Tuta

tuta.com
Tuta Icon

Free and open source email service based in Germany. It has a basic intuitive UI, secure native mobile apps and desktop email clients, anonymous signup, and an encrypted calendar. Tuta has a full-featured free plan and premium subscription plans allowing for custom domains (starting at $3/month). Tuta does not use OpenPGP like other encrypted mail providers, instead they use a standardized, hybrid method consisting of symmetrical and asymmetrical algorithms (with AES256, and RSA 2048 or ECC (x25519) and Kyber-1024). This causes compatibility issues when communicating with contacts using PGP. But it does allow them to encrypt much more of the header data (body, attachments, subject lines, and sender names etc) which PGP mail providers cannot do. The recent upgrades to Tuta's encryption algorithm makes data stored and sent with their service safe against attacks posed by quantum computers.

Open Source

Tuta Privacy Policy

Privacy Policy Summary

  • This service does not track you
  • Service does not allow alternative accounts
  • This service does not sell your personal data
  • The service does not share user information with third parties
  • The service is transparent regarding goverment request or inqueries
  • There is a date of the last update of the agreements
  • Provides information on security practices
  • You can request access and deletion of personal data
  • User-generated content is encrypted, and this service cannot decrypt it
  • Accessibility to this service is guaranteed at 99% or more
  • Archives of their agreements are provided so that changes can be viewed over time
  • You will be notified about website maintenance
  • You are prohibited from sending chain letters, junk mail, spam or any unsolicited messages
  • The service claims to be GDPR compliant for European users
  • The service is open-source
  • You authorise the service to charge a credit card supplied on re-occurring basis
  • The data retention period is kept to the minimum necessary for fulfilling its purposes
  • Features of the website are made available under a free software license
  • You can retrieve an archive of your data
  • The court of law governing the terms is in Hanover, Germany
  • The court of law governing the terms is in a jurisdiction that is friendlier to user privacy protection.
  • IP addresses of website visitors are not tracked

Score

A

Documents

Domains Covered by Policy

  • tutanota.com
  • tuta.com

About the Data

This data is kindly provided by tosdr.org. Read full report at: #157

Tuta Source Code

Author

tutao

Description

Tuta is an email service with a strong focus on security and privacy that lets you encrypt emails, contacts and calendar entries on all your devices.

#email#encryption#javascript#mithril#privacy#security#tutanota

Homepage

https://tuta.com

License

GPL-3.0

Created

28 Jul 14

Last Updated

26 Feb 26

Latest version

tutanota-release-331.260224.0

Primary Language

TypeScript

Size

265,038 KB

Stars

7,321

Forks

601

Watchers

7,321

Language Usage

Language Usage

Star History

Star History

Recent Commits

  • jenkins build server (24 Feb 26)

    v331.260224.0

  • jenkins build server (24 Feb 26)

    update translations

  • map (24 Feb 26)

    fix tests Co-authored-by: kib <104761667+kibibytium@users.noreply.github.com>

  • abp (23 Feb 26)

    do not do spam classification on mails from contacts

  • jhm (23 Feb 26)

    remove workCompleted log from EstimatingProgressMonitor.ts

  • jhm (23 Feb 26)

    adjust mail cap in SpamClassifierDataDealer.ts for mobile and webApp Reduce the amount of mails used for client spam classification training to improve training performance on mobile and webApp.

  • map (11 Feb 26)

    add SystemModelV144, add solutions partner settings screen Add new section for customers with SolutionsPartner Feature, which allows partners to open a link with their promotion-id, which assigns any created customer to this partner as managedByPartner under the CustomerInfo. The section also displays this list of assigned partnerManagedCustomers and some information of the customer, the company field may be used in the future again, right now it is deprecated. Co-authored-by: map <mpfau@users.noreply.github.com> Co-authored-by: abp <abp@tutao.de> Co-authored-by: sug <sug@tutao.de> Co-authored-by: das <das@tutao.de>

  • jhm (18 Feb 26)

    allow importing mail to shared mailboxes Improved importing UI to allow to select shared mailboxes and folders. Known issues: - Users can start one import per mailbox if they have multiple windows - If users have multiple inboxes, when one finishes, it does not display the next one immediately. Co-authored-by: das <das@tutao.de>

  • abp (17 Feb 26)

    drop the old spam classification model in case of a dimension mismatch Co-authored-by: das <das@tutao.de> Co-authored-by: Kinan <104761667+kibibytium@users.noreply.github.com>

  • map (17 Feb 26)

    reset application types when erroring out in LoginFacade Adds coverage for asyncResumeSession and initSession functions. Co-authored-by: kib <104761667+kibibytium@users.noreply.github.com>

