Private email hosting for a domain you own.
Paid plans provide managed delivery, encrypted storage, separate mailboxes and unlimited aliases for your household or founder-run team.
Keep the addresses if you leave.
Get an @thelemail.com address with 1 GB.
Stored message content remains ciphertext.
You can run a mail server. Keeping it trusted is the job.
Thelemail operates the mail infrastructure. You keep the domain, decide who gets each address and move it whenever you choose.
The work starts after the first delivery
Queues, receiving infrastructure, abuse controls, DNS checks and sender reputation all need attention long after the server first works.
Conventional hosting is server-readable
Most hosted mail can be read by the service by design. Thelemail stores mailbox content as ciphertext, while OPAQUE unlocks a wrapped account key on the user's device.
Office suites make email the add-on
You pay per seat for a bundle when the thing your household or company actually needs is dependable email on its own domain.
The infrastructure behind your address, managed.
Your members get ordinary email. You manage domains, mailboxes and addresses while Thelemail handles authenticated delivery across Thelemail and the wider email network.
Stored mail your provider cannot read.
Mailbox content is encrypted for storage. Readable private-key material stays on your device.
Read the encryption modelManaged mail operations
We run receiving, queues, sending infrastructure, reputation controls, DNS checks and spam classification.
See how delivery is managedExternal encryption with WKD and OpenPGP
Mail between Thelemail accounts is encrypted end to end. For outside mail, the web client discovers recipient OpenPGP keys through WKD, and Thelemail publishes user keys through WKD so compatible senders can encrypt inbound. Without a usable key, mail uses standard SMTP with TLS where supported.
See internal and external encryptionUnlimited aliases
Paid plans include unlimited aliases; a workspace anti-abuse guardrail applies. Create addresses for services and roles, then route each one to the member you choose.
How aliases workShared addresses, private inboxes
Send hello@ or bills@ to selected members. Each gets a copy and sends with their own encryption key.
Aliases and shared addressesConnect your domain without a blind cutover
Verify ownership, prepare sending and create every recipient before changing MX. The wizard keeps checking your records after the move. No domain yet? Start with an @thelemail.com address and bring one later. If you leave, export your mail and move the domain by changing MX.
Explore custom-domain hostingMove the domain in the right order.
Setup is staged around the moment mail begins arriving here. Existing mail keeps flowing while you prepare.
Prove ownership
Add one TXT record. Mail keeps flowing to your current provider while Thelemail verifies the domain.
Prepare sending
Publish DKIM, SPF and DMARC without changing where incoming mail is delivered.
Create every recipient
Add each private mailbox, personal alias and shared address before the domain receives mail here.
Change MX when ready
Route incoming mail only after every recipient exists. Thelemail keeps checking the records afterward.
Built for the person who already runs the domain.
The first buyer is the technical domain administrator, often a homelabber, a household's technical member or a founder. You manage the domain, members and addresses. Everyone else gets a private inbox and never has to touch DNS or encryption keys.
Your household
Give each person an address on the family domain. Keep bills, schools and household accounts on shared addresses without sharing passwords.
- A separate private inbox for every member
- Shared addresses for the things you run together
- One flat yearly price for up to six mailboxes
Your small team
Give founders and early hires mailboxes on the company domain. Keep addresses such as hello@ and invoices@ with the people who handle them.
- Private mailboxes for each founder and employee
- Shared role addresses without shared passwords
- Roles, audit logs and clean onboarding or offboarding
Provider-blind storage with explicit boundaries.
Subscriptions fund the service. Stored mailbox content stays outside advertising and AI training. The client and threat model show what is encrypted, while the limits stay explicit.
No ads. No training.
We never scan your stored mail for advertising, and never use it to train AI.
See how data is handledZero-access at rest
Stored message content is ciphertext. OPAQUE unlocks a wrapped account key on your device without sending us your password.
Read the threat modelOpen-source client
The production browser and macOS desktop apps, the transparency log behind our key directory and the local mailbox export tool are published under AGPL-3.0. The mail service stays managed.
Inspect the published codeStart free. Add space or your own domain later.
Free and paid plans use the same encryption model. Choose the storage and addresses you need.
Free Family includes up to six people, 1 GB each and one shared @thelemail.com address. No payment method or custom domain needed.
- 1 mailbox, 1 GB
- One @thelemail.com address
- Same encryption model
- 1 mailbox, 15-50 GB
- 1-3 custom domains
- Unlimited aliases
- Up to 6 private mailboxes
- 1 GB each on Free Family
- 1 shared @thelemail.com alias free
- From 3 mailboxes, 25-100 GB each
- Roles, audit logs and priority support
- Prorated when people join or leave
Free is for one person. Free Family includes up to six people, 1 GB per mailbox and one shared @thelemail.com alias. Custom domains and additional aliases require a paid plan. Paid plans are billed monthly or annually, and monthly billing is available on this website only. Listed euro prices for direct website purchases by consumers are final totals and include any VAT Thelemail must collect; no tax is added to those totals at checkout. App Store and Google Play show their localized annual prices before purchase. Personal and Family are flat prices; Business is per mailbox. Direct web Business changes are prorated mid-term. Founder rate-lock covers annual subscriptions only, where expressly offered.
Questions domain administrators ask first.
Concrete answers about domains, members, aliases, migration and encryption boundaries.
Do I need to own a domain?
No. Free and Free Family use @thelemail.com. Free Family brings up to six people together without a custom domain. Paid plans let you use a domain you own; Business member accounts require a connected custom domain.
Who has to manage DNS?
Only the domain administrator. The setup wizard generates and checks ownership, SPF, DKIM, DMARC and MX records. Other members use their mailbox without touching DNS.
Does every member get a private mailbox?
Yes. Each household or team member signs into a separate private inbox. Shared addresses route a copy to the selected members, so nobody has to share a password.
Are aliases unlimited?
Free Family includes one shared @thelemail.com alias for the household. Paid plans include unlimited aliases, with limits on abusive or automated creation. The personal Free plan does not include aliases.
How does a domain move to Thelemail?
Verify ownership, prepare sending records, create every recipient, import existing mail, then change MX. Your current provider keeps receiving mail until the final cutover.
What can Thelemail see?
Stored message content is encrypted as ciphertext. Email routing still exposes envelope metadata such as sender, recipient and timing. The security page documents every boundary.
Corrections to the usual claims.
Four secure-email claims worth examining closely. Here they are struck out, followed by what Thelemail can actually say.
"All your email is end-to-end encrypted."
End-to-end encrypted between Thelemail accounts. For outside mail, the web client discovers recipient OpenPGP keys through WKD, and Thelemail publishes user keys through WKD so compatible senders can encrypt inbound. Without a usable key, mail uses standard SMTP with TLS where supported. Encrypted for storage, always.
"We can never see anything."
Envelope metadata (who emails whom, and when) is visible. That's how email works. We don't pretend otherwise.
"Military-grade. Unbreakable. 100% private."
Standard, well-understood encryption, described plainly. No superlatives we can't stand behind.
"Trusted by millions · 99.99% uptime."
No invented numbers. We publish measured evidence when it is available.
Every limit, in full, on the threat model page.
Fay ce que vouldras. The only rule of the Abbey of Thélème. Rabelais, Gargantua, 1534.
We wrote down what we can't protect.
The threat model spells out what is encrypted, what is not, and what a server compromise would and would not expose. The gaps we haven't closed yet are listed with it.