Skip to content
Email Tools — An Independent Directory —
Tuta (Tutanota) logo

Tuta (Tutanota)

Tuta (formerly Tutanota) is an open-source, end-to-end encrypted email service and calendar based in Germany, with quantum-resistant encryption, a free tier, and paid plans for individuals and businesses with no advertising.

Our take

Tuta is Proton Mail’s closest competitor in the encrypted email space, with a meaningful technical differentiator: it encrypts email subjects and calendar event titles, not just message bodies, and it has implemented quantum-resistant encryption algorithms. For users evaluating privacy-first email, the Tuta vs. Proton choice comes down to three factors: encryption protocol (Tuta’s proprietary vs. Proton’s OpenPGP-compatible), client availability (Tuta has desktop apps for Linux, Windows, and Mac; Proton requires Bridge on desktop), and pricing (Tuta’s free tier is comparable, business pricing is competitive).

The hard structural limit is interoperability. Tuta uses its own encryption protocol, not OpenPGP. You cannot import existing PGP keys. When you email non-Tuta users with encryption enabled, they access the message via a web link and a shared password — which works, but adds friction for business workflows where your counterparties are on Gmail.

What stands out

Subject and calendar encryption. Most encrypted email services protect the message body but send subjects in plaintext. Tuta encrypts subjects, body, attachments, and calendar event titles. This closes a metadata leak that most services ignore.

Quantum-resistant algorithms. Tuta has implemented post-quantum cryptography in advance of quantum computing becoming a practical threat. Few providers are at this stage; most are still on pre-quantum RSA/ECC schemes.

Full open-source stack. Both client and server-side code are published on GitHub. This is a stronger transparency commitment than most encrypted services, which open-source only the client.

Where it falls short

The proprietary protocol means no standard IMAP/SMTP access. You cannot use Tuta with Thunderbird, Apple Mail, or Outlook — you must use Tuta’s own apps or web interface. For users who want encrypted storage with their existing client, Proton Bridge (requires paid Proton plan) offers that path; Tuta does not.

Who should pick Tuta

Pick Tuta if you want a privacy-first email service where you control the encryption, are comfortable with Tuta’s own apps, and value subject-line and calendar encryption above IMAP compatibility. Use Proton if OpenPGP interoperability or native client support (via Bridge) matters more.

References

Pros

  • Encrypts email subjects and calendar event titles, not just message bodies — a meaningful step beyond most encrypted services
  • Quantum-resistant encryption is forward-looking; few providers have implemented post-quantum algorithms yet
  • Fully open-source — both client and server-side code are published and independently auditable
  • German GDPR jurisdiction and no advertising model means no commercial incentive to analyze your data
  • Free plan is permanent and functional for a private address

Cons

  • End-to-end encryption to non-Tuta addresses requires the recipient to access messages via a link and password — adds friction for business use
  • No import of existing PGP keys — Tuta uses its own encryption protocol, not OpenPGP, which limits interoperability
  • Search across encrypted messages is limited; full-text body search is not available server-side
  • No native desktop app with full IMAP/SMTP — Tuta uses its own protocol, not a standard email stack
  • Free plan storage (1 GB) is tight by modern standards for a primary email account

Features

  • End-to-end encryption of email subjects, bodies, and attachments by default
  • Quantum-resistant encryption algorithms for future-proof security
  • Encrypted calendar with event details stored securely
  • Custom domain support on paid plans
  • Unlimited email aliases on paid plans
  • Two-factor authentication (TOTP and U2F/FIDO2)
  • Open-source codebase (client and server-side code published on GitHub)
  • Offline access on desktop and mobile apps
  • Multi-user accounts with admin controls (Business plans)
  • Smart filters and automated email rules
  • Tracking-pixel blocker and spam protection built-in
  • Native apps for iOS, Android, Windows, Mac, and Linux