Proton and Tuta (used to be Tutanova)

GreyCat@lemmy.world on 10 Nov 01:42 collapse

Used to be Tutanota*

timmytbt@sh.itjust.works on 10 Nov 05:45 collapse

Oops. Correct 👍

sidebro@lemmy.zip on 09 Nov 22:13 next collapse

I’ve been using Tuta for almost two years now and I can’t recommend it enough. It’s really good. Check out tutanota@lemmy.world or https://tuta.com/

It’s hosted in Germany and is very privacy-focused

GlenRambo@jlai.lu on 10 Nov 21:45 collapse

Were some people concerned with Germany hosting and the way the right leaning party (Germany for Germans?) was gaining popularity? And something about their data views. Although maybe I was wrong.

From whwat I see though mailbox and posteo are the same.

PiraHxCx@lemmy.ml on 09 Nov 22:16 next collapse

Afaik, Proton and Tuta are the only free ones with zero-knowledge encryption

Lyra_Lycan@lemmy.blahaj.zone on 09 Nov 23:40 collapse

Proton allows only one free email address, which is what taught me to be wary of unexpected restrictions on services. I’ve got to say the only one I trust fully is my own, with complete certainty of security and features are all only limited by the hardware. Whenever someone talks about paying per month to get more addresses, aliases, calendar or storage - nah. Self-host. DuckDuckGo email is a good firewall layer as well - it forwards all mail to your chosen actual address after trying its best to strip the mail of trackers.

PiraHxCx@lemmy.ml on 09 Nov 23:44 next collapse

Login into Proton-Pass for 10 free aliases… but, it doesn’t require your ID or anything to create an email, you can create how many you want :S

aev_software@programming.dev on 11 Nov 14:26 collapse

You can create as many free email accounts with ProtonMail as you like.

Proton now is a non-profit but their employees still need salary. Throw them a couple bucks if you like their service.

Do that with anyone whose services you enjoy. That’s how you help them survive.

Feddinat0r@feddit.org on 09 Nov 22:17 next collapse

I am using mailbox.org for years now.

Cricket@lemmy.zip on 09 Nov 23:35 collapse

One thing to consider about mailbox.org is that if you don’t use your own custom domain and keep an @mailbox.org address (which afaik is considered a best practice for privacy because it lets you “hide” in the crowd), if you decide to move on later they will make your old address available to others later.

TheAgeOfSuperboredom@lemmy.ca on 09 Nov 22:23 next collapse

I’ve started using Disroot recently and I’m satisfied so far.

glitzer_gadze@feddit.org on 09 Nov 22:32 next collapse

www.Posteo.de

Cricket@lemmy.zip on 09 Nov 23:38 collapse

I considered them, but had a problem with two things about them: they both a) don’t allow custom domains (which is fine for privacy) and b) recycle email addresses, meaning that if you move on later they will make your old email address available to others.

Lyra_Lycan@lemmy.blahaj.zone on 09 Nov 23:48 next collapse

That’s going to be very interesting with persistent spam senders.

fodor@lemmy.zip on 11 Nov 08:38 collapse

The security risk is the problem, right? If you can get a a new password sent to an email address for the person who owned it before you, that’s an interesting attack vector.

TurkeyDurkey@piefed.world on 10 Nov 00:49 collapse

I use posteo and simplelogin together.

Cricket@lemmy.zip on 10 Nov 03:47 collapse

Posteo seems fine if you use a custom domain. If not, they have the same issue of recycling email addresses, like mailbox.

StrawberryPigtails@lemmy.sdf.org on 09 Nov 22:38 next collapse

I’ve been usingPrivate Email for the last few years. Run by NameCheap, I think. Got the account same time as my domain. No complaints so far. Haven’t heard anything troubling about them either.

It has a web ui if that’s your thing, but I’ve never used it.

Jerry@feddit.online on 09 Nov 22:39 next collapse

Proton Mail, Tuta mail, runbox.com, to name three.

rammjet@lemmy.world on 09 Nov 22:50 next collapse

I can’t attest to privacy, but I have used Zoho for years with my domains.

