安全なメールサービスのための方法
Our detailed How-to explains everything you need to know about your encrypted mailbox.
目次

全般

ログイン、ショートカット、ヘッダー情報

Tutanota login

  • Here you login to our mail client.
  • Please enter your full email address and password and click login.
  • If you tick 'Store password', your password will be stored in the browser for easier login. Only choose this option if you are using your own device.
  • Click on 'More' to see more options. 'Sign up' to register a new account and 'Switch color theme' to switch to the dark theme (shown in the screenshot above).
  • If you have saved your password, you will see two more options under 'More': 'Different account' to login with another Tutanota email address and 'Delete credentials' to delete the password you have previously saved in the browser.

Tutanota shortcuts

  • Tutanota supports lots of shortcuts. You can display all shortcuts available in any given section of Tutanota by pressing F1 (fn+F1). You can also use HTML shortcuts to design your mails such as Ctrl+b, Ctrl+i, Ctrl+u.
  • Show header info: You can show the mail header by pressing Ctrl+h.
  • Tutanota strips headers from emails sent to protect your privacy.
  • If the technical sender is different from the header info, Tutanota warns you about this. The differing sender information could be a sign that this mail is coming from a scammer.
二段階認証(2FA)の設定

必ずしも2要素認証(2FA)を設定する必要はありませんが、あなたのアカウントを保護する命綱として設定することを推奨します。

2番目の要素の登録

"設定" -> "ログイン"({settingLoginMail})で 2番目の要素に接続することができます。管理者として設定する際は、"設定"-> "ユーザー管理" ({settingUsersMail})でユーザーの2要素認証を設定することができます。

Tutanotaは現在以下の2番目の要素をサポートしています。

  • Yubikeyなどのセキュリティキー(U2F)。U2Fは現在ChromeとOperaでサポートされています。
  • Google AuthenticatorやAuthyなどの認証用アプリのTOTP
  • 私たちは現在より多くの二番目の要素のサポートを計画しています。もしご希望があればソーシャルメディアから私たちにお知らせください!

管理者と“ノーマル”ユーザーが2番目の要素の設定ができますが、削除することができるのは管理者のみです。

注意:もし、二番目の要素を失くしてしまった場合、あなたはアカウントにログインすることができなくなります。これを防ぐために複数の二番目の要素を登録できます。加えて、二番目の要素を追加したときに表示されるリカバリーコードを控えておくことで再ログインすることができます。

  • 二番目の要素での認証 *
    ログインする時に二番目の要素の一つで認証する必要があります。または他のログイン中のクライアントからセッションを受け入れることも可能です。もし登録した二番目の要素をあなたのブラウザがサポートしていない場合、別のクライアントからのセッションだけを受け入れることだけができます。

    • 二番目の要素を失くした場合のリセットの方法

リカバリーコードを書き留めている場合は、二番目の要素をリセットすることができます。"設定"-> "ログイン" を表示してリカバリーコードを表示させたり、更新することができます。({settingLoginMail})

二番目の要素を失くした場合、ログインページで"その他"-> "アカウントへのアクセスを失くした" ({recoverLink})をクリックしてください 。すべてのセカンドファクターを削除するには、あなたのリカバリーコードとパスワードを入力する必要があります。

How do I reset my password or second factor?

When you create a new account, please make sure that:

  • You write your password down and keep it somewhere safe.
  • You write down your recovery code to never lose access to your Tutanota account.

When it is already too late and you can't login to Tutanota, please make sure that:

  • You have entered your email address with the correct ending, e.g. ".de" or ".com".
  • The caps lock key is disabled.
  • The time on your TOTP device is synchronized correctly (only applies if second factor authentication with TOTP fails).

We do not know your password and can't modify your second factors. However, there are different ways on how to regain access to your mailbox in case of a lost password or second factor.

Administrator is available

If you are a member of an organization or a business: Ask your administrator to reset your password. Each administrator can reset the passwords of other users and admins. If you want to make sure to never lose your Premium account, it's best to have at least two administrators.

Recovery code is available

Your recovery code is your personal code to resetting your account. If you did write it down when you created your account, you can reset your password or second factor using your personal recovery code by clicking on More > Lost account access on the login page.

You can view and also update your recovery code in Settings > Login. You can also find more information on this innovative reset feature on our blog.

カスタムドメインの追加

If you own one or more domain names that you want to use with Tutanota, you can add these domains to your Tutanota Premium or Pro account. Afterwards you can add email aliases and additional user accounts for your family or company with this domain.

To use your own domain, a Tutanota Premium account is required. You can upgrade your existing, free Tutanota account by clicking on "Premium" in the top menu. If you don't have a Tutanota account, you can register here.

After upgrading you are the admin of your Tutanota Premium account. An additional input field will appear under 'Settings' -> 'Global settings' -> 'Custom email domain' where you need to enter your domain. Activate it by confirming the activation button.

