Why your email is insecure
Regular email is like a postcard: every mail carrier can read it. Gmail, Outlook, and Yahoo scan your emails automatically — for ads, AI training, and soon maybe for Chat Control.
Your emails contain password resets, orders, bank details, personal conversations. Access to your email is access to your entire digital life.
ProtonMail — The best choice
From Switzerland with end-to-end encryption. Even Proton can't read your emails — they don't have access to the keys.
- E2E for Proton-to-Proton, PGP for external
- Swiss privacy laws
- Fully open source
- Free (500MB) / from $3.99/month
- Calendar, Drive, VPN included (Proton Suite)
Tuta (formerly Tutanota)
Encrypts not just the content but also the subject line and attachments. Based in Germany.
Mailbox.org
The German provider for advanced users. Full PGP integration, custom domain, DSGVO-compliant. From €1/month.
Tips for better email security
Use your own domain
With your own domain (you@yourname.com) you're independent of any provider. You can switch anytime.
Create aliases
Use a different email for every service. SimpleLogin (owned by Proton) creates automatic aliases.
Enable 2FA
Two-factor with a hardware key (YubiKey) or app (Aegis). Never use SMS 2FA — it's insecure.
Delete old emails
The less data you have, the less can be leaked. Clean up regularly.