Webmail
SquirrelMail privacy rating
Self-hosted PHP webmail with built-in IMAP and SMTP support that renders plain HTML pages without JavaScript and is extended through plugins.
Summary
SquirrelMail scores 79 out of 100 (grade B) on the webmail criteria. It meets 7 of 9 criteria: open source, no trackers or telemetry, no ads or data sales, connects directly, blocks remote content, works with any provider and self-hostable. It does not meet independent audit and OpenPGP support.
Score 79 out of 100. How scoring works
Criteria
- Yes
-
Yes
No trackers or telemetry Weight 3 of 3
Are the website and apps free of third-party trackers, with any analytics anonymous and any telemetry off by default?
No telemetry or analytics in the source code.
-
Yes
No ads or data sales Weight 2 of 3
Is the product funded without advertising, ad targeting or selling user data?
Free software supported by donations. No ads.
-
No
Independent audit Weight 2 of 3
Has an independent security or privacy audit been published within the last three years?
No independent audit is published.
-
No
OpenPGP support Weight 2 of 3
Can the app encrypt and sign mail with OpenPGP, built in or through an official add-on?
Not supported. The third-party GPG plugin does not work with current versions.
-
Yes
Connects directly Weight 3 of 3
Does the app connect directly to your mail server, without passing mail or passwords through the vendor's servers?
Self-hosted. Connects from the server where it is installed directly to the IMAP and SMTP servers, with no vendor service involved.
-
Yes
Blocks remote content Weight 2 of 3
Are remote images and tracking pixels blocked by default?
The source code blocks remote images in HTML mail until the user chooses to view unsafe images.
-
Yes
Works with any provider Weight 1 of 3
Does the app work with any standard IMAP and SMTP provider?
Works with any IMAP and SMTP server.
-
Yes
Self-hostable Weight 1 of 3
Can the webmail be installed on your own server?
Self-hosted software with an official administrator guide.