This activation process is only successful if you have configured your MX and SPF records for your domain correctly. The MX record is necessary to relay emails for your domain to the Tutanota servers. The SPF record marks the Tutanota server as valid sender of emails from your domain. You need to configure the following DNS records in the settings of your domain name provider:

MX mail.tutanota.de
TXT v=spf1 include:spf.tutanota.de -all

Depending on your domain hoster, it could also look like this:
HOST NAME:
@ mail.tutanota.de
HOST NAME IP ADDRESS / URL RECORD TYPE
@ v=spf1 include:spf.tutanota.de -all TXT Record

Please note that changes to your DNS records are not immediately available, but can take a few hours to become active. You can check your DNS settings here.

After you have successfully activated your domain, you can add an email alias or create a user under 'Settings' -> 'User management'.

What do I do if activation fails?

Please verify your DNS SOA entry if the activation of your custom domain still fails. We use the SOA entry for detecting your main DNS server. Therefore, the SOA entry must point to a valid name server.

How can I use Tutanota in my organization or company with my own domain?
  1. Register a Tutanota Premium account here . This will be your initial administrator account. Once you have added additional accounts to your initial administrator account, you can mark all - or just some - as admin accounts. Your administrator account(s) can configure all general settings and manage user accounts, e.g. reset user passwords. As we at Tutanota can not reset passwords, we recommend to have at least two admin accounts. This way you can reset each others password in case you lose one.
  2. Add your domain in "Settings" -> "Global settings" -> "Custom email domain". There you will also find instructions on how to configure your MX DNS entries first in order to route incoming SMTP emails to the Tutanota email servers.
  3. Add user accounts (i.e. mailboxes) for your domain in "Settings" -> "User management". If you have a large number of users, you can import a CSV file containing user name, email address and optionally the user password. This is useful to automatically create all user accounts in one step.
  4. Provide the user passwords to the users, so they can log in into their mailboxes.
なぜ暗号化されたメールが必要なのですか?

Email encryption is needed whenever you want to send a confidential email. That is whenever your emails contains personal information that should not become public. The following examples show the differences between end-to-end encrypted, confidential emails and emails that are not being end-to-end encrypted in Tutanota.

Alice is registered with Tutanota, Bob may be registered with Tutanota or an external recipient and Carol is not registered with Tutanota. In any case all emails (including attachments) are stored encrypted on the Tutanota servers. Independent of the end-to-end encryption, the transport between client and Tutanota servers is secured with SSL and DANE to maximize security.

Sending and receiving end-to-end encrypted emails
The email is encrypted on Alice' client, stored encrypted on the server and can only be decrypted by Alice or Bob.

Sending and receiving end-to-end encrypted emails

Sending non-confidential emails
The email is sent via SMTP to the recipient. Still, the sent email is encrypted for Alice on the server and then stored.

Sending non-confidential emails

Receiving non-confidential emails
When the SMTP email is received by the Tutanota server, it is encrypted for Alice and then stored on the server.

Receiving non-confidential emails

メール

Navigation menu: Emails and Folders

ブラウザの Tutanota の幅に応じて、フォルダ一覧、メールリスト、および選択したメールが表示されます。

メールフォルダ

  • フォルダを追加するには、左側のフォルダビューでプラス記号をクリックしてください。ポップアップが開き、フォルダ名を入力できます。新しく作成されたフォルダは、[フォルダ] でアルファベット順に並べ替えられます。必要な数だけフォルダを追加できます。
    • このフォルダを後で編集するには、フォルダをクリックします。次に、フォルダの横にある3つのドットを持つ記号をクリックします。このフォルダの[名前を変更]や[削除 ]できます。
  • ご注意: フォルダを削除した場合、その瞬間にメールはすべて物理的に削除されます。[削除] を押す前に、正しいフォルダを選択していることを確認してください。
  • [ごみ箱] または [迷惑メール] フォルダの場合は、フォルダの横にある [フォルダを空にする] のアイコンをクリックすると、このフォルダを完全に空にすることができます。このシンボルをクリックすると、すべてのメールが物理的に削除されます。物理的に削除されたメールは、私たちもあなたも復元できません。これらは私達のサーバーから抹消されます。
    • スパムフォルダ: Tutanota は、このフォルダにスパムの疑いのあるメールを自動的に入れます。このフォルダからメールを削除すると、ゴミ箱に移動されず物理的に削除されます。
Multi-select, drag & drop, mark unread of mails

Multi select

  • You can use multi-select on desktop (press Shift or Ctrl while selecting and deselecting specific mails) and mobile (activated by a long press).
  • You can move all selected mails with drag & drop to any folder.
  • You can click the symbols displayed to the right: 'Move', 'Delete', or the three dots. When you click the three dots, you can choose one of the following options: 'Mark unread', 'Mark read' or 'Export'.
  • In the Tutanota app you can move a mail left, then it goes to Trash. If you move a mail right, it goes to Archive.
メールの処理

Mail menu items

When you select an email, these options show up to its top.

