I Tested 5 Secure Email Providers (THIS is the best Gmail alternative)

Summary

The video script offers a detailed comparison of five popular encrypted email providers: Proton, Tuta, Mailfence, StartMail, and Hushmail. It evaluates them based on features, location, mobile app availability, and cost. The emphasis is on data privacy laws, encryption standards, and zero-knowledge architecture. The script also discusses the importance of 2FA keys, particularly YubiKeys, and the integration of email with calendar and cloud storage services. The recommendation leans towards Proton Mail for its comprehensive privacy services or Tuta for its strong value.

The video is abnormal, and we are working hard to fix it.
Please replace the link and try again.

Q & A

Why did the speaker spend money on encrypted email subscriptions?

The speaker spent money on encrypted email subscriptions to compare the differences between these services side by side, including their features, location, mobile apps, and cost.

What are the five encrypted email providers discussed in the script?

The five encrypted email providers discussed are Proton, Tuta, Mailfence, StartMail, and Hushmail.

What aspect of the countries these email providers are based in is important for data privacy?

The data privacy laws of the countries where these providers are based are important, as they affect the level of privacy protection and the jurisdiction under which the providers operate.

How does the architecture of StartMail differ from zero-knowledge architecture?

StartMail's architecture allows for the possibility of decryption and recovery of an account by two separate senior management team members, whereas zero-knowledge architecture puts all encryption keys and processes in the user's possession, meaning the company cannot access the user's email.

What is a recommended security measure for secure email besides using a strong password?

A recommended security measure is using a 2FA key, such as a YubiKey, which provides an additional layer of protection even if the password is compromised.

Which encrypted email providers currently accept YubiKeys?

Proton and Tuta are the only providers that currently accept YubiKeys.

What integration features are important for the speaker when choosing an email provider?

The speaker values integration with an encrypted calendar and cloud drive, as these features are closely tied to email usage and contribute to overall privacy.

Which providers offer native mobile apps for accessing email on phones or tablets?

Proton, Tuta, and Hushmail have developed and released their own native mobile apps for iOS and Android devices.

What is the average cost among the five encrypted email services discussed?

The average cost among the five services is $48 per year.

What are the speaker's recommendations based on their usage of these encrypted email providers?

The speaker recommends Proton Mail for those who value unlimited aliases and additional privacy services, and Tuta for those seeking the strongest email security at the best value.

What additional advice does the speaker give regarding account security for secure email services?

The speaker advises purchasing two YubiKeys for the highest possible protection of the account, with one serving as a primary key and the other as a backup.

Outlines

00:00

🔒 Encrypted Email Providers Overview

The video begins with the narrator discussing their investment in encrypted email subscriptions, aiming to compare five popular providers. The focus is on privacy and security features, including the providers' locations, data privacy laws, encryption standards, and additional services like mobile apps. The importance of end-to-end encryption and zero-knowledge architecture is highlighted, as well as the significance of a strong account security measure, such as the use of YubiKeys.

05:01

📅 Features and Recommendations

In the second paragraph, the narrator delves into the practical aspects of using encrypted email services, emphasizing the integration of calendar and cloud storage features. The advantages of Proton and Mailfence in this regard are noted, as well as the lack of these features in StartMail and Hushmail. The paragraph also covers additional features like mobile apps, aliases, custom domains, and pricing. The narrator concludes with a recommendation for Proton Mail for its comprehensive privacy services and Tuta for its value, and stresses the importance of using YubiKeys for the highest level of account protection.

Keywords

💡encrypted email providers

Encrypted email providers are services that offer secure email communication by encrypting the content of emails to protect them from unauthorized access. In the video, the user has subscribed to and compared five popular encrypted email providers, focusing on their features, privacy laws, and security measures.

💡data privacy laws

Data privacy laws are legal frameworks that govern the collection, storage, and use of personal data by organizations and individuals. The video script mentions the importance of comparing the data privacy laws of the countries where the email providers are based, such as Switzerland, Germany, Belgium, Netherlands, and Canada, to understand their impact on user privacy.

💡PGP support

PGP (Pretty Good Privacy) support refers to the capability of an email service to handle PGP encryption, which is a standard method for securing email communications. The video highlights that all the discussed email providers offer PGP support, indicating their commitment to email security.

💡zero-knowledge architecture

Zero-knowledge architecture is a security model where the service provider has no knowledge of the data it is securing. This means that encryption keys and processes are in the user's possession, ensuring that the provider cannot access the user's data. The video emphasizes the use of zero-knowledge architecture by some providers as a way to enhance privacy and security.

💡2FA key

A 2FA (Two-Factor Authentication) key is a security measure that requires users to provide two forms of identification to access their accounts. In the context of the video, a physical YubiKey is recommended for secure email services, as it adds an extra layer of security beyond just a password.

💡calendar and cloud storage integration

Calendar and cloud storage integration refers to the seamless connection between email services and other digital tools like calendars and cloud drives. The video discusses the convenience of having these features integrated with email for better privacy and workflow management.

