Tuta is an encrypted email service with calendar and contacts. Tuta is an email service with built-in end-to-end encryption for mail, calendar entries and contacts, usable through open-source apps on web, desktop and mobile. Its operator, Tutao, runs the hosted service on its own servers in Germany and offers a free tier alongside paid Revolutionary and Legend plans. The client code is published under GPLv3 at tutao/tutanota on GitHub.[1][2]
Quick verdict
Encrypted hosted mail with open-source apps and a usable free tier. Tuta suits readers who want end-to-end encrypted email, calendar and contacts without tracking, delivered through open-source GPLv3 clients with German hosting. Its free tier covers basic private mail, while custom domains and larger storage need a paid plan. It is not suitable for anyone who needs to self-host the server.[1][2][3]
What Tuta does
Mail, calendar and contacts are end-to-end encrypted. Tuta encrypts the mailbox, calendars and address book end to end, so only sender and recipient can read the content. Mail between Tuta users is encrypted automatically, and mail to outsiders can be exchanged encrypted through a shared password.[1][2]
Open-source GPLv3 clients on every major platform. All Tuta clients for Windows, macOS, Linux, Android, iOS and the web are published under GPLv3 in the tutao/tutanota repository, with F-Droid availability and self-built captcha and push services instead of closed-source third-party integrations.[1][2][3]
Paid plans add domains, aliases and storage. Revolutionary adds 20 GB of storage, 15 extra addresses and 3 custom domains; Legend raises this to 500 GB, 30 extra addresses and 10 custom domains, with unlimited calendars, labels and inbox rules on both.[1]
Login and hosting protections are documented. Two-factor authentication via TOTP or U2F is available on all clients, and data is stored on Tuta's own servers in ISO 27001 certified data centers in Germany.[1][2]
Who it fits
Individuals leaving ad-supported email. The free tier and the explicit positioning against Gmail suit individuals who want encrypted mail without tracking. This is an editorial inference from the plans and comparison page, not a vendor-stated recommendation.[1][2]
Small teams wanting hosted mail on EU servers. Custom domains, alias addresses, multi-user options and priority email support on paid tiers fit small teams that want hosted mail under GDPR. Wider mid-market or enterprise needs were not evidenced.[1]
Limitations to weigh
The server cannot be self-hosted. Only the clients are published as open source; the service runs on Tuta's own infrastructure and no self-hosted server deployment is documented. Teams that require running their own mail server should look elsewhere.[1][2]
Free tier is limited. The free plan allows 1 GB of storage, one calendar and three labels, with no custom domains. Larger mailboxes need a paid plan.[1]
Free accounts need periodic sign-in. Tuta's support pages state that free accounts are deleted after more than six months without login, though the address stays blocked from re-registration. Paid accounts can recover such addresses with the correct credentials.[1]
Fit alongside existing email
Positioned against Gmail and Outlook. Tuta's official comparison contrasts its full encryption, lack of tracking, open-source clients and German jurisdiction with Gmail, Outlook and other providers that collect and monetize user data, and invites readers to create a Tuta account.[1]
Encrypted exchange with any recipient. Mail between Tuta users is encrypted automatically, and mail to outside recipients can be exchanged encrypted through a shared password, so contacts do not need a Tuta account to receive protected mail.[1][2]
Questions worth asking
Is Tuta free to use?
Yes. The free plan includes 1 GB of storage, one calendar and three labels. Paid Revolutionary and Legend plans add storage (20 GB and 500 GB), unlimited calendars and labels, extra addresses and custom domains.[1]
Is Tuta open source?
Can I use my own domain with Tuta?
Yes, on paid plans: Revolutionary supports 3 custom domains and Legend supports 10, with extra alias addresses included. The free plan does not include custom domains.[1]
Sources and editorial review
Source research. Reviewed on October 13, 2026. Written by Sanjib Sah. AI assisted; reviewed by a human editor.
We have not run or tested this product.
- Tuta homepage
official · Observed October 13, 2026
Official homepage observed for product name, positioning and scope of service.
- Tuta pricing
official · Observed October 13, 2026
Pricing tiers, storage, domains, support and server location observed from the plan tables.
- Security at Tuta
official · Observed October 13, 2026
Encryption scope and self-built client claims observed from the security page.
- Tuta open source
official · Observed October 13, 2026
GPLv3 client licensing, platform list and audit statement observed from the open-source page.
- tutao/tutanota README
official · Observed October 13, 2026
Client descriptions and download targets observed from the repository README.
- tutao/tutanota repository metadata
official · Observed October 13, 2026
Repository identity, license identifier, language and activity observed from repository metadata.
- tutao/tutanota LICENSE.txt
official · Observed October 13, 2026
GPL version 3 license text observed in the repository.
- Tuta email comparison
official · Observed October 13, 2026
Replacement positioning against Gmail and other providers observed from the official comparison.
- Tuta support FAQ
official · Observed October 13, 2026
Free-account inactivity deletion policy observed from the support FAQ.