Tacitus Mail logo TacitusMail
Tacitus Mail Mail · Chat · Calls · Calendar · PGP E2E — one EU account

Your entire inbox, without Big Tech.

Tacitus Mail is an all-in-one private communications hub. Read your Gmail, Outlook, iCloud and @tacitusmail.com mailboxes in one unified inbox. Place encrypted audio and video calls, exchange 1:1 chat messages, keep a calendar, notes and contacts — all in the same app, hosted in the European Union, with zero ads and zero data mining.

Free to start · No credit card · EU-hosted · No ads · PGP encrypted with ProtonMail

🔒 tacitusmail.com/inbox
Inbox 12 new
  • Alex Rivera 9:41
    Q3 budget review
    Hi, I've attached the updated…
  • GitHub 8:02
    PR #342 approved
    Your pull request is ready…
  • Contact Zuc yday
    Invoice #2026-041
    Find attached the invoice…
  • Calendar Mon
    Weekly standup at 10:00
    Reminder from your calendar…
  • Fastmail Digest Mon
    This week in tech
    Top stories curated for you…
  • Proton Pass Sun
    Security alert
    New login from Safari on iPhone…

Live UI preview · The sidebar accent, background pattern and density are all customisable.

Works with every mailbox you already have.

Add Gmail, Outlook, iCloud, Yahoo, Proton Bridge, Zoho, Fastmail, GMX, Yandex or AOL in two clicks. Or plug in any custom IMAP/SMTP host. Everything lands in the same unified inbox.

Gmail
Outlook
iCloud
Yahoo
Proton
Z Zoho
FM Fastmail
GMX GMX
Y Yandex
AOL AOL

Or any standards-compliant IMAP/SMTP server. Credentials are encrypted at rest with AES before they touch the database.

More than email — unified inbox, encrypted chat, video calls, calendar.

One account, one sidebar, one notification stream. Mail from every provider you already use, plus chat, calls, calendar, notes and contacts — all talking to the same address book.

Unified inbox

Add Gmail, Outlook, iCloud, Yahoo, Proton, Fastmail — any IMAP/SMTP mailbox — next to your @tacitusmail.com address. One combined view across every account, conversation threading, filters and attachment scanning with ClamAV.

End-to-end chat

Real 1:1 messaging between Tacitus users, encrypted with the Olm double-ratchet. Our server only sees ciphertext — the plaintext is decrypted on your device. Keeps working on iOS with push notifications and an offline cache.

Audio & video calls

WebRTC peer-to-peer calls straight from the inbox. Media never touches our servers — just signalling — and every stream is protected with DTLS-SRTP. Native CallKit integration on iOS so incoming calls ring the lock screen.

Calendar · Notes · Contacts

Built-in CalDAV calendar with invite handling, rich-text notes, and an address book that auto-captures people you mail. Import your iPhone contacts in two taps. All cross-referenced with the unified inbox.

Pro-grade anti-spam

Every inbound message is scored by Rspamd against Spamhaus, SURBL, URIBL, SpamCop and Barracuda blocklists, plus Bayesian and neural network filters. Postscreen rejects known botnets at the TCP handshake before they waste a byte.

No ads. No mining. No AI training.

Your mail, chat, calls and calendar are not used to sell ads, train language models, or build a profile of you. Remote tracking pixels are stripped by default, external images are proxied, and there's no third-party JavaScript on the webmail.

Hosted in the EU

All data — mail, attachments, chat, calendar events, notes, contacts — lives on servers inside the European Union and is covered by GDPR. No secondary storage in US clouds, no CDN replication of private content.

Native iOS app

First-class SwiftUI app with CallKit integration, APNs push notifications, CallKit call handling, offline chat cache, contact import from the iPhone address book and a compose sheet that matches the web. The web UI works everywhere else.

From setup to first call in under a minute.

No servers to run, no command line, no migration script. Sign up, add the mailboxes you already have, and start using everything at once.

1

Claim your address

Pick a free [email protected] in 30 seconds. Inbox, Sent, Drafts, Spam and a 2 GB quota are provisioned automatically — no configuration wizard.

2

Plug in your other mailboxes

One-click presets for Gmail, Outlook, iCloud, Yahoo, Proton Bridge, Zoho, GMX, Yandex, Fastmail and AOL. Or hand-roll any IMAP/SMTP host. Credentials are encrypted at rest with application-level AES before they touch the database.

3

Mail · Chat · Call · Meet

Compose with a rich editor, start an encrypted 1:1 chat, tap the phone icon for an audio or video call, book a meeting in the built-in calendar. Same account, same sidebar, same notification stream — and on iOS, the same app.

