this post was submitted on 16 Mar 2025
86 points (100.0% liked)

Privacy

803 readers
53 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS
 

I've been looking to switch from gmail to a different email provider that's more private. I've been hearing about Tuta, are there any drawbacks to it? Are there better options?

For a while I was planning on making the switch to protonmail but that's off the table now due to the recent events surrounding them.

top 50 comments
sorted by: hot top controversial new old
[–] ProdigalFrog@slrpnk.net 23 points 3 weeks ago* (last edited 3 weeks ago) (4 children)

~~Tuta and~~ Posteo are both pretty excellent (posteo is cheaper, but has a few less options that might be a deal breaker if you need them, like custom domain support).

Disroot is a good free option, and they offer custom domains after a one time donation.

Mailbox is okay, though they are known to have a very odd 2fa, and will recycle your address if you ever stop paying, allowing others to claim it and potentially impersonate you.

Posteo is unique in that they'll never delete your account for inactivity, or even if you stop paying, where they'll let you access and read emails, but not let you send them until you pay again.

Edit: apparently Tuta is going downhill according to others here, which is unfortunate :(

[–] umami_wasbi@lemmy.ml 14 points 3 weeks ago

Posteo's lack of custom domain support can be augemented by using Addy.io or other similar email proxy/forward services.

[–] reksas@sopuli.xyz 5 points 3 weeks ago (1 children)

thanks for mentioning disroot, that seems much more like what i was looking for than tuta which i was originally going to try out.

[–] badwetter@kbin.melroy.org 2 points 3 weeks ago

@reksas@sopuli.xyz

Disroot is good, I've used them b4.

@countrypunk@slrpnk.net @ProdigalFrog@slrpnk.net

[–] nixx1338@feddit.nl 2 points 3 weeks ago* (last edited 3 weeks ago) (1 children)

Mailbox.org beta offers regular 2FA setup via authenticator. I've been using it for months and I'm yet to run into any issues.

In general, I've been with MBO for almost a year and I'm happy with the service. You basically get a complete replacement for the google suite which you can use via your app(s) of choice.

load more comments (1 replies)
[–] countrypunk@slrpnk.net 2 points 3 weeks ago (1 children)

Do they compare similarly in regards to privacy?

[–] ProdigalFrog@slrpnk.net 9 points 3 weeks ago* (last edited 3 weeks ago) (1 children)

From what I understand, Tuta may have a slight edge theoretically, but email itself is a pretty poor protocol when it comes to privacy.

Tuta was forced by court order to implement a message logger for an individual, but AFAIK all of their previous messages were encrypted and could not be read by Tuta, and therefore the Government could only see new unencrypted messages coming in before they were encrypted.

Disroot only recently implemented at-rest encryption, so that should be fairly solid now. Posteo also allows you to encrypt your inbox and calendar at rest.

Even with that, consider all private email providers as mostly just to avoid surveillance capitalism (to prevent your data from being mined and sold), but with only marginal protection from state agents.

[–] badwetter@kbin.melroy.org 9 points 3 weeks ago (2 children)

@ProdigalFrog@slrpnk.net

Tuta was involved in a Canadian spy case, where in court it was alleged to be a front for an EU Intelligence Agency. Cameron Ortis was the counterintelligence spy on trial. https://gizmodo.com/tuta-email-denies-connection-to-intelligence-services-1851022465 and lots more if one does a search. I know I wouldn't use them, so you've been warned.

@countrypunk@slrpnk.net

load more comments (2 replies)
[–] perishthethought@lemm.ee 17 points 3 weeks ago* (last edited 3 weeks ago)

I've used Tuta for more than 4 years. It's a solid choice if you accept a couple few things:

  • they're a small company, doing their best to survive.

  • you have to use their client apps. They take security very seriously and assume all of their users do as well.

  • prices might go up every few years but I am still paying my original rate, for my original features.

  • the search function does work but is very slow.

But otherwise, I'm very happy and expect to stay with them for the forseeable. Good luck in your search.

[–] brownmustardminion@lemmy.ml 12 points 3 weeks ago (1 children)

I've used Tuta for years, paid account with multiple custom domains.

I prefer them for their principles, but their clients are extremely frustrating. Emails load very slowly and their email search is basically unusable.

I've resorted to downloading old emails and using other clients to import and search through them. I really wish they would improve their email search.

[–] Flagstaff@programming.dev 1 points 3 weeks ago (2 children)
[–] brownmustardminion@lemmy.ml 2 points 3 weeks ago (1 children)

I should re-iterate I download the emails to use in an offline client. Their service doesn't support third party clients to receive and send email.

When I do taxes, I need to search thousands of emails for receipts and the tuta apps make this impossible. This is my workaround.