  • For writing a new email, simply click the red pen symbol in the down right corner. Shortcut: Click N.
  • The top email menu has the following options:

    • Arrow left = reply - Shortcut: Click R.
    • Double arrow left = reply all - Shortcut: Click ⇧ + R.
    • Arrow right = forward
    • Folders symbol = Move this email to a folder. When you click this symbol, a folder list opens where you can choose a folder to move the email to. You can also move a mail with drag & drop in a browser or with sliding left and right in the apps.
    • Delete symbol = The email is moved to Trash.
    • Three dot symbol = You can mark the email unread or export it.
  • If you want to print an email as pdf, you can use the browser function for printing.

Sender

  • In an opened email, you can click the sender. A pop-up opens where you can show and edit this contact in your address book.
  • You can also click on 'Add inbox rule' (Premium feature) or 'Add spam rule' so that future mails from this contact are automatically moved to a specific folder.

Add rule

  • As a Premium user you can also click 'Add rule' to send all new emails from this sender to a particular folder. Find more details on 'Inbox rules' under section 'Email'.

Sending of emails

Write a mail

Condensed email window.

  • Click on the red pen symbol in the down right corner to compose a new email.
  • When you enter an email address into the 'To'-field, Tutanota shows you the preview of matching email addresses from your address book. You can hit 'Enter' to choose the first email address shown or you can keep on typing.
  • Once you have entered an email address in the 'To'-field, the 'Confidential'-button appears in the 'Subject' line. Click on it to send this mail not end-to-end encrypted. You may also switch the default to encrypted/not-encrypted here in your Settings→ 'Default delivery'. Emails to other Tutanota users are always end-to-end encrypted; there is no option to disable this.
  • Below the recipient's email address of an encrypted mail, you enter the 'Password' for the recipient, which you need to share with your recipient via a different channel.
  • Attach files by clicking on the file symbol in the subject line or by using drag & drop.
  • Write your email like you are used to from other webmail services. When you click 'Send', Tutanota automatically encrypts subject, body and attachments for you.

Writing an email

Enlarged email window.

  • Click on 'Show' in the 'To' field to enlarge/reduce the options shown. After enlarging it, you can enter Cc- and Bcc-recipients.
  • If you have added an alias in 'Settings', you can also change the email address you want to send from by clicking on the pen symbol next to the 'Sender' email address. You can change the default sender here in your Settings→ 'Default sender'. This makes your alias the default sender, the Tutanota address will still remain the main account address (name in tab) which can't be changed.
  • External recipients of an end-to-end encrypted email receive a notification mail from your Tutanota email address. You can choose the language of this notification email by clicking on the pen symbol on the right (in this screenshot: English is chosen).
デフォルトで暗号化されていないメールを送る

Go here in your Settings. You can choose whether emails to external recipients should be encrypted by default ('Confidential') or if you need to click on the lock symbol when composing an email to encrypt it ('Not confidential' = unencrypted by default). Emails to other Tutanota users are always encrypted by default.

Encrypted email to external recipient

暗号化されたメールを外部の受信者に送信する場合は、メールを作成するときにパスワードを指定する必要があります。

メールを書く

一度設定すると、パスワードは自動的にあなたの Tutanota アドレス帳の連絡先に保存されます。次回その受信者にメールを書くときに、メールアドレスを指定するだけで、Tutanota は自動的にパスワードを入力します。パスワードは、2番目のチャネルを介して交換する必要があります。

外部受信者

  • Tutanota へのリンクを含む通知メールを受信します (ブラウザが開きます)、
  • 交換したパスワードを入力し、
  • 自動的に解読された電子メールを読むことができ、内密に返信したり、すべての交換メッセージをエクスポートし、ローカルに保存することができます。

注: 通知メール内のリンクには、パスワードとともに復号化に必要なソルトが含まれています。したがって、暗号化されたメッセージを傍受ししようとする人は、正確なリンクとパスワードを必要とします。(古いリンクは、同じメールアドレスに新しいメールを送信するとすぐに非アクティブになります。

Adding alias email addresses

メールボックスに移動する →「メールエイリアス」:」メールエリアスを表示」をクリック。エリアスを追加するにはプラス記号をクリックします。エイリアスのドメインを選択するには、3つのドットボタンをクリックします。これは、Tutanota アカウントに追加した Tutanota ドメインまたは独自のドメインのいずれかになります。

    • 注意してください**: Tutanota ドメインのエイリアスは無効にすることしかできず、削除できません。無効化されたエイリアスは、今後再びアクティブ化する場合に備えて、アカウントにリンクしたままにしておく必要があります。Tutanota で独自のドメインを使用している場合は、自分のドメインでエイリアスを削除して、新しく作成することができます。

デフォルトの送信元アドレスを、自分のドメインエイリアス (またはその他のエイリアス) に変更するには、デフォルトの送信者 このメールボックス →「デフォルトの送信者」を変更します。これにより、エイリアスがデフォルトの送信者になります。ただし、Tutanota アカウントのメインアドレス (タブ内の名前) は変更されません。

スパム検知のルール(ブラックリストとホワイトリストの構成)

Spam detection in Tutanota is multi staged. For incoming unencrypted SMTP emails the received email is checked against DNS blacklists first. In a second stage we filter emails by executing content checks and mark emails as spam or not. Emails that have been marked as spam will be moved to the spam folder of your mailbox. In a third stage we filter spam on the base of user defined email sender lists. This list provides the possibility to classify email addresses as spam (blacklist) or explicit not as spam (whitelist). The check is active for all incoming emails and can be configured by the administrator. The rules are valid for all users.

