Zero-access encryption, no logs, no metadata harvesting. Not even the server can read your messages.
Three steps. No master key, no backdoor, no exception.
A message comes in over SMTP, like at any mail server.
It is immediately sealed with your public key and written to disk as ciphertext.
Your password unlocks your private key in memory — the only place your mail is ever readable.
Every message is encrypted to your personal key the moment it arrives. We store only ciphertext. Without your password the contents are mathematically useless — even to us, even under a court order.
We never store your password. It exists in memory only for the instant it unlocks your key, then it is gone. There is no hash for anyone to crack offline.
We do not record your IP address, your device, or when you connect. There is no access log to hand over, because it is never written in the first place.
Your login session lives purely in RAM and is never written to disk. A restart logs everyone out; a powered-off server reveals nothing about who was online.
| Email content | ciphertext only |
| Password | never stored |
| IP / access logs | none |
| Sessions | memory only |
Your mail is gone for good. It is encrypted with a key derived from your password, and we never store that password — so there is no reset and no recovery. That is the cost of true zero-access.
No. We only ever hold ciphertext encrypted to your key. Without your password it is mathematically useless — there is nothing meaningful to hand over.
Yes. The full server is open source and uses audited primitives (Argon2id, X25519, XChaCha20-Poly1305). Compile it yourself and verify every claim on this page.