💡native mobile apps

Native mobile apps are applications specifically designed for use on mobile devices, as opposed to web-based services. In the context of the video, it's important for encrypted email providers to have native mobile apps for convenient access to email on smartphones and tablets.

💡aliases

Aliases in the context of email refer to additional email addresses that can be used to receive messages without revealing the primary email address. The video discusses the number of aliases offered by different providers as a feature for user convenience and privacy.

💡custom domain

A custom domain is a unique email address that uses a user's own domain name rather than a generic one provided by the email service. The video mentions that all encrypted email providers allow the use of custom domains, with StartMail being the only one charging an extra fee for this service.

💡pricing

Pricing refers to the cost of using the services of the encrypted email providers. The video provides a comparison of the average pricing among the discussed providers and identifies Tuta as offering the best value.

💡YubiKeys

YubiKeys are physical security keys used for two-factor authentication, providing an additional layer of security for online accounts. The video strongly recommends the purchase of YubiKeys for the highest level of account protection, especially when using secure email services.

Highlights

The comparison of encrypted email providers is based on a $238 investment in subscriptions.

The focus is on five popular encrypted email services: Proton, Tuta, Mailfence, StartMail, and Hushmail.

These services offer privacy and are ad-free alternatives to mainstream email providers like Gmail, Outlook, and Yahoo.

All the selected email providers have been in operation for over a decade, indicating a level of trust and reliability.

Proton's base in Switzerland is highlighted for its strong data protection laws and jurisdiction outside the US and EU.

Tuta, Mailfence, and StartMail are in the EU, benefiting from the GDPR's strict privacy and security regulations.

Hushmail, based in Canada, has good privacy laws but may not be as ideal as Switzerland or the EU.

The importance of data privacy laws is discussed in relation to the location of the email providers' servers.

All services offer PGP support, the standard for email encryption, but software architecture varies.

StartMail allows decryption and recovery of accounts under specific conditions involving senior management.

Proton, Tuta, Mailfence, and Hushmail claim to use zero-knowledge architecture for enhanced security.

The responsibility for account security lies with the user, with no 'forgot password' recovery option.

2FA key, such as Yubico, is recommended for secure email, with Proton and Tuta currently supporting YubiKeys.

Email is not a single product and is closely tied to calendar and cloud storage services.

Proton and Mailfence offer integrated encrypted calendar and cloud drive services.

Tuta is developing TutaDrive, but it is not yet released.

StartMail and Hushmail lack integrated calendar and encrypted drive features.

Proton, Tuta, and Hushmail have native mobile apps for iOS and Android.

Proton, StartMail, and Hushmail allow unlimited aliases, while Tuta and Mailfence limit based on the plan.

All providers support custom domains, but StartMail charges an additional fee for this service.

The average cost among the services is $48, with Tuta being the best value and StartMail the most expensive.

For the best value and strong email security, Tuta is recommended, while Proton Mail is suggested for its suite of privacy services.

The importance of having a 2FA security key, such as YubiKey, for the highest protection of secure email accounts is emphasized.

Transcripts

Last month I spent $238 buying subscriptions  to 5 of the most popular encrypted email  

providers on the market today. Why? I want to  compare the differences between these email  

services side by side: what features  do they offer, where are they located,  

do they have their own mobile apps  and, of course, how much do they cost?

These are the five companies we’re looking  at today and each of them represent an  

alternative to Gmail, Outlook or Yahoo that  is both private and not inundated with ads.

When stacking each of these encrypted  email providers side by side,  

I think it’s important to note that all  of them have been in business for more  

than a decade sending and receiving emails for  folks. In other words, while there’s always a  

risk that a company could go out of business or  be bought up and have their services shut down…

Skiff

…I’ve chosen these email providers  because they have a strong history  

that lends a certain amount of trust that  they’ll be around for a while longer.

We’ll dive into encryption in a moment,  but first let’s compare the data privacy  

laws of the countries in which they’re located.  Proton is based in Switzerland, which is highly  

regarded as one of the best for privacy not just  because of their strict data protection laws,  

but also because they are outside the  jurisdiction of both the US and the EU.

Tuta, Mailfence and StartMail are based in  Germany, Belgium and Netherlands respectively,  

all of which are part of the  EU and the GDPR which is the  

self-proclaimed “toughest privacy  and security law in the world”.

And finally we’ve got Hushmail based in Canada,  which from what I can understand has good privacy  

laws and is better than the US for sure, but  perhaps isn’t as ideal as Switzerland or the EU.

But does location really matter when we’re  dealing with encrypted data? In other words,  

even if a government requested my data or  the email server was compromised in a breach,  

it shouldn’t matter where that  server is located as long as  

the data is end-to-end encrypted,  right? Hopefully that’s the case,  

but the problem is that the word “encryption”  can be used in a lot of different ways.

