encrypted email service · Tutao GmbH

Tuta Mail

German encrypted mailbox that also encrypts contacts and calendar, with open-source apps and a free plan.

73/100

#2 of 9 encrypted email services
Facts checked 8 Oct 2026

In short

The free plan has a 1 GB encrypted mailbox¹.
Revolutionary costs about €3 a month on yearly billing, with 20 GB and 3 custom domains¹.
Address book and calendar are encrypted, not only mail¹.
The transparency report covers 1 January to 30 June 2026⁵.
Client code for all Tuta apps is public on GitHub under GPLv3^3,4.

Tuta suits people who want everything encrypted, including contacts and calendar, in open-source apps on all five systems^1,3,7. Revolutionary adds 20 GB and custom domains for about €3 a month¹. The catch: Tuta's own table shows no IMAP access, and the one outside pen test it names has no date^3,8.

Best for: People who want contacts and calendar encrypted too, and are fine using Tuta's own apps instead of a mail program.

Where the points come from

Encryption27 of 27

Trust and audits14 of 26

Apps and access10 of 18

Mailbox10 of 13

Price12 of 16

Encryption 27 of 27 points

Rule	What is published	Points
Stored mail the provider cannot read	YesTuta says it has zero access to the mailbox, all data is encrypted, and only sender and recipient can read mail¹.	10 / 10
Automatic end-to-end encryption between its own users	YesThe plan table says all emails between Tuta users are automatically encrypted¹.	8 / 8
Encrypted mail to other providers	YesYou can exchange encrypted email with anyone through a shared password¹.	6 / 6
Encrypted contacts or calendar	YesThe plan table says the address book and calendar are encrypted¹.	3 / 3

Trust and audits 14 of 26 points

Rule	What is published	Points
Independent audit since 2024	Not publishedOpen-source page names SySS GmbH as a pen tester but gives no date or published report³.	0 / 8
Open-source apps	YesClient code for all Tuta apps is public on GitHub under GPLv3^3,4.	6 / 6
SOC 2 Type II or ISO 27001	Not publishedSecurity page names ISO 27001 only for its German data centres, not for Tuta itself².	0 / 4
Transparency report	YesThe latest report covers 1 January to 30 June 2026 and counts requests, such as 215 for inventory data⁵.	4 / 4
Security key for two-factor sign-in	YesTuta supports U2F security keys such as a YubiKey for two-factor login; the page does not mention FIDO2 or WebAuthn⁶.	4 / 4

Apps and access 10 of 18 points

Rule	What is published	Points
Official apps	Windows, macOS, Linux, iOS, AndroidDownload section lists Android, iOS, Linux, Windows and macOS apps⁷.	10 / 10
Works in standard mail programs	NoTuta's own comparison table marks "Server IMAP support" as not available for Tuta Mail⁸.	0 / 8

Mailbox 10 of 13 points

Rule	What is published	Points
Your own domain	YesRevolutionary lets you use 3 custom domains; Legend 10¹.	5 / 5
Mail storage on the cheapest paid plan	20Revolutionary, the cheapest paid plan, has 20 GB¹.	5 / 5
Export your whole mailbox	Not publishedNot published on the vendor's pricing page, which describes email import only¹.	0 / 3

Price 12 of 16 points

Rule	What is published	Points
Free plan with an encrypted mailbox	YesThe free plan is an encrypted mailbox with 1 GB¹.	6 / 6
Cheapest paid plan	$3.36/moRevolutionary, €3 a month on yearly billing, taken from the page's price data and its family-mailbox line; includes taxes¹. Converted at €1 = $1.1186⁹.	6 / 10

The rule behind each line: how we score encrypted email services.

Plans and prices

As the vendor lists them, before tax. Prices are in US dollars unless the plan shows euros; the points use US dollars, with euros converted at the ECB rate.

Plan	Price as listed	Per month	Notes
Free1 person	Free¹	$0	1 GB, 1 calendar, 3 labels
Revolutionary1 person	€3/month, billed yearly¹	$3.36	20 GB, 3 custom domains, 15 extra addresses; page shows a 50% sale banner
Legend1 person	€8/month, billed yearly¹	$8.95	500 GB, 10 custom domains, 30 extra addresses

The pricing page shows euros and says prices include taxes. It also runs a 50% sale banner; we use the regular €3 and €8, which the page repeats for extra family mailboxes¹.

Strengths

Mail between Tuta users is encrypted automatically; others get password-protected mail¹.
Address book and calendar are encrypted¹.
Apps for Windows, macOS, Linux, iOS and Android⁷.
Publishes a transparency report with request counts for 2026⁵.
The free plan includes an encrypted 1 GB mailbox¹.

Limits

Tuta's own comparison table marks server IMAP support as not available, so mail programs cannot connect⁸.
Custom domains need a paid plan; Revolutionary allows 3¹.
Free accounts get 1 GB, 1 calendar and 3 labels¹.
Security keys are described as U2F, not FIDO2 or WebAuthn⁶.

What Tutao GmbH says

Vendor claims. We show them, but they earn no points.

Tuta says its apps were audited by independent security experts before release³.

Other encrypted email services

1
Proton MailPeople who want a free encrypted mailbox that grows into a paid one with custom domains and Outlook or Thunderbird access
85/100
$3.99/mocheapest paid plan
3
Forward EmailPeople with their own domain who want IMAP access and a low price
56/100
$3/mocheapest paid plan
4
mailbox.orgPeople who want to read their mail in Thunderbird or Outlook and switch on encryption themselves
49/100
$1.12/mocheapest paid plan
5
Atomic MailPeople who want a free encrypted mailbox and apps on four systems
47/100
$5/mocheapest paid plan

Tuta Mail vs Proton Mail · Tuta Mail vs Forward Email · All 9 encrypted email services

Sources

Tuta pricing, Tuta. Accessed 8 Oct 2026.
Security, Tuta. Accessed 8 Oct 2026.
Open source, Tuta. Accessed 8 Oct 2026.
tutao/tutanota, GitHub. Accessed 8 Oct 2026.
Transparency report, Tuta. Accessed 8 Oct 2026.
Why U2F is important, Tuta. Accessed 8 Oct 2026.
Tuta home page, Tuta. Accessed 8 Oct 2026.
Email comparison, Tuta. Accessed 8 Oct 2026.
Euro foreign exchange reference rates: US dollar, European Central Bank. Accessed 8 Oct 2026.

Website: tuta.com · Markdown version · We are not affiliated with Tutao GmbH.