  • abp (17 Feb 26)

    add TutanotaModelV105

  • abp (13 Feb 26)

    apply inbox rules for mails delivered to the spam folder by the server In case the server classifies a mail as spam and delivers it to the spam folder, but the mail is moved to the inbox folder by the client spam classifier, we were trying to apply inbox rules after classificaiton on the sourceFolder (spam), instead of moveToFolder (inbox). This caused us not to apply the inbox rules correctly in these scenarios. Co-authored-by: jomapp <17314077+jomapp@users.noreply.github.com>

  • abp (11 Feb 26)

    [sdk] handle AppTypesService response gracefully when there are new apps Co-authored-by: jomapp <17314077+jomapp@users.noreply.github.com>

  • abp (11 Feb 26)

    do not process entity events for unknown client types Co-authored-by: jomapp <17314077+jomapp@users.noreply.github.com>

  • abp (11 Feb 26)

    sort entity event listeners by priority In order to prevent mails from being moved around by inbox rules and spam classification even when the sync progress bar is finished, we introduce the priority concept we already have in SyncDoneListeners to EntityEventListeners. All listeners except the one in MailModel have NORMAL priority, while the one in MailModel has LOW priority, as that is the only listener that interacts with the ProgressMonitor. Co-authored-by: das <das@tutao.de>

  • kib (06 Feb 26)

    use case-insensitive lookup for suspension http headers Headers are lower cased in http2 but the app was doing a case-sensitive lookup for "Retry-After" and "Suspension-Time" Co-authored-by: das <das@tutao.de>

  • das (30 Jan 26)

    Adequately handle missed notification requests to avoid ip blocks. Multiple clients(desktop, ios, android) were ignoring the suspended status of requests, thus sending new requests even if they were under an active suspension. As the issue was mainly happening for missed notifications, this commit will handle it specifically for that route, causing clients to not send further requests for missed notifications if they are suspended. Since missed notifications fetch all notifications for one user from a point in time, new requests can also be ignored(ios, android), thus depending only on one request to be resent and properly obey the queue. Co-authored-by: kib <104761667+kibibytium@users.noreply.github.com> Co-authored-by: jhm <17314077+jomapp@users.noreply.github.com>

  • abp (04 Feb 26)

    show dialog when the attachment amount limit for single mail is reached Co-authored-by: jomapp <17314077+jomapp@users.noreply.github.com>

  • abp (04 Feb 26)

    do not render newsletter banner for imported newsletter mails Since we do not save the mail.isListUnsubscribe attribute on imported mails, we were always displaying the newsletter banner with "This email is from a newsletter or mailing list. You have already unsubscribed from this newsletter or mailing list." message. We don't display the banner for imported mails anymore since it is misleading. Co-authored-by: jomapp <17314077+jomapp@users.noreply.github.com>

  • abp (03 Feb 26)

    cancel mail import when the target folder is deleted Co-authored-by: jomapp <17314077+jomapp@users.noreply.github.com>

  • abp (03 Feb 26)

    handle expected errors for synchronization in event queue processing When processing entity events when the client is online, we were throwing an error if we encountered not found or not authorized errors. We now handle it gracefully. Co-authored-by: jomapp <17314077+jomapp@users.noreply.github.com>

  • abp (03 Feb 26)

    hide non legacy scrollbars on mobile

  • das (12 Jan 26)

    Add move out of spam button when selecting a single mail in spam folder It was requested by users to also have a move out of spam button. We add such button, it runs inbox rules on the selected mail, if there are no inbox rules or there's an inbox rule to move to spam, then it is moved to inbox instead. This should also consider conversations and ignore drafts. Co-authored-by: sug <sug@tutao.de> Co-authored-by: FranzTutao <frm@tutao.de>

  • kib (13 Feb 26)

    adapt spam processing to take a vector of server classifiers Co-authored-by: jhm <17314077+jomapp@users.noreply.github.com> Co-authored-by: sug <sug@tutao.de> Co-authored-by: FranzTutao <frm@tutao.de>

  • sug (16 Jan 26)

    add TutanotaModelV104, send server spam classifier info to the client Set information about which server-side spam classifier classified this mail. The client side spam model can make use of this info when training its model. We skip prediction for classifiers in SpamClassificationHandler.SERVER_CLASSIFIERS_TO_TRUST. We add the attribute vectorNewFormat since the encrypted and compressed byte array we upload to the server now is in the format [vectorizedMail, oneHotEncodedServerClassifiers]. The new clients upload both the vector and vectorNewFormat to continue supporting the old clients. The new clients default to serverIsSpam = false and serverClassifier = UNKNOWN for vectors already uploaded by the old clients. Co-authored-by: abp <abp@tutao.de> Co-authored-by: das <das@tutao.de> Co-authored-by: FranzTutao <frm@tutao.de>

