--- title: Tuta Mail canonical: https://saasranked.com/software/tuta-mail/ category: Encrypted Email Services points: 73 rank: 2 of 9 facts_checked: 2026-10-08 --- # Tuta Mail German encrypted mailbox that also encrypts contacts and calendar, with open-source apps and a free plan. 73 points out of 100. #2 of 9 encrypted email services. Vendor: Tutao GmbH. Website: https://tuta.com/ - The free plan has a 1 GB encrypted mailbox [1]. - Revolutionary costs about €3 a month on yearly billing, with 20 GB and 3 custom domains [1]. - Address book and calendar are encrypted, not only mail [1]. - The transparency report covers 1 January to 30 June 2026 [5]. - Client code for all Tuta apps is public on GitHub under GPLv3 [3][4]. Verdict: Tuta suits people who want everything encrypted, including contacts and calendar, in open-source apps on all five systems [1][3][7]. Revolutionary adds 20 GB and custom domains for about €3 a month [1]. The catch: Tuta's own table shows no IMAP access, and the one outside pen test it names has no date [3][8]. Best for: People who want contacts and calendar encrypted too, and are fine using Tuta's own apps instead of a mail program. ## Points | Criterion | Line | Value | Points | Note | |---|---|---|---|---| | Encryption | Stored mail the provider cannot read | Yes | 10/10 | Tuta says it has zero access to the mailbox, all data is encrypted, and only sender and recipient can read mail [1]. | | Encryption | Automatic end-to-end encryption between its own users | Yes | 8/8 | The plan table says all emails between Tuta users are automatically encrypted [1]. | | Encryption | Encrypted mail to other providers | Yes | 6/6 | You can exchange encrypted email with anyone through a shared password [1]. | | Encryption | Encrypted contacts or calendar | Yes | 3/3 | The plan table says the address book and calendar are encrypted [1]. | | Trust and audits | Independent audit since 2024 | Not published | 0/8 | Open-source page names SySS GmbH as a pen tester but gives no date or published report [3]. | | Trust and audits | Open-source apps | Yes | 6/6 | Client code for all Tuta apps is public on GitHub under GPLv3 [3][4]. | | Trust and audits | SOC 2 Type II or ISO 27001 | Not published | 0/4 | Security page names ISO 27001 only for its German data centres, not for Tuta itself [2]. | | Trust and audits | Transparency report | Yes | 4/4 | The latest report covers 1 January to 30 June 2026 and counts requests, such as 215 for inventory data [5]. | | Trust and audits | Security key for two-factor sign-in | Yes | 4/4 | Tuta supports U2F security keys such as a YubiKey for two-factor login; the page does not mention FIDO2 or WebAuthn [6]. | | Apps and access | Official apps | Windows, macOS, Linux, iOS, Android | 10/10 | Download section lists Android, iOS, Linux, Windows and macOS apps [7]. | | Apps and access | Works in standard mail programs | No | 0/8 | Tuta's own comparison table marks "Server IMAP support" as not available for Tuta Mail [8]. | | Mailbox | Your own domain | Yes | 5/5 | Revolutionary lets you use 3 custom domains; Legend 10 [1]. | | Mailbox | Mail storage on the cheapest paid plan | 20 | 5/5 | Revolutionary, the cheapest paid plan, has 20 GB [1]. | | Mailbox | Export your whole mailbox | Not published | 0/3 | Not published on the vendor's pricing page, which describes email import only [1]. | | Price | Free plan with an encrypted mailbox | Yes | 6/6 | The free plan is an encrypted mailbox with 1 GB [1]. | | Price | Cheapest paid plan | $3.36/mo | 6/10 | Revolutionary, €3 a month on yearly billing, taken from the page's price data and its family-mailbox line; includes taxes [1]. Converted at €1 = $1.1186 [9]. | ## Plans | Plan | Price | Per month (USD) | |---|---|---| | Free | Free [1] | $0 | | Revolutionary | €3/month, billed yearly [1] | $3.36 | | Legend | €8/month, billed yearly [1] | $8.95 | The pricing page shows euros and says prices include taxes. It also runs a 50% sale banner; we use the regular €3 and €8, which the page repeats for extra family mailboxes [1]. ## Strengths - Mail between Tuta users is encrypted automatically; others get password-protected mail [1]. - Address book and calendar are encrypted [1]. - Apps for Windows, macOS, Linux, iOS and Android [7]. - Publishes a transparency report with request counts for 2026 [5]. - The free plan includes an encrypted 1 GB mailbox [1]. ## Limits - Tuta's own comparison table marks server IMAP support as not available, so mail programs cannot connect [8]. - Custom domains need a paid plan; Revolutionary allows 3 [1]. - Free accounts get 1 GB, 1 calendar and 3 labels [1]. - Security keys are described as U2F, not FIDO2 or WebAuthn [6]. ## Vendor claims (not scored) - Tuta says its apps were audited by independent security experts before release [3]. ## Sources 1. [Tuta pricing](https://tuta.com/pricing), Tuta, accessed 2026-10-08 2. [Security](https://tuta.com/security), Tuta, accessed 2026-10-08 3. [Open source](https://tuta.com/open-source), Tuta, accessed 2026-10-08 4. [tutao/tutanota](https://github.com/tutao/tutanota), GitHub, accessed 2026-10-08 5. [Transparency report](https://tuta.com/blog/transparency-report), Tuta, accessed 2026-10-08 6. [Why U2F is important](https://tuta.com/blog/why-u2f-is-important), Tuta, accessed 2026-10-08 7. [Tuta home page](https://tuta.com/), Tuta, accessed 2026-10-08 8. [Email comparison](https://tuta.com/email-comparison), Tuta, accessed 2026-10-08 9. [Euro foreign exchange reference rates: US dollar](https://www.ecb.europa.eu/stats/policy_and_exchange_rates/euro_reference_exchange_rates/html/eurofxref-graph-usd.en.html), European Central Bank, accessed 2026-10-08