What we do. What we will never do.

Email providers love weasel words. Here's the plain version — no "zero-knowledge" marketing, no PGP theater, just the actual product.

What Tacitus does for you
  • Deliver mail in and out of @tacitusmail.com with STARTTLS on every hop, DKIM signing and DMARC/SPF alignment
  • Encrypt your account password with Argon2id and your stored mailbox credentials with AES before writing to Postgres
  • Score every inbound message through Rspamd + Spamhaus + SURBL + Bayesian and drop obvious spam before it hits your inbox
  • Scan every outbound attachment with ClamAV
  • Strip remote tracking pixels from inbound HTML and block external images until you ask for them
  • Automatically encrypt outbound mail with PGP/MIME (RFC 3156) when the recipient publishes a public key via WKD or keys.openpgp.org — works transparently with ProtonMail, Fastmail, Tutanota and any OpenPGP-compatible provider
  • Encrypt your 1:1 chat end-to-end with the Olm double-ratchet — the server only sees ciphertext
  • Route your audio & video calls peer-to-peer via WebRTC with DTLS-SRTP — media never crosses our servers
  • Host everything — mail, chat, calls, calendar, notes, contacts — inside the European Union under GDPR
What Tacitus will never do
  • Serve ads inside your inbox, calendar or chat
  • Sell or rent your data to third parties
  • Train AI models on your mail, contacts, calendar or chat
  • Scan your mail to build an advertising profile
  • Load a single third-party JavaScript SDK into the web client
  • Forward copies of your data to US-based clouds

Honest caveat: unlike your chat, mail bodies are stored server-side (standard IMAP semantics) so search, sync and sorting work across devices. For recipients without a published PGP key, mail is delivered in plaintext over TLS — the industry standard. When the recipient has a key, we encrypt automatically and show a lock badge in your inbox.

PGP · OpenPGP · RFC 3156 · WKD

Email ProtonMail — it's automatically encrypted.

When you compose a message to any ProtonMail, Tuta, or OpenPGP-compatible address, Tacitus Mail automatically looks up their public key using the Web Key Directory (WKD) standard and encrypts with PGP/MIME (RFC 3156). Zero setup. No plugins. No key management.

Tacitus Mail — sender
  • Compose mail normally
  • WKD key lookup happens automatically
  • Message encrypted before leaving the server
PGP/MIME encrypted
-----BEGIN PGP MESSAGE-----
hQEMA5...
Only the recipient's private key can decrypt this
Travels over TLS too
ProtonMail / any OpenPGP
  • Receives PGP/MIME encrypted mail
  • Decrypts with their private key
  • Green 🔒 lock badge — end-to-end verified
Works both ways — when ProtonMail emails you

Tacitus Mail publishes your @tacitusmail.com public key via WKD at openpgpkey.tacitusmail.com. ProtonMail, Tuta and other WKD-aware senders fetch your key automatically and encrypt before sending. When the encrypted message arrives, Tacitus decrypts it server-side using your key and displays a green PGP-encrypted message badge in your inbox — exactly like ProtonMail shows to its users.

01

Key discovery

When you hit Send, Tacitus looks up the recipient's public key from their WKD endpoint, falling back to keys.openpgp.org. This happens in milliseconds and is completely invisible.

02

Automatic encryption

If a key is found, your message is wrapped in a PGP/MIME (RFC 3156) envelope before it leaves the server. You compose mail normally — we handle the cryptography.

03

Your key, published

Your @tacitusmail.com key is published at openpgpkey.tacitusmail.com so ProtonMail, Tuta and any WKD client can encrypt to you automatically — no action required on your part.

Automatic encryption with any provider supporting WKD or keys.openpgp.org

ProtonMail Tuta Tuta (Tutanota) FM Fastmail GMX GMX Tbrd Thunderbird + Enigmail 🔐 Any OpenPGP client

Built on a serious open stack.

No black boxes. Every piece of the stack is well-understood open source — the same tools that run the mail for Fortune 500s and Linux kernel maintainers.

P
Postfix
MTA · SMTP delivery
R
Rspamd
Anti-spam · Bayesian
Pg
PostgreSQL
Data store
Es
Elasticsearch
Full-text search
Re
Redis
Cache · pub/sub
C
ClamAV
Antivirus scan
F
FastAPI
Python async API
Sw
SwiftUI
Native iOS app
W
WebRTC
P2P voice & video
O
Olm
E2E chat ratchet
Ra
Radicale
CalDAV server
D
Docker
Blue/green deploy

Plus OpenDKIM for outbound signing, Unbound as a local DNSBL resolver, Coturn for WebRTC NAT traversal, and Let's Encrypt for TLS on every hop.