As administrator for a Tutanota account you can configure the email address list here in Settings. You assign email addresses or domains to one of the following spam rules:

  • No spam - Emails from this sender email address are always stored in the inbox.
  • Always spam - Emails from this sender email address will always be stored in the spam folder.
  • Discard - Emails from this sender email address will be silently discarded. The sender does not get any information about it.

The "No spam" rule has a higher priority than "Always spam" and "Discard" has the lowest priority. Furthermore you are able to define rules based on a domain instead of a single email address. Rules defined for a domain have a lower priority than rules for an email address.

Rules for domains are restricted. You are not able to assign the rules "Always spam" and "Discard" to Tutanota domains, neither to your custom domains.

連絡先

ユーザー設定

ログイン情報とセッションの扱い

Login

'Login' shows you several info items about your Tutanota account.

  • 'Login credentials': You can check your email address and your password. When clicking on the pen symbol next to 'Password', you can change your current password to a new one. Please write it down somewhere safe as we can't reset passwords.
  • 'Second factor authentication': Click the plus symbol to the right to add a second factor. Tutanota supports U2F and TOTP for 2FA. Once added all second factors are displayed here. You can delete them by clicking the cross symbol next to each added key.
  • Activate session handling to see who has accessed your Tutanota account. This information is stored encrypted and automatically deleted after one week.
  • 'Active sessions': This shows you the IP address currently being logged in to your account. We only store client and IP addresses encrypted so no one but yourself can access this information. Here you can remotely close sessions, for instance when you have lost your mobile phone and you are still logged in on your phone.
  • 'Closed sessions': Click on 'Show' to see from where you have logged into your account recently. This lets you check whether someone else tried to access your Tutanota account.
All settings options for your emails

メール送信

  • ここでは、メール送信の方法を設定することができます。

  • 「デフォルトの送信者」: あなたが送信するすべてのメールは、このアドレスで送信されています。アカウントにエイリアスが追加されている場合は、ペンのアイコンをクリックしてデフォルトの送信者アドレスを変更できます。メールを作成するたびに送信者を変更することもできます。

  • ' 送信者名 ': これはあなたの送信メールに表示される名前です。ペンのアイコンをクリックして変更できます。
  • ' メールの署名 ': あなたは、メールを送信するとき、「デフォルト」の署名を使用するか、またはペンのアイコンをクリックして、あなたの個人的な署名を定義するか、あるいは署名を使用しないことを選択できます。
  • 「デフォルトの配信」: ペンのアイコンをクリックして、デフォルトでは、新しいメールを端末相互間で暗号化 (「機密」) するか、端末相互間の暗号化をしない (「機密ではない」) で送信するかを決定します。メールを作成するときは、個々のメールに対してこの設定をいつでも変更できます。
  • [書式設定]: ペンのアイコンをクリックして、すべてのメールを HTML 形式で送信するか、テキスト形式に変換するかを決定します。
  • [連絡先を作成]: ペンのアイコンをクリックして、メール送信時に連絡先を作成するか ([アクティブ化])、作成しないか([非アクティブ化]を決定します。
  • 「メールボックスの検索」: ペンのアイコンをクリックして、暗号化されたメールボックスの検索機能を「非アクティブ」または「アクティブ」にするかを決定します。注意: Tutanota での検索は、当社のサーバー上のすべてのデータが暗号化されているので、あなたのデバイス上でローカルに処理する必要があります。したがって、検索を有効にすると、デバイス上のメモリを消費し、追加のトラフィックを消費する可能性があります。

メールエイリアス

  • 「メールエイリアス」: エイリアスメールアドレスを追加したり、既存のエイリアスを有効/無効にするには、「メールエイリアスを表示」をクリックします。プラス記号をクリックしてエイリアスを追加します。ポップアップが開き、追加するエイリアスを入力できます。3つのドットボタンをクリックして、エイリアスのドメインを選択します。これは、Tutanota アカウントに追加した Tutanota ドメインまたは独自のドメインのいずれかになります。これを行う前に、Premiumにアップグレードするか、[エイリアスパッケージ] ({pricingaliasLink})を購入する必要があります。 注意 : Tutanota ドメインのエイリアスは無効にすることができますが、削除されません。無効化されたエイリアスは、今後再びアクティブ化する場合に備えて、アカウントにリンクしたままにしておく必要があります。Tutanota で独自のドメインを使用している場合は、自分のドメインでエイリアスを削除して、新しく作成することができます。

