Is Mailbox.org open source?

No, Mailbox.org is closed source.

Does Mailbox.org use end-to-end encryption?

Yes, Mailbox.org uses end-to-end encryption.

What platforms does Mailbox.org support?

Mailbox.org is available on web, android, ios, desktop.

Where is Mailbox.org based?

Mailbox.org is based in Germany.

← Back to apps

Mailbox.org

Name: Mailbox.org
Availability: InStock

German-based privacy email with PGP/S/MIME support, anonymous payment, and comprehensive security features

Privacy score 75 Paid Technical: Beginner

Visit website

Mailbox.org offers a privacy-conscious alternative in the email space, with a stronger focus on data protection than many mainstream tools.

🔀

Recommended alternatives

Proton Mail Posteo StartMail Tutanota

Web Android iOS Desktop

Who is this for?

✓ Good for you if:

• You want PGP and S/MIME
Cryptographic transform providing confidentiality.
Read full definition
support
• You need anonymous registration and payment options
• You prefer German
Legal authority of a territory over entities, activities, and data processing.
Read full definition
privacy protections
• You want comprehensive security features (
DNS Security Extensions adding cryptographic signatures to DNS records for authenticity verification.
Read full definition
, DANE,
HTTP Strict Transport Security header instructing browsers to enforce HTTPS and reject downgrade.
Read full definition
, etc.)
• You need IMAP/POP3 support with
Cryptographic transform providing confidentiality.
Read full definition

⚠ Think twice if:

• You want free email (Mailbox.org is paid, €1/month)
• You need the cheapest email option
• You want open-source email service (Mailbox.org is closed source)
• You need automatic
Cryptographic transform providing confidentiality.
Read full definition
for all emails
• You want the largest email ecosystem

Overview

Mailbox.org is a Germany-based email provider that combines email with productivity features and privacy-focused options. It supports standard protocols (IMAP/SMTP) with TLS

and provides integrated OpenPGP features in its webmail experience. This can simplify key-based encryption compared with configuring external plugins.

Operational notes: The service is designed to be compatible with the broader email ecosystem, which improves usability but means metadata

remains part of email delivery. Security posture and privacy outcomes depend on configuration choices (2FA, PGP usage, and anti-tracking settings such as blocking remote content).

Privacy highlight

This score will be updated after a full review.

Quick facts

Country:: 🇩🇪 Germany
Pricing:: Paid
Platform:: Web, Android, iOS, Desktop
Technical:: Beginner
It's like whispering a secret that only your friend can hear — not even the phone or app knows what you said. Read full definition :: Yes
Automatic collection of operational and usage signals from clients to a service. Read full definition :: Minimal telemetry
Software with publicly available source code under an open license; enables review and reuse. Read full definition :: No
Open-source status:: Closed source
Operational practice of hosting and administering services under your own control. Read full definition :: No
Right enabling individuals to receive and transmit their data in a structured, machine-readable format. Read full definition :: Yes

Key features

Integrated PGP options in webmail and
Cryptographic protocol for secure transport.
Read full definition
-secured standard protocols
Email plus productivity features (plan-dependent)
Privacy-friendly service based in Germany

Security & encryption Click to expand

It's like whispering a secret that only your friend can hear — not even the phone or app knows what you said. Read full definition: Yes
Encryption protocols: OpenPGP, TLS 1.3
Lifecycle control for cryptographic keys. Read full definition: Mailbox.org supports OpenPGP workflows (including webmail-based
Cryptographic transform providing confidentiality.
Read full definition
options) and standard
Cryptographic protocol for secure transport.
Read full definition
-secured connections. When using PGP, you manage keys (or generate them in supported tooling) and encrypt to recipients’ public keys; this enables
It's like whispering a secret that only your friend can hear — not even the phone or app knows what you said.
Read full definition
for content when both sides use compatible keys.
Offline support: Yes

Telemetry & tracking Click to expand

Automatic collection of operational and usage signals from clients to a service. Read full definition: Minimal telemetry
Behavioral data collection for profiling and attribution. Read full definition: No
Retention of IP addresses and related metadata. Read full definition: Ip no
Automatic collection of operational and usage signals from clients to a service. Read full definition: Describe the
Automatic collection of operational and usage signals from clients to a service.
Read full definition
pipeline here once you have confirmed the implementation.

Jurisdiction & compliance Click to expand

Geographic location of data storage and, sometimes, processing within specific regions. Read full definition: Germany.
Storage duration for data, defined by policy, law, and operational needs. Read full definition: Content persists until deletion/account closure. Operational/security logs may exist; retention windows vary by policy/legal requirements.
Legal frameworks: GDPR; German Federal Data Protection Act (BDSG).
Revenue sources: Subscription

Editorial signals Click to expand

Composite metric summarizing privacy characteristics based on a scoring model. Read full definition: 75
Trust score: 83
Trust breakdown (0–10): Encryption: 78, Audits: 60, Open source: 35, Telemetry: 85, Jurisdiction: 75, Transparency: 80, Trackers: 85
Editorial notes: Usability: 7, Performance: 7, Family friendly: 8

User experience Click to expand

Signup requirements: Describe exact signup and identity requirements here.
Onboarding difficulty (1-5): 1
Accessibility features: Web interface (Open-Xchange based) with keyboard navigation and screen reader support via ARIA landmarks. Mobile apps support iOS VoiceOver and Android TalkBack. Standard browser accessibility APIs used.

Backup & portability Click to expand

Right enabling individuals to receive and transmit their data in a structured, machine-readable format. Read full definition: Yes
Migration tools: IMAP import and client-based migration; provider migration helpers may be available depending on plan.
Processes and factors used to re-establish account access after loss of credentials. Read full definition: Password reset mechanisms; 2FA recovery codes if enabled.

Similar privacy apps

Same category

Proton Mail

Score 88

Proton Mail offers a privacy-conscious alternative in the email space, with a stronger focus on data protection than ...

View details • Visit site

Tutanota

Score 84

Tutanota offers a privacy-conscious alternative in the email space, with a stronger focus on data protection than man...

View details • Visit site

StartMail

Score 70

StartMail offers a privacy-conscious alternative in the email space, with a stronger focus on data protection than ma...

View details • Visit site

Mailbox.org

Recommended alternatives

Who is this for?

✓ Good for you if:

⚠ Think twice if:

Overview

Quick facts

Key features

Similar privacy apps

Proton Mail

Tutanota

StartMail

Related Guides

Best Apps and Tools for Ultimate Data Protection

How to Set Up 2FA: TOTP vs Push vs Security Keys

Mullvad vs IVPN vs Proton VPN: Private VPNs Compared

Accessibility settings

Text size

Theme

Contrast Level

Language & Content

Need help with a term? Open the glossary