cyphermail
Sign in Create an account

Private mail, sealed to your key

An address for everything.
A mailbox no one else can read.

Give every shop, newsletter and stranger its own address. anything_name@this domain exists the moment it is used — no inbox to create, no list to keep — and every message is sealed to your key before it is stored, so the server never holds mail it can read.

Create an account Try the public demo

No CAPTCHA, no phone number, no e-mail address to prove. Your browser solves a small puzzle instead.

Features

Aliases that already exist

Anything before an underscore and your handle reaches you. Hand out a new address at every signup form; burn one and the sender is refused in the same connection, with no bounce that names your real mailbox.

Sealed at rest

Each message is encrypted to your OpenPGP key the moment it arrives. Subjects, bodies, headers — sealed. The key is made in your browser and never leaves it unsealed.

Search that stays with you

The search index is built in your browser from your decrypted mail and stays there. The server cannot search your mail because it cannot read it.

Nothing to track you with

Remote images load only when you ask. Outgoing mail is stripped of your client, your IP and your time zone before it leaves. Sign-up asks for a login and a solved puzzle, nothing else.

Bring your own client

IMAP and SMTP with app passwords, autoconfig for the usual clients, and the same OpenPGP key in your own keyring if you prefer it there.

Hooks, not surveillance

Get a notification when mail lands on an alias, or forward it — with nothing but the alias name disclosed unless you opt that alias in.

How it works

  1. 1
    Pick a login. Your browser solves a short proof-of-work puzzle — that is the whole of the signup wall — and your mailbox handle is made for you.
  2. 2
    Your key is born in the browser. Sealed under your password and again under a 24-word recovery phrase you are shown once. The server stores the sealed copies and cannot open either.
  3. 3
    Use an address for each thing. shop_name, bank_name, anything_name. Mail arrives, is sealed to your key, and is filed by the alias it came on.
  4. 4
    Read anywhere. The web client decrypts in your browser; a desktop client decrypts with your own key. Sending opens 24 hours after signup, for everyone, with no exceptions.

What is hidden, and what is not

Mail is an old protocol and some of it cannot be sealed. This is the honest list.

Hidden

  • Bodies, subjects and headers of stored mail
  • Your IP address and your client, in anything you send
  • Your real mailbox, behind every alias you hand out
  • Your other aliases, from anyone who knows one
  • Your search terms — the index never leaves your browser

Not hidden

  • The envelope: who sent to which address, and when — SMTP needs it in the clear
  • Message sizes, timing and folder counts
  • Mail in transit inside the platform for the moment it takes to seal it
  • The sending server's IP, to whoever you write to
  • A message someone else stored unsealed, on their side

Plans

Free

Receive without limit on every alias. Storage to a cap. Replies only, a few a day: a free account can answer mail it received, and cannot start a conversation — that is what keeps the free tier from becoming a spam cannon.

Pro

More storage, outbound to anyone, your own domain, hooks. Paid in credits, bought with crypto, no name attached. Coming with the billing release; the platform tells you when it is on.

Every account, free or paid, waits 24 hours after signup before it can send. Nothing lifts the hold.

See it before you sign up

The demo is the real system with the door open: the same client, the same sealing, the same aliases, and a key that is public on purpose. Send mail to anything_demo@… and watch it arrive.

Open the public demo

Anyone can read the demo inbox. Do not use it for anything you care about.