受信トレイのルール

  • 「受信トレイのルール」 (フィルタ): 「受信トレイのルールを表示」をクリックして、プラスボタンをクリックします。「フィールド」、「値」、および「ターゲットフォルダ」の3つのオプションを含むポップアップが開きます。

[フィールド]: [受信トレイ] ルールの [送信者]、[受信者]、[Cc 受信者]、[Bcc 受信者]、[件名が含む]、または [ヘッダーが含む] に使用するフィールドを定義するには、ペンのアイコンをクリックします。

    • 値: あなたは、メールアドレス、ドメイン名または件名またはヘッダーの必要なコンテンツなどのテキストを入力することができます。[ログイン、ショートカット、ヘッダ情報」を参照してください。]{howtologinLink}Tutanota でメールのヘッダーを表示する方法について説明します。
      [ターゲットフォルダ]: [ペン] アイコンをクリックして、受信トレイで指定したメールが自動的に移動するフォルダを定義します。受信トレイルールを追加できるようにするには、[Premium にアップグレード]{pricingLink} する必要があります。
  • 「通知」: 「表示」とプラス記号をクリックします。ポップアップが開き、Tutanota メールボックスに新しいメールが届いたときに通知するメールアドレスを入力できます。

  • プッシュ通知 *

  • Tutanota を使用すると、他のメールアドレスや [Android と iOS アプリ] を介してプッシュ通知を受信することができます ({faqAppLink}).あなたがログインしていない場合でも、プッシュはあなたの携帯電話に送信されます。

  • どのようなメールアドレスやモバイルデバイスがプッシュ通知を受けとるか(受けとらないか)を管理するには、[ここをクリックしてください] ({settingLinkMail}) →「通知」
  • あなたのブラウザの設定で Tutanota のプッシュ通知を送信することもできますが、ログインしている場合に限ります。

管理者設定

ユーザー管理

User management

In 'User management' you can manage your account details. If you are using Tutanota Premium, you can also add and manage additional users.

Create a new user
  • Click the plus symbol in the down right corner. A pop-up opens where you can enter the 'Name' of the user, his 'Email address' and a 'New password' for logging in.
  • Please note: Each user gets their own mailbox and login so each user costs extra. If you simply want to add another email address, you can also add it as an alias which is already included in the Premium package.
Manage an existing user
  • Click the user you want to manage to see all available 'User settings'.
  • Click the adequate pen symbol to change the 'Sender name', the 'Password', the 'Global admin' status (Yes/No), 'Administrated by' (Global admin/Local admin), and the 'Status' of this user (Activated/Deactivated).
  • Global admins can access the user management and change the passwords of users that they have added to their Premium account. Local admins see only the users that they have been assigned to administrate. They can manage these users, including changing their passwords. Changing of passwords only works within one Premium account. We at Tutanota have no access and cannot reset passwords.

User management

  • 'Second factor authentication': Click the plus symbol to the right to add a second factor for this user. Tutanota supports U2F and
    TOTP for 2FA
    . Once added all second factors are displayed here. You can delete them by clicking the cross symbol next to each added key.
  • 'Groups': Click on the plus symbol to add this user to a group. Refer to 'Groups: Local admin' to learn how to set up a group.
  • 'Contact forms': Click on the plus symbol to add this user to a contact form. Refer to 'Contact forms' to learn how to set up a contact form.
  • 'Email aliases': Click on 'Show Email Aliases' to add alias email addresses or activate/deactivate existing aliases. Please note: Aliases with a Tutanota domain can only be disabled, but not deleted. When you are using your own domain with Tutanota, you can delete aliases with your own domain and add new ones.
  • 'Notifications': Click on 'Show' and you will see all email addresses and the IDs of mobile devices (via the Tutanota app) that receive push notifications about new mails received in the mailbox of this user. You can delete an entry if you do not wish to receive notifications to a particular email address or mobile device anymore.
全般設定