  • jenkins build server (24 Feb 26)

    v328.260224.0

  • jenkins build server (24 Feb 26)

    update translations

  • bed (24 Feb 26)

    do not rely on technical fields when comparing calendar events When creating parsed events an events from ics file we are using types the repeat rule type from the system model. We should not do not that and just use type from the tutanota model when storing the repeat rule on a CalendarEvent. When comparing an ics event with a calendar event we just ignore all possible technical fields and just compare the actual values. Co-authored-by: and <and@tutao.de>

  • jenkins build server (23 Feb 26)

    v328.260223.0

  • jenkins build server (23 Feb 26)

    update translations

Tuta Website

Website

Tuta Mail: Create a secure, private & encrypted email account for free

Tuta is the secure email service, built in Germany. Use encrypted emails on all devices with our open source email client, mobile apps & desktop clients.

Redirects

Does not redirect

Security Checks

All 66 security checks passed

Server Details

  • IP Address 185.205.69.12
  • Location Hanover, Niedersachsen, Germany, EU
  • ISP Tutao GmbH
  • ASN AS210909

Associated Countries

  • US
  • DE

Safety Score

Website marked as safe

100%

Blacklist Check

tuta.com was found on 0 blacklists

  • ThreatLog
  • OpenPhish
  • PhishTank
  • Phishing.Database
  • PhishStats
  • URLhaus
  • RPiList Not Serious
  • AntiSocial Blacklist
  • PhishFeed
  • NABP Not Recommended Sites
  • Spam404
  • CRDF
  • Artists Against 419
  • CERT Polska
  • PetScams
  • Suspicious Hosting IP
  • Phishunt
  • CoinBlockerLists
  • MetaMask EthPhishing
  • EtherScamDB
  • EtherAddressLookup
  • ViriBack C2 Tracker
  • Bambenek Consulting
  • Badbitcoin
  • SecureReload Phishing List
  • Fake Website Buster
  • TweetFeed
  • CryptoScamDB
  • StopGunScams
  • ThreatFox
  • PhishFort

Website Preview

Tuta Android App

Update Info

  • App Tutanota: simply secure emails
  • Creation Date 23 Nov 17
  • Last Updated 19 Jul 24
  • Current Version 2.15.0
  • Creator Tutao GmbH
  • Downloads 100,000+ downloads

Trackers

No trackers found

Permissions

  • Access Network State
  • Internet
  • Read Contacts
  • Read External Storage
  • Vibrate
  • Wake Lock
  • Receive
  • C2d Message

Tuta iOS App

App Info

Encrypted Email Tuta

Tuta (formerly Tutanota), the fully secure encrypted email and calendar app, enables you to keep your private data private! We never compromise on security or privacy. Tuta comes with a light & beautiful GUI, a dark theme, offline availability, instant push notifications, auto-sync, full-text search, swipe gestures and more. The business email plans have flexible user management and admin levels so you can manage all your company’s email needs easily. What you'll love about the Tuta email client for iOS: - Create a free email address (ending in @tuta.com, @tutanota.com, @tutanota.de, @tutamail.com, @tuta.io or @keemail.me) with 1 GB of free storage. - Create custom domain email addresses for €3 per month with optional catch-all & unlimited email addresses. - Instant display of incoming emails, no need to swipe down to refresh. - Instant access to your encrypted email, calendars & contacts - also when offline. - Quick swipe gestures to manage your inbox easily. - Instant push notifications. - Auto-complete mail addresses as you type. - Auto-sync between app, web and desktop email clients. - Tuta is a free & open source (FOSS) email app so that security experts can check the code. - Find everything you're looking for with our secure & private full-text search of your encrypted email. - Anonymous registration without a phone number. - Send calendar invites directly from the secure calendar app. - Create an unlimited number of encrypted calendars with any paid plan. - Send and receive end-to-end encrypted emails to anybody for free. - Send and receive old-fashioned emails (not end-to-end encrypted). - Automatically encrypt subject, content & attachments for maximum security. - Business email with flexible user creation and admin levels. The secure email app Tuta Mail enables you to send end-to-end encrypted emails to anybody. Even emails that are being sent without end-to-end encryption and all your contacts are stored securely encrypted on the Tutanota servers based in Germany. Tutanota also has an encrypted calendar, easily accessible from within the mail client. Our passion for privacy. Tuta Mail is being built by a team passionate about everybody's right to privacy. We are supported by an amazing community, which enables us to grow our team continuously, making the open source email app Tuta a lasting success without depending on venture capital interests. Tuta respects you & your data: - Only you can access your encrypted emails, calendars & contacts. - Tuta does not track or profile you. - Open source clients & apps. - Innovative full-text search feature lets you easily search your mailbox. - TLS with support of PFS, DMARC, DKIM, DNSSEC and DANE. - Secure password reset that gives us absolutely no access. - 100% developed and located in Germany under strict Data Protection Laws (GDPR). - Uses 100% renewable energy. Official website: https://tuta.com Source code: https://github.com/tutao/tutanota Crypto Notice This distribution includes cryptographic software. The country in which you currently reside may have restrictions on the import, possession, use, and/or re-export to another country, of encryption software. BEFORE using any encryption software, please check your country's laws, regulations and policies concerning the import, possession, or use, and re-export of encryption software, to see if this is permitted. Seehttp://www.wassenaar.org/ for more information. The U.S. Government Department of Commerce, Bureau of Industry and Security (BIS), has classified this software as Export Commodity Control Number (ECCN) 5D002.C.1, which includes information security software using or performing cryptographic functions with asymmetric algorithms. The form and manner of this distribution makes it eligible for export under the License Exception ENC Technology Software Unrestricted (TSU) exception (see the BIS Export Administration Regulations, Section 740.13) for both object code and source code.

