# The most secure email services

Secure email services compared on end-to-end encryption, encrypted storage, independent audits, MTA-STS, DANE, DNSSEC and TLS test results.

Secure email protects messages in transit and at rest, supports end-to-end encryption, and hardens its servers against interception. Each service below supports end-to-end encryption, and each page shows automated tests of TLS, MTA-STS, DANE, DNSSEC, SPF and DMARC along with evidence for every answer.

1. [Forward Email](https://privacyratings.com/email-providers/forward-email/) (our pick): A (93/100). Open-source email service with encrypted mailboxes, custom domains, and IMAP, POP3, SMTP, CalDAV and CardDAV on every paid plan.
2. [mailbox.org](https://privacyratings.com/email-providers/mailbox-org/): C (70/100). Paid email, calendar and office service from Berlin, Germany, with built-in PGP encryption and support for custom domains.
3. [StartMail](https://privacyratings.com/email-providers/startmail/): C (66/100). Paid email service from the Netherlands with built-in PGP encryption, unlimited aliases and custom domains.
4. [Kolab Now](https://privacyratings.com/email-providers/kolab-now/): C (64/100). Paid email and groupware service from Apheleia IT in Switzerland, built on the open-source Kolab platform, with calendars, contacts, files and video calls.
5. [Proton Mail](https://privacyratings.com/email-providers/protonmail/): C (64/100). End-to-end encrypted email service from Switzerland, with apps for web, Android, iOS and desktop.
6. [CounterMail](https://privacyratings.com/email-providers/countermail/): C (62/100). Paid email service in Sweden that encrypts mail with OpenPGP and stores it encrypted. New registrations are closed.
7. [Posteo](https://privacyratings.com/email-providers/posteo/): C (62/100). Paid, ad-free email service from Germany that runs without collecting names or addresses and accepts anonymous payment.
8. [Tuta](https://privacyratings.com/email-providers/tuta/): C (61/100). End-to-end encrypted email and calendar service from Germany, with open-source apps for web, desktop and mobile.
9. [Disroot](https://privacyratings.com/email-providers/disroot/): D (59/100). Volunteer-run platform from the Netherlands offering email and other open services.
10. [Mailfence](https://privacyratings.com/email-providers/mailfence/): D (54/100). Email service from Belgium with built-in OpenPGP encryption and signing, plus calendar, contacts and document storage.
11. [Infomaniak Mail](https://privacyratings.com/email-providers/infomaniak-mail/): D (53/100). Email service from Swiss company Infomaniak, with free ik.me addresses and paid hosting for custom domains, plus web and mobile apps.
12. [Runbox](https://privacyratings.com/email-providers/runbox/): D (49/100). Paid email service from Norway with custom domain hosting, standard protocols and an open-source webmail app.
13. [Zoho Mail](https://privacyratings.com/email-providers/zoho-mail/): D (45/100). Email service from Zoho for businesses and individuals, with custom domains, calendar and contacts, and an ad-free free plan.
14. [GMX](https://privacyratings.com/email-providers/gmx/): F (31/100). Free, ad-supported email service from 1&1 Mail & Media in Germany, with webmail, mobile apps, calendar and cloud storage.

## What makes an email service secure?

Look for end-to-end encryption such as OpenPGP, encrypted storage, enforced transport security (MTA-STS or DANE), DNSSEC, strong TLS, two-factor sign-in and a recent independent security audit. The criteria and tests behind each rating are public.

## Is end-to-end encrypted email possible with any recipient?

Only when both sides support the same system. OpenPGP works across providers and apps; some services use their own encryption between their own users and password-protected messages for everyone else.

Source: https://privacyratings.com/secure-email/