グローバル設定

  • 「スパムルール」: すべての定義されたスパムルールを表示するには、「表示」をクリックします。プラス記号をクリックしてルールを追加します。指定されたメールアドレスまたはドメイン名に応じて、「スパムなし」、「常にスパム」または「破棄」のオプションがあります。詳細については、「FAQ」の「スパムブラックリストとホワイトリストの設定」を参照してください ({faqSpamLink}).
  • 「カスタムメールドメイン」: 「表示」をクリックして、追加されたすべてのカスタムドメインを表示します。プラス記号をクリックして、カスタムドメインを追加します。必要な数のドメインを追加できます。Tutanota でのカスタムドメインの使用についての詳細は FAQ をご覧ください.各カスタムドメインの横には、3つのドット記号があります。これをクリックすると、[キャッチオールメールボックスを設定] または [削除] を設定できます。[キャッチオールメールボックスを設定] を選択した場合は、どのメールアドレスにキャッチオールメールが届くようにするのかを選択する必要があります。これは通常、メインの管理者ですが、Premium アカウントに追加した任意のユーザーにすることができます。既存のメールアドレスと一致しない自分のドメインに送信されたすべてのメールは、キャッチオールメールボックスに配信されます。
  • 「セキュリティ」: ペンのアイコンをクリックすると、管理者がパスワードをリセットした後、ユーザーにパスワードの変更を強制することができます。注意: Premiumアカウントの管理者のみが、カスタムドメインのすべてのユーザーなど、自分のユーザーのパスワードをリセットすることができます。メールサービスプロバイダのTutanotaは、セキュリティ上の理由でパスワードをリセットできません.
  • ' 監査ログ ': このログは Tutanota Premiumアカウントの管理者にのみ表示されます。ユーザーアカウントの1つに2番目の要素を追加した場合、またはユーザーアカウントの1つでパスワードを変更した場合など、重要な管理操作が含まれています。
Whitelabel

Whitelabel

  • Click on the pen symbol to activate whitelabel (€2 per user/per month). When you order the whitelabel feature, you can activate the Tutanota login at your own domain (a subdomain), change the look of Tutanota according to your needs (e.g. Corporate Identity) and create secure contact forms for your clients.

  • 'Whitelabel domain': Click the pen symbol to activate the whitelabel feature for your own domain. A pop-up shows up where you have to enter the following information (shown in the screenshot):

Activate whitelabel

  • Choose a subdomain of your own domain, at which you would like to reach the Tutanota login. This must be a subdomain, a main domain is technically not allowed. Set the CNAME DNS entry for that domain to point to login.tutanota.com. Keep in mind that the DNS changes may take a while until propagated.
    • Upload your domain's SSL certificate chain and
    • your domain's private key to enable the Tutanota login at your domain. Both must be provided in PEM format (base64 coded).
    • 'Custom logo': Click the pen symbol to upload your logo. It will be shown in the top left corner (38x280 pixel) when you load Tutanota at your own domain.

Custom colors

  • 'Custom colors': Click the pen symbol to set the colors according to your own corporate design. If you don't set a color, the default color from the Tutanota style sheet will be taken.
  • 'Custom meta tags': Click the pen symbol to enter a meta tag.
  • Now you can open your custom domain in your browser and see the Tutanota login with your own logo and own colors.
Whitelabel: How can I get the Tutanota login at my custom (own) domain and configure colors and my logo?

When you order the whitelabel upgrade for your Premium account you can activate the Tutanota login on your own domain (a sub-domain), change the look of Tutanota according to your needs (e.g. corporate identity) and create contact forms for your clients. If you send confidential messages to external recipients, those recipients are also directed to your whitelabel domain.

Complete list of possible customizations:

  • Set custom logo (displayed on your whitelabel domain instead of the Tutanota logo).
  • Set custom colors (displayed on your whitelabel domain).
  • Set custom meta tags for the Tutanota app on your whitelabel domain, like title and social media texts.
  • Set a custom imprint link (displayed in the "More" menu on the login page of your whitelabel domain instead of the Tutanota imprint link).
  • Set a custom notification email text for external recipients (coming soon).

Preconditions for applying the whitelabel feature:

  • You need your custom whitelabel domain. This must be a subdomain. A main domain is technically not allowed. It is also not allowed to add an email domain as whitelabel domain.
  • You need a valid SSL certificate for your whitelabel domain and you need to make sure to update it in Tutanota before it expires.

This is how you can setup your whitelabel domain:

  1. Choose a subdomain of your own domain, at which you would like to reach the Tutanota login.
  2. Set the CNAME DNS entry for that domain to point to login.tutanota.com. Keep in mind that the DNS changes may take a while until propagated.
  3. Enable the Tutanota login at your domain by uploading your domain's SSL certificate chain and private key here in your Tutanota Settings - Whitelabel. Both must be provided in PEM format (base64 coded). The private key file content must start with the line "-----BEGIN RSA PRIVATE KEY-----" or "-----BEGIN PRIVATE KEY-----". The certificate file content must start with the line "-----BEGIN CERTIFICATE-----". In order to create a certificate chain from individual certificates create a file in a text editor. Then first copy your domain's certificate into that file and below that certificate any intermediate certificate or certificate bundle that was provided to you in addition to you certificate file. Your certificate chain file might then look like this:

    -----BEGIN CERTIFICATE-----
    (Your SSL certificate, e.g. from your_domain_name.crt)
    -----END CERTIFICATE-----
    -----BEGIN CERTIFICATE-----
    (Your intermediate SSL certificate, e.g. from intermediate.crt)
    -----END CERTIFICATE-----

  4. Optionally upload your custom logo to be shown when you load Tutanota at your own domain.

  5. Optionally configure your custom colors to be used in Tutanota when you load Tutanota at your own domain.

Now you should be able to open your custom domain in your browser and see the Tutanota login with your own logo and own colors. Additionally you may now order and setup contact forms ("Settings" -> "Contact forms") which allows you to be contacted confidentially.

