Tools · Chapter 5

Encrypted Email Providers

Six providers by encryption model, jurisdiction and free tier.

Encrypted Email Providers
ProviderEncryptionJurisdictionFree tierMy verdict
Proton MailE2E between Proton users, at-rest encryption otherwiseSwitzerlandYes (1GB)My recommendation. Swiss privacy law, zero-knowledge encryption, open source clients, bridge for desktop email clients. The gold standard.
Tutanota (Tuta)E2E between Tuta users, at-rest otherwiseGermanyYes (1GB)Excellent alternative. Strong German privacy law, fully open source, competitive pricing. Calendar included.
FastmailAt-rest encryption, no E2EAustraliaNoPrivacy-respecting but not zero-knowledge. Good for those who need full email client compatibility without privacy compromise. Not for sensitive communications.
MailfencePGP-based, at-restBelgiumYes (500MB)Solid option, Belgian law. Less polished than Proton/Tuta but technically sound.
GmailIn-transit onlyUSA (CLOUD Act)YesGoogle reads your email to serve ads and provide 'Smart' features. Do not use for anything you consider private.
Outlook/HotmailIn-transit onlyUSA (CLOUD Act)YesMicrosoft reads your email. Marginally better than Gmail but not meaningfully private.

Reproduced verbatim from The Privacy Diet, Chapter 5 — “Encrypted Email Providers”. The book explains the reasoning behind each verdict.