Breaking news

On June 22 we were informed about a Cross-Site Scripting (XSS) vulnerability in all Tutanota clients. We immediately started working on a fix, which was published two days later. Now, all affected versions of Tutanota have been disabled and we would like to inform you about the issue for full transparency.

Google is the top spy among all Big Tech companies. So to protect your privacy to the maximum, you need to stop using Google services wherever possible. The most difficult part when quitting Google is if you are using an Android phone as most apps use Google Push notifications. But the number of open source apps refusing to let Google spy on their users is constantly growing. Here is our top nine of FOSS apps that do not use Google Push!

Encryption is the best tool to protect your private data. To make sure your data stays secure in the future, post-quantum secure encryption is needed. Now, NIST pushes ahead with CRYSTALS-KYBER, CRYSTALS-Dilithium, FALCON, SPHINCS+ algorithms to harden encryption against future attacks from quantum computers. We at Tutanota have already built a prototype with these same algorithms. We plan to upgrade the encryption in Tutanota well before quantum computers are able to break currently used algorithms.

In 2021 publishers and shops have started to use a cookieless tracking technology. It's based on your email and login information, so you should know about it. Especially as you are even tracked without login. But you can easily stop being profiled and tracked! Here is how.

As security experts we recommend that you protect your accounts with U2F two-factor authentication. You use a key to lock your front door or your car, and your online accounts are just as valuable and need just as much protection. Secure your digital accounts with a U2F hardware key as this is the most secure option to protect your accounts! In this post we explain why U2F is important and how it works.