Tenderizer78@lemmy.ml on 09 Nov 23:38 next collapse

Proton Mail is good, just don’t use the paid version of any Proton service. The paid version will delete your email address if you don’t keep up with payments.

You can get a lifetime subscription to Proton Pass sometimes, and that’s what I did. I suspect that may protect my account from deletion due to inactivity if I’m picked up by ICE or hit by a car and put in a coma (just examples, I’m not American). I’m not sure if it has that effect though.

pika@lemmy.today on 10 Nov 03:48 collapse

The paid version will delete your email address if you don’t keep up with payments.

I emailed them a little over a year ago about this because the terms of service were unclear. I was told by support that my main address wouldn’t be deleted, but I would be moved down to the free tier in every way – so I would lose my extra addresses and aliases, as well as extra storage space. I was also told that there was a 30-day grace period in case my renewal payment didn’t go through for some reason.

Tenderizer78@lemmy.ml on 10 Nov 07:14 collapse

I’ve looked up so many email providers that I may have got the terms of services mixed up.

Lyra_Lycan@lemmy.blahaj.zone on 09 Nov 23:49 next collapse

EMAIL PROVIDERS:

  1. Posteo - Their choice of domain
  2. Mailbox - Custom domain, free trial
  3. Runbox - Custom domain, free trial

DEFINITELY FREE TIERS:

  1. Tuta - Focused on security and resisting influence, but incoming mail can only be accessed by the Tuta client (because of their e2ee)
  2. GMX - Apparently has ads
  3. Zoho - Business focused
  4. Proton - Feels walled garden-esque, has one email for free, may cooperate with governments
TheFeatureCreature@lemmy.ca on 09 Nov 23:55 next collapse

Been with Posteo for years now. They’re very solid.

cRazi_man@europe.pub on 10 Nov 01:50 collapse

I’ve been with Mailbox for years now too. Also very solid.

majster@lemmy.zip on 10 Nov 10:49 collapse

I’m using runbox with custom domain. No issues.

4am@lemmy.zip on 10 Nov 00:37 next collapse

Don’t Proton just get caught revealing a French activist’s IP address to authorities? Might stay away from that one for now.

superglue@lemmy.dbzer0.com on 10 Nov 01:03 next collapse

Proton is not what you want to use if you are trying to hide from the government but if you are trying to starve google of your data its a solid option.

ChaosSpectre@lemmy.zip on 10 Nov 01:07 next collapse

This happened years ago afaik, but lemmy keeps sharing it around for some reason.

For context, proton encrypts the traffic, not the IP Address. While I dont remember how long IP Addresses stay in their logs, you can easily avoid exposing your true IP address by using a VPN, which is clearly not what that acitvist had done.

Proton is still compelled to follow government laws in order to operate, and will hand over what info they have when compelled to. If that info is something their service can encrypt, such as emails, cloud storage, passwords, and so on, then it will look like jumped data when handed over. You IP address can’t reasonably be encrypted, and neither can your primary email that is associated with you proton account. If your primary email has revealing info, then thats on you for not obfuscating it more. If you arent using a VPN to access services, then your IP address will be indicative of where your traffic might be coming from. The end user does need to take extra steps to make sure their traffic is secure, and proton does talk about this in their documentation.

Proton is one of very few companies Ive seen pass third party security audits. They may not be perfect, but they are secure, and I’ve yet to see that truly disproven.

PiraHxCx@lemmy.ml on 10 Nov 04:10 next collapse

Mullvad processes all its VPN data directly in RAM, so it’s constantly rewritten and no data is saved because there isn’t even a disk for it… I wonder if it would be possible for Proton (or any other privacy-focused service) to do the same with all its services. They already don’t keep logs, but in that case they were ordered to keep them because they had the means to do it. If they weren’t physically capable of doing it, what would happen? I don’t think a court could force them to rework their infrastructure just for that (considering how expensive it would be).

Doomsider@lemmy.world on 10 Nov 09:23 collapse

Proton claimed there was no way to appeal, but Swiss law is not bound by Interpol. I think what it really amounts to is they are not going to protect their users. This is why you don’t pay for let alone use a corporation’s services unless you willing to give up your privacy.