Please note that your whitelabel customizations will not be visible in the mobile apps.

Contact forms

Contact forms

Contact forms allow you to be contacted confidentially as all messages are automatically end-to-end encrypted.

Create a new contact form

  • Click the plus symbol in the down right corner. A pop-up shows up which lets you create a new contact form.

Create contact forms

  • 'Receiving mailbox': Click the user symbol (left) to select one user who should receive all emails sent via the contact form.
  • 'Responsible Persons': If you do not enter anything here, contact requests can be passed on to all users on your domain by the receiving mailbox.
  • 'Path': Enter a path to the link where your contact form should be displayed.
  • 'Language': Click the three-dot symbol to add another language to your contact form (i.e. French, German, Spanish). Visitors of your website will automatically see the language defined in their browser settings. Once you have added another language, a cross symbol appears so that you can delete any language you do not need anymore.
  • 'Page title': Enter a title for your contact form to be displayed on the website. A page title needs to be entered for all added languages.
  • 'Header', 'Footer', 'Help page': You can enter three different text fields either in rich text format or as HTML source code. You can switch between rich text and HTML by clicking on the pen symbol to the right. The entered text will be displayed on the contact form on your website.

Manage existing contact forms

  • Click the contact form you want to manage.
  • Click the pen symbol to the right to edit this form. The pop-up shown above opens. You can manage all fields described under 'Create a local admin group'.
  • Click the copy symbol to copy this form. A new contact form pops up where you can change all required fields shown under 'Create a local admin group'. At least the 'Path' and the 'Receiving mailbox' must be changed as the new form must have its own web link and its own recipient.
  • Click the delete symbol to delete this contact form.
  • Click the Export button further down to export a CSV log of all contact form requests in a given period of time.
Setting the administrator of users and contact forms
  • The global admin can create a local admin group to add as well as manage administrators of users and contact forms. Please refer to 'Create a local admin group' for details.
  • The user who creates another user or contact form becomes the administrator of the created entity. More precisely, the admin group in which the user is member will become the admin of the entity. If the user is a global admin, then the entity is administrated by the global admins. If the user is a local admin (i.e. member of a local admin group), then that local admin group becomes the admin.
  • The global admin can change the administrator of a user by selecting a local admin group under 'Administrated by'.
  • Local administrators only see those users and contact forms that they administrate.
  • Even if an entity is administrated by a local admin group, the global admins can still administrate the entity.
  • A contact form is always administrated by the administrator of its receiving mailbox. So if a global admin changes the receiving mailbox of a contact form, the admin of this user mailbox becomes the administrator of the contact form.
契約: あなたの Tutanota のメールアカウントの追加機能を予約する

Subscription

  • Click on 'Upgrade' to upgrade your free Tutanota account to Premium or Pro. Look at the screenshot below to view the upgrading process.

Once upgraded you can add 'Extensions':

  • Please note: When you want to downgrade back to the free version, you have to disable all these extensions as they are only available to paying Tutanota users. This means, for example, that all your aliases must be deactivated. They will still be linked to your account so that you can reactivate them when you upgrade again at a later stage.
  • 'User accounts': You can manage your current user by clicking on the pen symbol or you can add more users to your account by clicking on the plus symbol.
  • 'Storage capacity': Click on the pen symbol to add another storage package to your account.
  • 'Email aliases': Click on the pen symbol to add another alias package.
  • 'Groups': Click on the plus symbol to add a local admin. Refer to 'Local admin' to learn how to set up a group.
  • 'Whitelabel': Click on the pen symbol to add the whitelabel feature to your account. This allows you to customize your account: login via your website, add custom logos & colors.
  • 'Contact forms': After adding whitelabel, you can also add a contact form to your website. This allows visitors of your website to directly get in touch with you via Tutanota's end-to-end encrypted contact form.
  • 'Delete Account': Here you can delete the account. Your email address and aliases will be deleted and can't be reactivated. If you want to use your Tutanota email addresses in another account, it is important to enter the 'Take over email address' here. Then you can add the deleted email addresses to the stated Tutanota take over email account.
  • Downgrade back to Free: You can unsubscribe from Premium here. Next to 'Subscription', click the pen icon and select the Free plan.

Upgrade

  • Choose whether you are using Tutanota for 'Private' use or for 'Business' use. This differentiation is necessary for tax regulations.
  • Choose whether you want to pay 'Yearly' or 'Monthly'. When you choose 'Yearly', you get two months for free.
  • Click on 'Select' of the package you want to upgrade to. This takes you to the payment procedure.

Payment

  • Choose your payment method: Credit card or PayPal. Note: When choosing Tutanota for Business, you can also pay via invoice. The invoice will be sent to your Tutanota account and must be paid within two weeks time. In case of no payment being made, two reminders will be sent before the account is closed.
  • Enter you payment details.
  • Choose your country of residence.
  • Click 'Next'.

