Email that keeps nothing on you.
Envelt encrypts every message with a key only you hold, records no IP addresses, keeps no logs, and asks for nothing but a username and a password. A free mailbox for everyone. Paid tiers in USDT.
No phone number. No recovery email. No card. Your address is you@envelt.com in under a minute.
Built so the server has nothing to give away.
Most "private" email still has a server that can read your mail and a log that knows when you were there. Envelt removes both.
Keys made in your browser
Your key pair is generated on your device. The private key leaves it only wrapped with a key derived from your password. The server can encrypt mail for you, never decrypt it.
No IPs, no logs, no timestamps
The web app never reads your IP. The mail server logs to nowhere. There is no record of when you signed up, logged in, or who wrote to whom.
Nothing to identify you
Username and password. No phone, no recovery address, no captcha vendor, no card. Payments are USDT transfers matched by amount, not by name.
Burner aliases
One click makes a random address on envelt.com or your own domain. Delete it when the newsletter gets annoying.
Your own domain
Bring any domain: DNS records with DKIM signing are generated for you. Mailboxes and forwards on it in minutes.
Tracking pixels never fire
HTML mail opens in a sandbox that blocks every remote load. Senders cannot see when or where you read.
Spam filtering without snitching
SPF, DKIM, DMARC and a classifier you train yourself. No blocklist lookups that hand sender IPs to third parties.
Mail apps, if you want them
IMAP and SMTP for Thunderbird, Apple Mail and friends. Opt-in per account, because it changes the trust model and we say so.
Reachable over Tor
The web app is mirrored as an onion service so you can use it without revealing your network location to anyone, including us.
How it works
Four steps, all of the sensitive ones on your device.
Pick a username
Your browser derives two keys from your password. One unlocks your private key; the other is the only thing the server ever sees.
Mail arrives, gets sealed
Incoming messages are encrypted to your public key in memory, before anything is written to disk.
You open it, here
The ciphertext travels to your browser and is decrypted there. Search and reading happen client-side.
Forward, or don't store at all
Forwarding addresses relay mail onward and keep nothing. Delete means gone, with the blob wiped from disk.
Simple pricing, paid in USDT.
A free private address for everyone. Paid tiers fund the service; there are no ads, no data deals, no investors asking for your data.
- 10 MB encrypted storage
- 1 address & burner aliases
- Custom domains with DKIM
- IMAP / SMTP for mail apps
- Zero-access encryption, no logs
- 1 GB encrypted storage
- 10 addresses & burner aliases
- Custom domains with DKIM
- IMAP / SMTP for mail apps
- Zero-access encryption, no logs
- 5 GB encrypted storage
- 50 addresses & burner aliases
- Custom domains with DKIM
- IMAP / SMTP for mail apps
- Zero-access encryption, no logs
Pay from any wallet on the configured networks. Each invoice is a unique amount; the plan activates when the transfer confirms. Transaction hashes are not kept.
What we can and cannot see
Honesty is part of the product. This is the full picture.
| Item | Envelt | Typical webmail |
|---|---|---|
| Stored mail | Ciphertext only | Readable by the provider |
| Your password | Never sent to the server | Sent on every login |
| IP addresses | Never read, never logged | Logged for months |
| Who mailed whom | Inside the ciphertext only | Indexed |
| Identity at signup | Username + password | Phone, recovery email |
| Mail in transit to others | Ordinary SMTP, TLS when available | Same |
| Mail you send | Plaintext for the moment it takes to relay | Stored in plaintext |
| Password reset | None: your key is your password | Yes |
Questions
What happens if I forget my password?
Your mail is gone. There is no reset because a reset would need a stored secret or a contact address, and both are things we refuse to hold. Use a password manager.
Can you read my mail?
Stored mail, no: the server only has ciphertext and your public key. Mail you send passes through the server in plaintext for the moment it takes to hand it to the recipient's server, as with any email provider. Mail arriving is plaintext in memory until it is encrypted, which happens before it touches disk.
Why does enabling IMAP change anything?
A mail app logs in with your password, so the server has to derive your key to serve it. It keeps that key in memory for that connection only, and the switch is off by default. If you only use the web app, leave it off and the server never holds your key.
How do payments work without an account?
You get an exact USDT amount to send. That amount identifies the payment. The plan activates when the transfer confirms. We keep the plan and its expiry, not the transaction.
Is this end-to-end encrypted with my contacts?
No. It is zero-access storage: your mailbox is encrypted to you. Messages between you and someone else's provider are ordinary email. For end-to-end, use PGP inside your messages as usual.
Where is the code?
The whole platform is a single Go binary plus Postfix, and the API and encryption scheme are documented so you can verify what the browser does. Ask us for the repository.
Get an address nobody can trace back to you.
Free forever for one mailbox. Takes less than a minute.