Features
Everything you expect from a mail host, with the security dials turned all the way up.
Core protections
Encrypted at rest
Every mailbox is stored encrypted on disk, with keys kept separate from the mail data.
PGP and S-MIME ready
Bring your own keys. Upload a public key and we will encrypt inbound mail to it automatically.
Zero tracking
No ads, no analytics scripts, no tracking pixels in our webmail. Remote images are blocked by default.
Hardened by default
TLS 1.2+, MTA-STS, DANE-ready DNS, SPF, DKIM and DMARC are configured for you.
Real two-factor auth
TOTP and FIDO2 security keys for login, with app passwords for mail clients.
Disposable aliases
Create throwaway addresses per service, then burn them when they start getting spam.
Your keys, your mail
Upload your public PGP key and inbound messages are encrypted to it before they touch disk. Prefer to do everything client-side? That works too, and our server will never see the plaintext of end-to-end encrypted messages.
- Automatic inbound encryption to your public key
- Web Key Directory (WKD) publishing so correspondents find your key
- S-MIME certificates supported in standard clients
Mail that just works
Custom domains
Host mail for your own domain with guided DNS records for MX, SPF, DKIM and DMARC.
Standards-based access
IMAP, SMTP submission, CalDAV-friendly exports and Sieve. No proprietary client required.
Aliases and catch-alls
Separate identities for every service. Disable any alias instantly without touching your main address.
Fast spam filtering
Greylisting, reputation checks and content filtering that run inbound only and never build ad profiles.
Generous storage
Plans from 5 GB to 120 GB with flexible quotas shared across aliases and domains.
Account hardening
Login alerts, session management, hardware keys and revocable app passwords.
What is and is not in each plan
| Capability | Recon | Operator | Shadow |
|---|---|---|---|
| Storage | 5 GB | 30 GB | 120 GB |
| Custom domains | - | 1 | 5 |
| Aliases | 2 | 10 | Unlimited |
| PGP / WKD | yes | yes | yes |
| Hardware key 2FA | yes | yes | yes |
| Sieve filters | yes | yes | yes |
| Support response | Standard | Standard | Priority |
Interested?
Registration is currently closed, but our documentation is public if you would like to see how everything fits together.
Read the docs