Why people pick Tacitus.

Three reasons we hear most often from early users.

I wanted out of Gmail without losing 15 years of archived mail. Tacitus let me plug in my Gmail IMAP side-by-side with a fresh @tacitusmail.com and migrate on my own schedule. The unified inbox is exactly what I was missing.
AN
Amelia N.
Freelance designer · Amsterdam
We stopped paying for Slack + Google Workspace + Zoom. One Tacitus account per teammate covers mail, 1:1 chat and video calls, and the calendar invites actually sync both ways. It's half the price and we finally own the data.
MK
Marco K.
Studio founder · Milan
The Rspamd + Spamhaus stack is the same kind I run for my own clients, pre-tuned and behind a friendly UI. I get maybe 2 pieces of spam a week and I've never had to set up a filter. For a privacy service, that's ridiculous.
SD
Sorin D.
Sysadmin · Bucharest

Composite quotes reflecting common feedback from early users. Personally identifiable details are not published.

Simple pricing. No surprises.

Half the price of the competition. Twice the storage where it counts.

Free

Private email for everyone.

€0 / forever

No credit card required

  • 2 GB storage
  • 1 @tacitusmail.com address + unlimited external accounts
  • Encrypted chat & video calls with other users
  • Calendar, notes and contacts built-in
  • Web client + native iOS app
Most popular

Plus

More storage, more aliases.

3.99 / month

Billed annually

  • 30 GB storage
  • 10 email aliases
  • 1 custom domain
  • Unlimited folders & labels
  • Priority support

Unlimited

For power users and families.

7.99 / month

Billed annually

  • 1 TB storage
  • 15 email aliases
  • 3 custom domains
  • Group video calls & meeting rooms
  • Priority Rspamd tuning + whitelist control
  • Everything in Plus

Need plans for your team? Contact sales for Business →

All prices in EUR. VAT added where applicable. Cancel any time.

Frequently asked questions

Everything you need to know about Tacitus Mail, PGP encryption, and how we compare to ProtonMail.

Is Tacitus Mail compatible with ProtonMail?
Yes. When you email a ProtonMail address, Tacitus Mail automatically looks up their public key via the Web Key Directory (WKD) standard and encrypts your message with PGP/MIME (RFC 3156) — no setup needed. ProtonMail also publishes your @tacitusmail.com public key automatically via WKD at openpgpkey.tacitusmail.com, so ProtonMail users can encrypt to you too.
Does Tacitus Mail support PGP end-to-end encryption?
Yes. Tacitus Mail supports automatic PGP/MIME (RFC 3156) end-to-end encryption for outbound email. When you send to a recipient who has published a PGP public key via WKD (Web Key Directory) or keys.openpgp.org, Tacitus automatically encrypts the message. No plugins, no key management, no setup required.
Is Tacitus Mail a ProtonMail alternative?
Yes. Tacitus Mail is a privacy-focused EU-hosted email service with automatic PGP/MIME encryption, similar to ProtonMail. It adds a unified inbox (import Gmail, Outlook, iCloud and any IMAP account), end-to-end encrypted chat, WebRTC peer-to-peer video calls, calendar, notes and a native iOS app — at a lower price. Unlike ProtonMail, Tacitus also lets you bring your existing mailboxes without switching.
Where is Tacitus Mail hosted?
All data — mail, attachments, chat, calendar events, notes and contacts — is stored on servers inside the European Union and covered by GDPR. There is no secondary storage in US clouds and no CDN replication of private content.
Does Tacitus Mail read my emails or use them for ads?
No. Tacitus Mail does not serve ads, scan your mail for advertising purposes, sell your data to third parties, or train AI models on your content. Remote tracking pixels are stripped from inbound HTML, external images are blocked until you ask for them, and there is no third-party JavaScript in the web client.
What is WKD (Web Key Directory) and does Tacitus Mail use it?
WKD (Web Key Directory, RFC 9484) is an open standard that lets email providers publish PGP public keys at a well-known URL under their domain. Tacitus Mail publishes every @tacitusmail.com user's key at openpgpkey.tacitusmail.com, and looks up recipients' keys automatically before sending. This is the same mechanism ProtonMail, Tuta and Fastmail use for automatic encryption.

More questions? Visit our full FAQ page or email us.

Move your entire inbox to the EU today.

Claim your @tacitusmail.com, plug in your existing Gmail or Outlook, and make your first encrypted call in under a minute.