Proton is not your friend, they have and will continue to betray their users. Do not trust them or any corporation that is not willing to fight for their users.

ChaosSpectre@lemmy.zip on 10 Nov 10:13 collapse

Operating in other countries means you do need to follow their laws in order to operate in them. Being a swiss company doesnt make them exempt from the laws of other countries, and not complying risks them losing business in other countries. Their products do work, but the user needs to use them correctly to not put themselves in a position where they can be traced. The activist clearly wasnt using a vpn when accessing their email.

I do agree, dont trust proton, never trust any corporation, but i also know enough about how their tech works and how to manage my own online privacy that I know they arent just blowing smoke. I would much rather have proton comply with the law and continue to be accessible for most of the world, than have them fight for a single user who could have done more to protect themselves and potentially lose the ability to run their services for other countries. Most people arent self hosting, so they cant run their own secure services. Proton is a much better option than the fascist bowing corpos who run most of the tech world. Until self hosting becomes accessible for regular people, I will continue to recommend proton as the easiest option to have secure services with.

Doomsider@lemmy.world on 10 Nov 16:17 collapse

Corporations can and do fight for their users. Proton is not one of these companies. I think that says all we need to know about their commitments to their users. You are welcome to continue leading people to a business that have shown that they are not willing to do what is right because profit is their primary motivation.

Zerush@lemmy.ml on 10 Nov 01:59 collapse

Any webservice, like mail, cloud services and social platform, as even eg, Lemmy and other online platform, is forced to reveal the user data they have, if there is an court order a cause of an criminal investigation. Proton can’t in this case evade the info they have, it is the IP and the account data, content of the mail is encrypted, so they can give only encrypted data in this case.

This has nothing to do with privacy rights, this protect the privacy only from access of private data without an court order in the EU. In the same case as with this activist, also Tuta, Murena and any other private mail service would have done exactly the same thing as Proton.

If you are searched by law, never is a good idea to create an account anywhere. Drug barons use pen and paper for communication because of this.

DieserTypMatthias@lemmy.ml on 10 Nov 06:43 collapse

Mind you that Switzerland is not in the EU.

Zerush@lemmy.ml on 10 Nov 11:15 collapse

Well, it’s not in the Eurozone, but it’s strict with the EU Privacy laws, in Europe it’s only the Vatican out of the EU, only in the Eurozone for practical reasons.

DieserTypMatthias@lemmy.ml on 10 Nov 11:27 collapse

I know that they’re in the EEA though.

Zerush@lemmy.ml on 10 Nov 11:39 collapse

The Vaticane don’t fullfit the conditions to be an EU member, they have not signed the Declaration of Human Rights, nor have they officially condemned torture and the death penalty.

liliumstar@lemmy.dbzer0.com on 10 Nov 00:57 next collapse

Purelymail. Really good and cheap it all you need is email. No extra cost to bring your own domain.

thedeadwalking4242@lemmy.world on 10 Nov 02:03 next collapse

Tuta mail

DieserTypMatthias@lemmy.ml on 10 Nov 06:41 next collapse

Proton mail.

conspiracypentester@lemmy.world on 10 Nov 07:02 next collapse

Soverin

hexagonwin@lemmy.sdf.org on 10 Nov 07:05 next collapse

using disroot for a few years now, they’re very reliable.

Libb@piefed.social on 10 Nov 07:34 next collapse

‘Safe’ is a bit too vague: what are you looking for?

  • If you just need an email that doesn’t belong to GAFAM and is not subjected to US privacy-less laws but need no extra security (no end to end encryption): Infomaniak KSuite(Swiss) is available both as a free plan (20GB email + 15GB Cloud free) and as a paid version (unlimited email storage and 1To Cloud). They also offer just the email, if you don’t need cloud: Kmail ;) . There is also mailbox.org (Germany)
  • End to end encryption: Tuta (German), Proton (Swiss).

Edit: moved mailbox out of the E2EE section.

UnsavoryMollusk@lemmy.world on 10 Nov 09:12 collapse

Tuta is German no?

ashughes@feddit.uk on 10 Nov 10:02 next collapse

Yes

Libb@piefed.social on 10 Nov 10:15 collapse

Thx (to both of you), edited my post to reflect that. I was convinced they were French.