[–] Flagstaff@programming.dev 3 points 3 weeks ago (1 children)

Right, so I'm wondering what client that is.

[–] brownmustardminion@lemmy.ml 3 points 3 weeks ago (1 children)

My bad. Its been a while, but Thunderbird at one point. If I remember right there was an update relatively recently that made it much more difficult to import offline emails, so if you find a better alternative let me know.

[–] Flagstaff@programming.dev 3 points 3 weeks ago

Hmm, I wonder if Betterbird has solved that problem... I've actually only ever used webmail as I didn't understand the benefit of a desktop platform—until these (increasingly) privacy-invasive times!

[–] ProdigalFrog@slrpnk.net 1 points 3 weeks ago

Tuta does not allow you to use third party email clients like Thunderbird.

[–] feoh@lemmy.ml 11 points 3 weeks ago (1 children)

It's not Tuta but I adore Fastmail.

No BS. No gimmicks. Just privacy aware, protocol conformant E-mail at a reasonable price.

[–] azalty@jlai.lu 3 points 3 weeks ago (2 children)

5€/month for email? 😵

[–] ycnz@lemmy.nz 4 points 3 weeks ago (1 children)

Yeah. Email's actually quite unpleasant (not hard) to do well. Look sideways at anyone doing it free or super-cheap.

[–] azalty@jlai.lu 1 points 3 weeks ago* (last edited 3 weeks ago)

I'm selfhosting with mailcow and it's great

But I agree, setting it up from scratch is really annoying

[–] feoh@lemmy.ml 1 points 3 weeks ago (1 children)

Services cost money to run. Either you pay for the product or you are the product.

Make your choice, name your poison. No skin off my nose in any case :)

[–] azalty@jlai.lu 1 points 3 weeks ago (1 children)

I mean I self host for 4€/month and I could fit multiple emails in there

Email is pretty much just about storage at some point, and there are a lot more cost effective servers for this, than a simple VPS

load more comments (1 replies)
[–] 0x0@programming.dev 9 points 3 weeks ago
[–] cypherpunks@lemmy.ml 8 points 3 weeks ago* (last edited 3 weeks ago)

Tuta's product is snake oil.

A cryptosystem is incoherent if its implementation is distributed by the same entity which it purports to secure against.

If you don't care about their (nonstandard, incompatible, and snake oil) end-to-end encryption feature and just want a freemium email provider which (purports to) protect your privacy in other ways, the fact that their flagship feature is snake oil should still be a red flag.

[–] monsterpiece42@reddthat.com 5 points 3 weeks ago (1 children)

What did proton do wrong? Legit question, I'm out of the loop.

[–] anonymous@lemm.ee 10 points 3 weeks ago (3 children)

Nothing. It's just FUD.

Here's an article about it: https://medium.com/@ovenplayer/does-proton-really-support-trump-a-deeper-analysis-and-surprising-findings-aed4fee4305e

Even if the CEO did support the orange turd, I would personally still be able to separate his personal opinion from what the non profit is doing.

[–] monsterpiece42@reddthat.com 7 points 3 weeks ago (1 children)

That was informative, thanks.

I agree with you, I would be extremely surprised if the Proton CEO supported Trump.. I would say very unlikely.

Very thinly veiled tho... It's not an immediate threat, but it's best to just move away from it if you can.

[–] ycnz@lemmy.nz 6 points 3 weeks ago* (last edited 3 weeks ago)

He explicitly supported the republican party in its current guise. That's enough for me to run. Fastmail is where I've temporarily landed - would prefer somewhere away from Aussie jurisdiction, but it felt like the least-shit.

[–] azalty@jlai.lu 2 points 3 weeks ago

Great source, thanks :)

[–] 18107@aussie.zone 5 points 3 weeks ago (2 children)

I've had a bug with the android app where sometimes notifications for emails just don't happen. I've received a new email notification, opened the app, and found that the notification was for an email received 5 hours ago, and I didn't get any notification for the email 3 days ago or the email 1 hour ago.

Despite this issue and several other minor issues, I still recommend Tuta. Mostly because I can't find anything better.

[–] FriendOfDeSoto@startrek.website 2 points 3 weeks ago (1 children)

If you're on Android, by any chance, have you gone through all the battery optimization, background process killing, and startup settings? Some OEM's versions of Android are real bad in that way. Giving the app the right settings and permissions may decrease the number of delayed notifications like that.

[–] 18107@aussie.zone 3 points 3 weeks ago (1 children)

I am using Android until I can find an alternative. I've turned off all optimisations I can find. I haven't had the issue in a few weeks, but it did happen once since changing settings. I'm hoping that something random I did (like a phone restart) somehow fixed everything.

