Zero-access encrypted mail

Email that no one can read.

Zero-access encryption, no logs, no metadata harvesting. Not even the server can read your messages.

XChaCha20-Poly1305 Zero-log Open source
veil.app/inbox
Veil
Inbox
Sent
Aliases
Search
Sarah ChenRe: Q3 partnership proposal10:24
StripeYour receipt for July09:51
GitHubNew sign-in to your account08:30
LukasRe: Wochenende?Tue
NotionYour workspace digestMon
press@Interview request — TechCrunchMon
How it works

Your key never leaves you

Three steps. No master key, no backdoor, no exception.

01

Mail arrives

A message comes in over SMTP, like at any mail server.

02

Encrypted to your key

It is immediately sealed with your public key and written to disk as ciphertext.

03

Only you decrypt

Your password unlocks your private key in memory — the only place your mail is ever readable.

Guarantees

Security you can verify

No readable email

Every message is encrypted to your personal key the moment it arrives. We store only ciphertext. Without your password the contents are mathematically useless — even to us, even under a court order.

No password on disk

We never store your password. It exists in memory only for the instant it unlocks your key, then it is gone. There is no hash for anyone to crack offline.

No IP or access logs

We do not record your IP address, your device, or when you connect. There is no access log to hand over, because it is never written in the first place.

Sessions in memory only

Your login session lives purely in RAM and is never written to disk. A restart logs everyone out; a powered-off server reveals nothing about who was online.

// per-account keypair (X25519)
let (pub, secret) = generate();
// secret sealed with your password
let key   = argon2id(password, salt);
let vault = seal(key, secret);

// incoming mail, encrypted on arrival
store(encrypt_to(pub, message));

// the server can never read it.
What we store

The whole database, summarised

Email contentciphertext only
Passwordnever stored
IP / access logsnone
Sessionsmemory only
FAQ

Questions, answered plainly

What happens if I forget my password?

Your mail is gone for good. It is encrypted with a key derived from your password, and we never store that password — so there is no reset and no recovery. That is the cost of true zero-access.

Can you, or a court, read my email?

No. We only ever hold ciphertext encrypted to your key. Without your password it is mathematically useless — there is nothing meaningful to hand over.

Is it really open source?

Yes. The full server is open source and uses audited primitives (Argon2id, X25519, XChaCha20-Poly1305). Compile it yourself and verify every claim on this page.

VEIL · Open source · Zero-log · End-to-end encrypted
deen PrivacyTerms