UnsavoryMollusk@lemmy.world on 10 Nov 12:30 collapse

No worries, I was fully ready to discover they were French

Core_of_Arden@lemmy.ml on 10 Nov 07:41 next collapse

Find a local mail-hotel, buy your own domain, and set it up…

herseycokguzelolacak@lemmy.ml on 10 Nov 08:40 next collapse

proton.me is not bad.

mistermodal@lemmy.ml on 10 Nov 09:19 next collapse

Stop posting protonmail you bozos, what kind of person only needs a single email tied to a phone number? Preposterous. I won’t even bother bringing up them putting some idiot climate activists in jail since I know “privacy” to redditors means posting about GDPR and turning your brain off

Tuta is allegedly okay (we’re not international drug traffickers so we can pretend other (European) people’s computers are trustworthy bc we don’t need them to be usually) but it doesn’t have imap, so you just use it as the recovery email and then use some other generic free disposable privacy email w imap

icelimit@lemmy.ml on 10 Nov 10:45 next collapse

But proton doesn’t need a phone number? You can just do a captcha. I would never use an email that asks for a phone number. Or even a phone.

mistermodal@lemmy.ml on 10 Nov 10:50 next collapse

They began demanding my phone number after I signed up without it. Not sure why. Was years ago tho

That’s the same trick discord pulls btw it’s shady

icelimit@lemmy.ml on 10 Nov 11:45 collapse

I wonder if it’s by region. Are you outside EU?

matron1049@lemmy.dbzer0.com on 10 Nov 13:15 collapse

They want your IP or your phone. Use a VPN IP or TOR and they’ll require a phone number. That’s been my experience at least. I don’t trust them.

icelimit@lemmy.ml on 10 Nov 13:32 collapse

Hmm. That’s not been my experience. I’ve been using proton with VPN with no issue. But yes, as you say, if that’s your experience, it’s shady. I would stay away from them were I in your shoes.

FosterMolasses@leminal.space on 10 Nov 11:43 collapse

Stop posting protonmail you bozos, what kind of person only needs a single email tied to a phone number?

And this is before even getting into their recent scandal with their VPN service.

I won’t touch that shit with a 39 ^1^/~2~ft poleeee~🎵

mistermodal@lemmy.ml on 10 Nov 11:49 next collapse

Lol i didnt even hear abt it im running off old animosities 😌

Corridor8031@lemmy.ml on 10 Nov 12:37 collapse

What scandal?

greasewizard@slrpnk.net on 10 Nov 13:19 collapse

the French government used interpol to request the swiss government to request proton to hand over the ip address of a French climate activist

Corridor8031@lemmy.ml on 10 Nov 14:04 collapse

is this the 2021 incident? i heard about that, i thought something new was ment

(Rant) But kind telling that everytime i hear about stuff like this it is somehow an activist who fights for climate change or like in italy with the whatsapp spyware, people who save refugees in the open sea.

And not the mass murder terrorists or child rapists they claim the survailance tools will be used on.

greasewizard@slrpnk.net on 10 Nov 18:45 collapse

I feel like this was more recent, but it could be that I read it recently. Theres an official response from proton regarding this incident if you want to learn more about the situation.

One benefit of using proton is because your emails live in Switzerland and your data is subject to their laws around data privacy. From what I know, that doesn’t protect you from criminal investigation, but it does protect your data from non government agency requests and data brokers.

The climate activist I’m referring to was squatting in high rises as protest, which is against the law in france. France used interpol to communicate with the swiss government in order to get more information about their suspect. The official response from proton covers more about this incident, and I think it’s likely they had no idea what this climate activist was doing.

Privacy unfortunately does not mean youre free to commit crimes, or even that your personal info is safe from police inquiry. That is anonymity, not privacy.

Although I don’t agree with protons decision to remove wording around logging IPs in their terms of service, it’s disingenuous to think that proton is somehow complicit and is “tracking down activists”. From my perspective, they were following the law, as messed up as the law is.

procapra@lemmy.ml on 10 Nov 10:44 next collapse

I use Disroot. Idk if sign-ups are always open though.

