The webmail, console and site are public. Anyone can check how they work.
No ads, no analytics, no third-party scripts in the product.
Senders can’t see when you open their mail.
Every connection to your mail uses TLS. Encryption at rest for stored mail is on the roadmap.
Protect the console with an authenticator app.
Each mail app gets its own password you can revoke.
Account admins see every change, including any staff action.
Your mail and contacts, in standard formats, whenever you want.
Messages are cleaned before they’re shown and rendered in an isolated frame with scripts off. Remote content waits for your permission.
Two-step sign-in protects the console. Mail apps get their own app passwords, so a lost phone is one revoke away from safe.
We publish a regular report counting the requests for user data we receive and how we answered them — see the transparency report. What your subscription pays for is on where the money goes.
Please tell us privately at security@anhourmail.com before sharing it. Our disclosure policy is in the repository’s SECURITY.md. The full Privacy Policy covers what we store and why.
Create an account, take a free @anhourmail.com address, and connect your own domain whenever you’re ready.