The MOST private email service

Summary

The video explains why email is difficult to make private: it was not designed with strong security, and its underlying protocols have been supplemented with protections rather than rebuilt from the ground up. Because email remains closely tied to work, personal communication, account sign-ups, and password resets, the video focuses on choosing a safer provider rather than abandoning email altogether.

What to Look for in an Email Provider

• Minimal data collection: Providers may retain metadata such as sender and recipient, message time, subject, message size, and IP address. Metadata can reveal sensitive patterns even when message contents are encrypted.
• Transport-layer encryption (TLS): TLS protects email while it travels between systems, provided the receiving service supports it. It does not prevent the provider from reading stored messages.
• Zero-access encryption: Messages are encrypted while stored, so the provider cannot ordinarily read their contents. The provider may still handle encryption or decryption, creating a brief point of access.
• End-to-end encryption (E2EE): Messages are encrypted and decrypted on users’ devices, so the provider receives encrypted content. In practice, E2EE works only when the communicating parties can use compatible encryption. Depending on the service, email subject lines may remain exposed.

Provider Comparison

• Gmail, Outlook, and Yahoo: The video says these services use TLS by default when the recipient’s service supports it, but can access message contents. It argues that this makes them unsuitable for people whose priority is privacy, despite their convenience and features.
• Proton Mail: Presented as a popular, relatively polished privacy-focused option, Proton Mail offers mobile apps, encrypted contacts and calendars, a free tier, and paid plans. Proton Mail Bridge lets users access their accounts through desktop clients such as Outlook, Thunderbird, or Apple Mail.

Messages between Proton Mail users—or to recipients with a published PGP key—can be end-to-end encrypted. Messages to other providers may not be. The video notes that subject lines are not encrypted and that Proton Mail retains some metadata, including communication patterns and, unless users opt out, IP addresses. It also discusses the risks of relying on browser-delivered code for encryption, particularly for people who may be specifically targeted.

• Tutanota: Tutanota offers free and paid plans, mobile apps, a desktop client, encrypted calendars and contacts, and encryption of email subjects. The video says it deletes collected metadata after seven days and does not log IP addresses by default, but notes exceptions involving Tor or VPN use and valid court orders.

Tutanota supports searching encrypted mail using a locally created search index. It does not support standard PGP, so sending encrypted messages to non-Tutanota users requires sharing a password through another secure channel. It also cannot be used with regular email clients.

• Smaller providers: Posteo, Elude.in, Riseup, and CounterMail are mentioned as more niche, less polished alternatives that may retain less metadata. Some support Tor onion services. Many rely on users to configure PGP or tools such as Mailvelope rather than offering seamless end-to-end encryption.

Practical Guidance and Trade-Offs

The video recommends choosing a provider based on your own risk profile. Proton Mail and Tutanota are presented as accessible options with different privacy trade-offs, while smaller providers may suit technically experienced users seeking less metadata retention.

Hosting your own email server is described as a high-privacy option, but it is technically demanding and does not change email’s fundamental design limitations.

For particularly sensitive communications, the video suggests considering secure messaging apps designed for privacy, such as Signal, Wire, or Wickr, instead of email.

Guides and Resources Mentioned

• The Freedom of the Press Foundation has an article on strengthening Proton Mail’s default settings.
• The video refers to a 2018 study discussing risks related to Proton Mail’s browser-based encryption.
• Self-hosting an email server is mentioned as a possible topic for a separate guide.

Main Speakers and Sources

The video is delivered by a narrator. It cites Edward Snowden on email’s security limitations and the significance of metadata, and refers to Proton Mail and Tutanota policies, transparency information, and a Freedom of the Press Foundation article.