Rating

Rated 4.46 out of 5 stars by 450 users

Version Info

  • Current Version 220.240326.0
  • Last Updated 27 Mar 24
  • First Released 30 Nov 14
  • Minimum iOS Version 15.0
  • Device Models Supported 93

App Details

  • IPA Size 15.99 Mb
  • Price Free (USD)
  • Age Advisory 4+
  • Supported Languages 55
  • Developer Tutao GmbH
  • Bundle ID de.tutao.tutanota

Screenshots

Tuta Socials

Tuta Reviews

More Encrypted Email

  • A 100% open-source, privacy-focused email service with quantum-safe encrypted SQLite mailboxes (sandboxed and portable). Supports IMAP, POP3, SMTP, CalDAV (calendars), and CardDAV (contacts). Features include OpenPGP/MIME and E2EE, Web Key Directory (WKD), and quantum-resistant encryption using ChaCha20-Poly1305. Offers a free plan (forwarding only), Enhanced Protection at $3/month (10 GB storage, unlimited domains/aliases), Team at $9/month, and Enterprise at $250/month. Additional storage available. Can be self-hosted via Docker. All code is available on GitHub.

  • An end-to-end encrypted anonymous email service. ProtonMail has a modern easy-to-use and customizable UI, as well as fast, secure native mobile apps. ProtonMail has all the features that you'd expect from a modern email service and is based on simplicity without sacrificing security. It has a free plan or a premium option for using custom domains (starting at $5/month). ProtonMail requires no personally identifiable information for signup, they have a .onion server, for access via Tor, and they accept anonymous payment: BTC and cash (as well as the normal credit card and PayPal).

  • Mailfence supports OpenPGP so that you can manually exchange encryption keys independently from the Mailfence servers, putting you in full control. Mailfence has a simple UI, similar to that of Outlook, and it comes with bundled with calendar, address book, and files. All mail settings are highly customizable, yet still clear and easy to use. Sign up is not anonymous, since your name, and prior email address is required. There is a fully-featured free plan, or you can pay for premium, and use a custom domain ($2.50/ month, or $7.50/ month for 5 domains), where Bitcoin, LiteCoin or credit card is accepted.

    Not Open Source
  • A Berlin-based, eco-friendly secure mail provider. There is no free plan, the standard service costs €12/year. You can use your own domain, with the option of a catch-all alias. They provide good account security and email encryption, with OpenPGP, as well as encrypted storage. There is no dedicated app, but it works well with any standard mail client with SSL. There's also currently no anonymous payment option.

    Not Open Source

About the Data: Tuta

API

You can access Tuta's data programmatically via our API. Simply make a GET request to:

https://api.awesome-privacy.xyz/communication/encrypted-email/tuta

The REST API is free, no-auth and CORS-enabled. To learn more, view the Swagger Docs or read the API Usage Guide.

About the Data

Beyond the user-submitted YAML you see above, we also augment each listing with additional data dynamically fetched from several sources. To learn more about where the rest of data included in this page comes from, and how it is computed, see the About the Data section of our About page.

Share Tuta

Help your friends compare Encrypted Email, and pick privacy-respecting software and services.
Share Tuta and Awesome Privacy with your network!

View Encrypted Email (5)