Confirm

  • Once all payment data is entered, a booking summary will be shown.
  • Check the summary and click 'Buy' to complete your order.

ローカル管理者設定

Create a local admin group

Local admin

  • Click the plus symbol in the down right corner. A pop-up shows up. The group type can be chosen as 'local admin'. Choose 'Local admin' if you want one of your users (e.g. a project manager) to administrate all users working on this particular project. Set a name for this group. Click OK. You have created a local admin group. Refer to 'Manage an existing local admin' to find out how to add users to this group.
Manage an existing local admin group

Local admin

  • Click the local admin you want to manage. To the right you have several options to manage this group:
    • 'Name': Click the pen symbol to change the name of the group.
    • 'Administrated by': Local admin groups have to be administrated by a Global admin.
    • 'Status': Click the pen symbol to activate/deactivate this group.
    • 'Group members': Click the plus symbol to add as many group members as you like. This should be at least one as the Group member is the local admin of all added administrated groups/users.
    • 'Administrated groups': This list contains all users administrated by the local admin(s) added under 'Group members'.
    • Log in with the group member account (here: Bob) to see all Setting options of the local admin.
ローカル管理者でログイン

Manage users

Local admin

  • Go to Settings → User management. You can see all users that this local admin administrates. Please refer to section 'Manage an existing user' to see all available administrative options.

Manage groups

Local admin group

  • Go to here in Settings .
  • Click the local admin you want to manage.
  • Manage a local admin: To the right you have several options to manage this local admin. The local admin has less options compared to the global admin who originally set up this group. You can see this by comparing the local admin options with 'Manage an existing local admin' (global admin options).
    • 'Name': Click the pen symbol to change the name of the group.
    • 'Status': Click the pen symbol to activate/deactivate this group.
    • 'Group members': Click the plus symbol to add as many group members as you like. This should be at least one as the Group member is the local admin of all added administrated groups.
    • 'Administrated groups': This list contains all users administrated by the local admin added under 'Group members'. The local admin cannot add anything here.

デスクトップクライエント

Tutanotaデスクトップクライアントをインストールする方法

Windows :クライアントはワンクリックインストーラーの形式で提供されています。 ファイルをダブルクリックするだけで、残りは自動的に実行されます。

Mac :アプリを配置するディレクトリにインストーラを移動し、展開するにはダブルクリックしてください。

Linux :ダウンロード後、右 AppImageをクリックして実行権限を与えます。 あるいはターミナルウィンドウから「chmod + x tutanota-desktop-linux.AppImage」を実行します。 これで他の実行ファイルと同じようにアプリを実行できるようになります。追加のインストールは必要ありません。デスクトップとアプリケーションランチャーとそれ自身を統合させることも可能です。

デスクトップクライアントをデフォルトのメールアプリケーションとして登録するにはどうすればよいですか。

Windows: Go to Settings -> Desktop -> set "Default Email Handler" to "Registered". Then hit the windows key, type "default" and choose "Default App Settings". In the settings window, choose "Tutanota Desktop" in the email row.

Mac: Go to the Settings -> Desktop -> set "Default email handler" to "Registered".

Linux: This depends on your distribution. Please refer to the relevant documentation. Useful keywords are mailto handler, protocol handler

On all platforms, you may have to tell applications like your internet browser to use the system default mail app.

How do I verify the signature of the desktop client?

The Tutanota desktop applications for Linux, Windows, and Mac OS are signed. The signatures make sure that the desktop clients as well as any updates come directly from us and have not been tampered with. Upon every update, the desktop client automatically checks that the signature is valid.

You can verify the authenticity of your manually downloaded installer with the openssl utility yourself as well. It should be installed on most Linux and Mac systems, but needs to be added to Windows, you can get OpenSSL via this link.

The installer signatures are provided as separate files:

For further details, please refer to GitHub, lines 12 to 21.

どのようにTutanotaデスクトップクライアントをインストールしますか?

Windows: Hit the windows key, type "apps", choose the entry "Apps & Features". In the settings window, search for "Tutanota Desktop". Click it and then click the "Uninstall" Button.

Mac: Move the file you extracted during installation and that you used to start Tutanota Desktop to the trash. To remove the app cache as well, you need to delete the directory ~/Library/Application Support/tutanota-desktop/, for example via the terminal:

cd "~/Library/Application Support/"
rm -r ./tutanota-desktop

Linux:

  • Delete the AppImage, then delete the file ~/.local/share/applications/appimagekit-tutanota-desktop.desktop and the directory ~/.config/tutanota-desktop/ if they're present.

  • If you want to remove the icons, too, open a terminal window and type

    cd ~/.local/share/icons/hicolor/
    ls **/*/appimagekit-tutanota-desktop.png
    
  • Make sure the output only lists tutanota-desktop image files, then type

    rm **/*/appimagekit-tutanota-desktop.png