Tor vs Secure Email: When to Use Each for Private Communication

Using Tor to access email provides: network anonymity (the email provider cannot see your real IP address), bypass of ISP-level email provider blocking (in countries that block access to specific email services), and protection against network surveillance that logs which email services you access. What Tor does NOT provide for email: Tor does not encrypt email content (your email provider can still read unencrypted emails in transit or in storage), Tor does not protect your email identity (your account username and content are visible to the email provider), and Tor does not prevent the recipient's email provider from seeing message content.

PGP (Pretty Good Privacy) encrypts email content so only the intended recipient can decrypt it. The email provider (whether Gmail, ProtonMail, or any other) cannot read PGP-encrypted content. Implementation: sender encrypts email using recipient's public key, recipient decrypts using their private key. Tools: Thunderbird + Enigmail extension (desktop), Kleopatra (Windows key management), GPG on Linux/Mac. PGP addresses what Tor does not: content privacy even from the email provider. Tor addresses what PGP does not: metadata privacy (hiding which email provider you access and your IP address from network observers). Combined: PGP-encrypted emails accessed via Tor provides both content privacy and network anonymity.

ProtonMail provides a dedicated .onion address (proton.onion) for accessing their service via Tor Browser. Benefits of using the .onion address: the connection terminates inside the Tor network (not at an exit node), providing end-to-end protection between your Tor client and ProtonMail's servers. ProtonMail encrypts emails between ProtonMail users at rest (zero-knowledge encryption). For emails between ProtonMail and external email providers: end-to-end encryption only if PGP is configured. ProtonMail via .onion address provides: IP anonymity from ProtonMail, encrypted storage of email content, and bypass of any Tor exit node that might intercept the connection.

Riseup email (riseup.net): operated by a US-based collective focused on social justice and activist communities since 1999. Publishes warrant canary. Requires an invite code. Strong anti-surveillance policy. Onion address available. Suitable for: activists, organizers, journalists who want an email provider explicitly aligned with privacy and social justice values. ProtonMail: Swiss-based company, freemium model, widely used, independently audited, strong privacy policy. Onion address available. Suitable for: general privacy-focused users who want a commercial provider with strong legal protections and broader usability. Both provide: encrypted storage, .onion access, privacy-respecting policies. Choice depends on community alignment and organizational trust preferences.

Email privacy extends to account acquisition. Signing up for an email provider with a real IP address links the account creation to your location even if you later access it via Tor. For anonymous accounts: use Tor Browser when creating the account (provider sees Tor exit IP), use a temporary email address for any verification (to avoid linking accounts), choose a provider that does not require phone verification (ProtonMail and Tutanota may require phone on free accounts - paid accounts or specific conditions avoid this). Metadata reduction: use email minimally, send encrypted content, avoid personal information in email body, use email for encrypted communication rather than as a general-purpose communication channel.