Why Standard Email Is Not Private
Gmail, Outlook, and Yahoo log your IP, the time of every action, and to/from metadata. This is routinely handed over to law enforcement without a court order in many jurisdictions. Even with PGP encryption, metadata (who emailed whom, when) remains fully visible. Privacy email providers offer: minimal IP logging, no phone requirement, E2E or zero-access encryption, and some offer .onion addresses so the connection never leaves Tor.
ProtonMail and Its .onion Address
ProtonMail (protonmailrmez3lotccipshtkleegetolb73fuirgj7r4o4vfu7ozyd.onion) - Swiss jurisdiction means data requests require a Swiss court order.
Pros: E2E encryption by default for Proton-to-Proton email, zero-access encryption for stored mail, native .onion address, free tier. Cons: account creation requires email/phone verification, metadata visible to Proton. Rating: ★★★★☆
RiseUp (.onion native)
RiseUp (vww6ybal4bd7szmgncyruucpgfkqahzddi37ktceo3ah7ngmcopnpyyd.onion) operated by an activist collective since 1999, designed for organizers, journalists, and activists.
Pros: strong no-logging policy, native .onion, community-operated. Cons: US jurisdiction, requires invitation or waiting period. Rating: ★★★★☆
Tutanota, Disroot, and Elude.in
Tutanota (Germany): built-in E2E encryption, no onion address, German jurisdiction, free tier. Rating: ★★★☆☆.
Disroot (Netherlands): privacy-focused collective, no onion, standard PGP, free. Rating: ★★★☆☆.
Elude.in: minimal interface, .onion accessible, no JS required, no phone needed. Rating: ★★★☆☆.
| Provider | Onion URL | Jurisdiction | Free Tier | PGP Support | Rating |
|---|---|---|---|---|---|
| ProtonMail | Yes (.onion) | Switzerland | Yes | Yes | ★★★★☆ |
| RiseUp | Yes (.onion) | USA | Invite | Yes | ★★★★☆ |
| Tutanota | No | Germany | Yes | Built-in E2E | ★★★☆☆ |
| Disroot | No | Netherlands | Yes | Yes | ★★★☆☆ |
| Elude.in | Yes | Unknown | Yes | Partial | ★★★☆☆ |
When to Self-Host Your Own Email
For maximum control, self-hosting on an offshore VPS gives you total control over logs and configuration. Trade-offs: deliverability is difficult, spam filtering requires ongoing attention, maintenance is your responsibility.
AnubizHost offshore VPS in Romania and Iceland is a good base. See also our obfs4 bridge guide if you want to route admin access over Tor.
Frequently Asked Questions
Is ProtonMail actually private?
ProtonMail provides genuine E2E encryption for email content between Proton users and zero-access encryption for stored email. Metadata (who emailed whom and when) is visible to Proton and can be disclosed under a Swiss court order.
Can I receive email from regular addresses at these providers?
Yes. All these providers receive email from standard SMTP senders. E2E encryption only applies when both parties use the same system or exchange PGP keys.
Why does RiseUp require an invitation?
The invitation requirement limits the user base to people with existing community connections, reduces spam and abuse, and preserves the collective's ability to manage the service sustainably.