Zerush@lemmy.ml on 10 Nov 11:30 next collapse

Tuta

Murena Workspace

Corridor8031@lemmy.ml on 10 Nov 12:38 next collapse

tuta mail or mailbox.org are the answer

Not proton the ceo is a right wing guy.

chaoticnumber@lemmy.dbzer0.com on 10 Nov 12:59 next collapse

If you want to use clients other than a webmail tuta wont fit your needs. But, to that end, try both, they are both excellent in their own ways, see what suits you.

PracticalFail@feddit.org on 10 Nov 17:18 next collapse

mailbox.org is a treasure, signed up for mail but it’s so much more useful than that. It’s a true replacement for me of what Google and Microsoft offers additionally to mail.

ScoffingLizard@lemmy.dbzer0.com on 16 Nov 20:37 collapse

There was no conclusive evidence that he was right wing. He only said he was lobbying with Republicans because they were the only ones who were responsive to his interests.

northernlights@lemmy.today on 10 Nov 19:03 next collapse

i’ve been using purelymail.com since the google domains price hikes. They’re cheap and I never had a problem.

Cricket@lemmy.zip on 10 Nov 19:04 next collapse

I’m far from a privacy expert, but here are some things that I have been considering while researching this for myself:

  • Zero-knowledge encryption providers like Proton and Tuta are great for privacy at the expense of convenience, like possibly not being able to use common IMAP email clients. Proton has a bridge app for their paid plans that allows this on Windows and Mac but not Linux or mobile, and last time I checked, Tuta doesn’t have this on any platform. This means that your email can only be accessed from their client, and more importantly, if a bridge app is not available for your provider on your preferred platform, all your email will be stuck in your mailbox forever with no ability to archive locally.
  • What are the privacy, security, and law enforcement/intelligence cooperation policies of the provider and country where the provider’s legal entity and IT infrastructure are located? If located in a country with bad policies, spying on your email is much easier, especially if it’s not a zero-knowledge encryption provider.
  • While using the provider’s own domain for your address is better than using a custom domain, most providers appear to have a policy of making your address available to others after you leave them. Mailbox, Posteo, and Fastmail do this. One of the only providers I’ve found that has a policy of not doing this is Runbox.
  • Does the provider have a good reputation for email deliverability? This is a tricky one that requires some research. First, look at the provider’s DMARC policies with a tool like DMARC Check Tool. Mailbox and Runbox appear to pass all tests, but Posteo and Fastmail fail the DMARC quarantine/reject policy test, which apparently makes it easier to spoof your email and could make your emails less likely to be delivered. Also search the web for comments on users’ experience with email delivery, like “<provider name> email delivery issues”, to find out what people have said.
chonomaiwokurae@sopuli.xyz on 10 Nov 19:50 collapse

Proton bridge is available for Linux as well.

Cricket@lemmy.zip on 10 Nov 21:07 collapse

Thanks for the correction, I didn’t see it mentioned on their page. I’ve edited my post.

Kakertratte@feddit.org on 10 Nov 21:41 next collapse

thatoneprivacysite.xyz

zeca@lemmy.ml on 11 Nov 02:04 next collapse

Not a recomendation… i just like to recall that it seems pointless to me to use a private/secure mail provider just to end up communicating with gmail users. There are other private/secure means of communication over the internet, just not so much through emails.

confuser@lemmy.zip on 11 Nov 14:34 next collapse

Nobody mentioning fastmail…sad times

bluecandy1240@lemmy.blahaj.zone on 11 Nov 14:55 next collapse

Proton mail

mattyroses@lemmygrad.ml on 11 Nov 15:27 collapse

Been using this for years. Best thing is to get your own domain, that way if you later switch providers, you keep your email.

beeb@lemmy.zip on 11 Nov 16:32 collapse

Been using my domain email more and more for that reason, and the setup with Proton was quite easy, integration is great too. I even set it up with Pass to generate privacy aliases on a subdomain of my domain.

Mobile@leminal.space on 11 Nov 15:16 collapse

Late to the thread but I use startmail