Tuta

What is Tuta

Tuta (formerly Tutanota) is a privacy-focused email provider headquartered in Hanover, Germany. As of 2026-05-30, the service offers encrypted email, calendar, and contacts with post-quantum cryptography, positioning itself as a secure alternative to Big Tech email platforms. The company operates under Tutao GmbH and stores all user data in ISO 27001-certified German data centers.

The platform underwent a major rebranding from Tutanota to Tuta, reflected across its official site and third-party coverage. Tuta emphasizes complete control of its software stack, rejecting third-party integrations like Google reCaptcha or Google Push that could compromise user privacy.

How no-KYC is it?

Tuta scores well on the no-KYC spectrum. The service explicitly markets itself as an anonymous email provider where users can create accounts without providing a phone number. The official site states: "no IP logging, no tracking" and highlights phone-free registration as a core privacy feature.

However, the kycnot.me listing flags an important caveat: "No routine KYC, but may cooperate with authorities, block funds or implement future KYC requirements." This reflects Tuta's German jurisdiction and GDPR compliance framework. For basic free account creation, no identity verification is required. Paid plans can be purchased with Bitcoin, though the extent of cryptocurrency privacy depends on payment processing specifics not detailed in the current evidence.

Privacy & security

Tuta's security architecture centers on end-to-end encryption with post-quantum cryptography. The service encrypts emails, calendars, contacts, and metadata by default. Key technical claims from the official site include:

• Zero-knowledge architecture where only the user holds decryption keys
• TLS encryption for data in transit
• Maximum login protection with optional two-factor authentication
• Remote session monitoring and closure capabilities
• GDPR compliance with data minimization principles

The privacy policy (dated November 13, 2025) acknowledges that "necessary metadata to provide the service (like the user's email addresses, email addresses of senders and recipients and the dates of emails) is stored unencrypted." This is a standard limitation for functional email services but worth noting for threat model assessment.

Tuta has faced operational security challenges. TechRadar reported multiple DDoS attacks in a single week, though the company stated privacy was not compromised. The service maintains an active bug bounty program and open-source codebase under AGPL-3.0 licensing.

Payments, fees & limits

Tuta operates on a freemium model with three personal tiers:

• Free: 1 GB storage, 1 calendar, 3 labels, no custom domains
• Revolutionary: 20 GB storage, unlimited calendars and labels, 15 extra email addresses, 3 custom domains, priority email support
• Legend: 500 GB storage, 30 extra email addresses, 10 custom domains, plus family/multi-user options

Family options exist for both paid tiers at €3 per user/month (Revolutionary) or €8 per user/month (Legend), activated through support contact. The service accepts Bitcoin for payments, alongside traditional fiat methods. A gift card program offers additional payment flexibility.

Notable limitations: free accounts cannot use custom domains, and email import (EML/MBOX) requires desktop clients. The roadmap indicates Drive functionality in development for encrypted file storage.

User experience & support

Tuta provides cross-platform availability through web clients, Android and iOS apps, and desktop applications. The interface emphasizes simplicity with features like:

• Encrypted calendar invites with shared passwords for external users
• Calendar push reminders without Google Push dependency
• Inbox rules with label assignment
• Autoresponder functionality
• Undo send capability (roadmap item)

Support channels include email support for free users and priority email support (one business day response) for paid subscribers. The company maintains active Reddit and GitHub communities for feature discussion and bug tracking.

Recent updates from May 2026 include inbox rules reapply buttons, faster synchronization, and improved search performance. Tuta Drive is approaching open beta launch.

Who it's for

Tuta suits privacy-conscious individuals, journalists, activists, and organizations seeking GDPR-compliant encrypted communications without phone number requirements. The service particularly appeals to users prioritizing quantum-resistant encryption and European data residency.

Compared to Proton Mail, Tuta offers more aggressive open-source positioning and lower pricing, though Proton maintains broader ecosystem integration. Tuta's lack of IMAP/SMTP support (due to encryption architecture) may frustrate users needing traditional email client compatibility. The service works best for users committed to web and Tuta-native applications.