All of these service offer PGP support, which  is the standard for email encryption. But the  

software architecture is important as well.  For example, StartMail is encrypted, but it  

is possible for them to decrypt and recover  an account. According to their whitepaper,  

doing so requires two separate senior  members of the management team who  

reside in on different continents and  thus are under different jurisdictions.

The obvious benefit to an architecture like this  is that you have the safety net of a recovery  

process in case you somehow lose access to  your account. Zero-knowledge architecture,  

on the other hand, takes all the encryption keys  and processes and puts them in your possession,  

so if you lose it, there’s  nothing the company can do.

This zero-knowledge architecture is the way  Proton, Tuta, Mailfence and even Hushmail  

claim to be designed. And I feel like I need  to put a disclaimer here that parsing all the  

marketing language and whitepaper explanations  is not easy and doesn’t always result in a  

black and white answer. There is nuance and  some of it is honestly above my pay grade.

In theory, though, these companies can  never access your email on their servers,  

which from a privacy standpoint is a  strength, but that also means that you  

are solely responsible for your account security.  No “forgot password” recovery option available.

Part of the security that I recommend, is what is  known as a 2FA key, like what you see here from  

Yubico. When you’re dealing with secure email,  you want to know that your data is encrypted,  

but you also want to know that your account  login is protected. Using a password alone  

isn’t enough when we’re dealing with secure  email. A physical YubiKey means that even  

if somebody guessed your password or stole  it in a breach, they couldn’t gain access  

to your account unless they physically  had this key to plug into their device.

YubiKeys are an important part of my personal  security and something I recommend for everybody  

I know. They’re actually the sponsor of this video  and as you can see here, Proton and Tuta are the  

only providers that accept YubiKeys right now.  Mailfence, StartMail and Hushmail all provide  

2FA via a text message or authenticator  app, but we’re dealing with encrypted  

email here - in my opinion, you should be able  to use the strongest form of security, right?

Well moving on, as I’ve gone about testing these  different email providers, basically trying to  

replace my reliance on Google services, the thing  I’ve noticed with email is that it’s not a single  

product. What I mean by that is that my email  is very closely tied to both my calendar and  

my cloud storage. I need to send and receive  calendar event invitations as well as download  

or upload attachments. And if you care about the  privacy of your email, you likely also care about  

the privacy of your calendar - I don’t want  Google or Microsoft knowing exactly where I  

am at all times and who I’m meeting with - or  the privacy of your stored contacts or your  

cloud drive. When you separate those services,  at least for me, it really disrupts my workflow.

This is an area where both Proton and Mailfence  already have an advantage in that they offer an  

encrypted calendar and cloud drive that  integrate seamlessly with their email  

product. Tuta has a very nice encrypted calendar  and I’m told the TutaDrive is being developed,  

but as of this filming it hasn’t been  released yet. So be aware of that.

Unfortunately, calendar and  encrypted drive features aren’t  

offered by StartMail and Hushmail, both  of whom are strictly email providers.

Ok, at this point I’m going to power  through a list of other features that  

are important but I don’t want  to go into great detail about.

First, if you want a native mobile app to access  your mail on your phone or tablet - something you  

download on the iOS or Android app store - Proton,  Tuta and Hushmail have developed and released  

their own apps. In terms of aliases, which is the  number of unique emails you can create to forward  

to your inbox, Proton, StartMail and Hushmail all  allow for an unlimited number of those. Tuta and  

Mailfence limit you based on your plan, starting  at 15-20 aliases, at least using their URL.

All of these encrypted email providers  allow you to use a custom domain,  

but StartMail is the only one that  for some reason requires you to  

pay $.85 extra per month to do it. I  don’t understand that, but whatever.

And finally, the pricing. The average  among these five services is $48,  

which makes Tuta the best value and  StartMail the highest investment.

So what do I recommend? After using all of these  encrypted email providers, for me it boils down to  

either Proton Mail or Tuta, which I’ll explain  in a moment. I like Mailfence and Startmail,  

but for Mailfence I really wish they would  add Yubikey support and for StartMail,  

the same thing applies but they  also simply lack the calendar and  

drive services that I need in order to  fully migrate to a new email provider.

At the end of the day, I suggest you go with  Proton Mail if you value unlimited aliases  

and the suite of other privacy services  they offer like a VPN or password manager.

If you just want the strongest email at the  best value, Tuta is the way to go instead.

And whichever you choose, if you  don’t already have a 2FA security key,  

then go purchase two YubiKeys for yourself -  one primary and one backup - that will ensure  

the highest possible protection for your account.  These keys can protect multiple online accounts,  

which I’ve talked about in a previous  video, but it just doesn’t make sense to  

me to invest in a secure email service  without having YubiKey protection.

I’m sure there are other things I’ve forgotten  to include in this comparison which you can leave  

in the comments, but if you want to see a full  breakdown, visit allthingssecured.com/secureemail  

which I’ll keep updated with any  changes long after this video goes live.