[–] EngineerGaming@feddit.nl 1 points 3 weeks ago (1 children)

I am using Android until I can find an alternative

You mean you're considering something like PostmarketOS? Just wonder where people are looking for alternatives.

[–] 18107@aussie.zone 2 points 3 weeks ago

I'm looking everywhere I can. I haven't found any OS that works with my current phone (Nokia G42), and the aren't too many phones that meet my needs (dual Sim, small, headphone jack, repairable, runs open source OS).

I've given up actively searching and I'm mostly browsing Lemmy and hoping to stumble across something useful. Please let me know if you have any more suggestions.

load more comments (1 replies)
[–] eight_byte@feddit.org 5 points 3 weeks ago

I am very happy with Proton.

[–] confuser@lemmy.zip 4 points 3 weeks ago

I started using fastmail, best thing I decided to do in awhile

[–] KokusnussRitter@discuss.tchncs.de 4 points 3 weeks ago* (last edited 3 weeks ago) (1 children)

I don't have the know how to talk about safety and privacy, but here are some caveats.

I think you have to use their client and can't add your adress to 3rd party clients like thunderbird. Their client is however nice to work with.

If you forgot your password, the only way to change it is by using a key that is given to you after account creation. Keep it safe! Check for spelling errors If you lost the note or it's not in you passwordmanager or whatever you use, your account is not recoverable. Their support can't help you reset your pw.

Other than that they make email encryption pretty easy with a checkbox right under the recipient in the email editor.

Another handy feature are the aliases. (Payed feature) You can set up some email adresses for certain purposes, and filter their traffic into different inboxes quite easily. If one of them.get's compromised, deactivate and move in. Your master adress is probably still usable.

What I do not like is the fact that paying customers get support first.

[–] countrypunk@slrpnk.net 3 points 3 weeks ago (1 children)

I don't get why they don't just make it a paid service entirely. Seems odd that email providers like to do that.

[–] ProdigalFrog@slrpnk.net 4 points 3 weeks ago* (last edited 3 weeks ago)

Offering a free tier lets people try the service, and encourages them to become a paid user if they run up against the limits of the free tier.

[–] serendipity@aussie.zone 4 points 3 weeks ago

If you don’t want to run your own mail server then there will always be a trade off somewhere. That trade off could be high costs to pay a tech firm to run a private mail server for you, could be lack of features, could be privacy, could be a lot of things. Even with your own mail server there will be trade offs around security etc. depending upon your skillset.

Personally, I have a hybrid approach.

  • Business is on a mail server
  • Personal with sensitive data (health, bills, etc.) is on a mail server
  • Personal - subscriptions, newsletters, etc. is on Proton
  • Everything else is on Gmail

I also have other accounts (e.g. DDG, Apple Mail, for specific use cases, but I forward the content I receive there into Gmail.

I’ve had a look at Tuta and haven’t seen enough to convince me to move anything there. I’m not going to move my mail servers to a cloud provider, Gmail is there because the address is 20 years’ old and I can’t be bothered updating everywhere that it’s used, and Proton has been great for years, has grown well, and has a corporate mission that I agree with. DDG, Apple Mail etc. is what the internet sees of me - They generate unique email addresses and then I forward the content I want into Gmail, or sometimes Proton.

[–] jagged_circle@feddit.nl 3 points 3 weeks ago

No PGP support kinda kills it imho

[–] kyub@discuss.tchncs.de 3 points 3 weeks ago

Haven't read anything bad about Tuta so I guess it's fine. Other good ones are Proton, mailbox.org or posteo.de. Anything that's not by Google, Microsoft, and so on.

[–] bl4kers@lemmy.ml 3 points 3 weeks ago (1 children)

Yes, I use it and generally like it. Their app is a little buggy, but they have email support and accept bug reports on GitHub. This is helpful for finding out what other users are seeing. It's a small dev team with frequent releases

[–] countrypunk@slrpnk.net 2 points 3 weeks ago

Do you know if there's a difference in the frequency of releases of the f-droid version and the play store version?

[–] Termight@lemmy.ml 3 points 3 weeks ago (2 children)

No single organization should be trusted. "Emails paint an intimate narrative of ourselves — the people we talk to, the books we read, the politics we practice. This information is powerful. When we lose control over it, it can do great harm to ourselves and our loved ones." https://ideas.ted.com/why-we-should-all-care-about-encryption-really/

load more comments (2 replies)
[–] geography082@lemm.ee 1 points 3 weeks ago* (last edited 3 weeks ago)

I have the feeling people actually need to have the urge from panic to have to migrate all their data.

[–] ethancedwards8@programming.dev 1 points 3 weeks ago

I recommend mailbox.org instead.

load more comments
view more: next ›