FAQ

Yes, Tutanota supports two-factor authentication with U2F and TOTP. Here are details on how to set up your second factor in Tutanota.

Go to Settings → Email→ Scroll down to Email addresses → Click "Show" → Click on the plus symbol.

A pop-up opens where you can create the alias email address you want to add. Click on the arrow button to choose the domain for your alias. This can be any of the Tutanota domains or of your custom email domains that you have added to your Tutanota account. Alias email addresses with your custom domain do not count towards your limit; you create as many as you like.

Please note: It is technically not possible to delete alias email addresses created with a Tutanota domain. These can only be deactivated. Deactivated aliases remain linked to your account in case you want to activate them again in the future.

Go here in Settings. You can choose the 'Default delivery': Encrypted ('Confidential') or not encrypted ('Not confidential'). You can also switch whether an email is encrypted or not when composing the email by clicking on the lock symbol. Emails to other Tutanota users are always encrypted by default.

Yes. Tutanota uses a preshared password for sending an encrypted message to an external recipient, i.e. to someone who does not use Tutanota. Please check here to learn how to send encrypted emails to external recipients.

Or watch our quick YouTube tutorial.

Here we explain how to switch the default so that emails to external recipients are sent not encrypted and without a password.

Yes, when sending emails from Tutanota to Tutanota, all emails are encrypted automatically end-to-end on your device. You do not have to enter any passwords.

Check out our quick YouTube tutorial to see how it works.

Yes, Tutanota mail is forever free with 1 GB of free storage for private users. The actual free storage is much higher as we are compressing your emails.

After signing up for Tutanota as your new email address, you can easily switch important conversations over from your previous provider. Simply forward all emails from your previous email account to Tutanota. Here is an explanation of how you can activate this process in your old email account:

• Fastmail
• Gmail
• GMX
• Mailbox.org
• Outlook
• Posteo
• Protonmail
• Riseup
• Web.de
• Yahoo
• Zoho Mail

You can register for Tutanota here. Upon registration you can choose whether you would like a free or paid account. Please check our pricing page for details on all available subscriptions.

If a captcha is presented during the registration process, please check here if you need help solving the captcha.

We have collected all the information you need when switching to...

... a free Tutanota account

... a paid Tutanota account

... a paid Tutanota account with your own domain

... a business account with Tutanota

... a business account with Tutanota as an NPO or a school

Welcome to the encrypted side!

If you can't log in to your account you might be in one of these situations:

• You have made a typo in your email address or password:
  • Please double check your address and make sure that you have typed the full address and the correct domain name (for example youraddress@tutanota.com).
  • Make sure that the Caps Lock key is not active.
• You forgot your password or lost your second authentication factor (2FA): Please read How do I reset my password or second factor?
• The code from your authenticator App (TOTP) is incorrect: These codes are time-dependent. Please make sure that both Tutanota and the authenticator App have the correct time and time zone settings. Some browsers or browser extensions block access to the system's time zone.
• Your recovery code is not accepted or is wrong: Please double check whether you are using the recovery key correctly. See How do I use the recovery code?
• Your account might have been deleted due to inactivity: In this case, you should see a corresponding message below the login form. Free accounts are deleted if you do not log in for a period longer than six months. We do not recycle Tutanota addresses which means that the address is blocked for new registrations. You can still re-use the deleted address with a paid account, but only if you have the correct credentials for the deleted account. Please see How do I reactivate an account deleted due to inactivity?
• Your account was suddenly suspended due to another reason: Some accounts are disabled due to a violation of our Terms of Service or due to our spam detection. If you think that we have made a mistake, please contact us in English or German. Please include the email address of your suspended Tutanota account and send us the error message you see below the login form.

Our secure password reset feature allows only you to reset your password. We have no influence on this process. You can read more about this here.

When you sign up for Tutanota, you create an email account. This account initially has one user which is also an administrator. Free accounts only have one user. If you upgrade to a paid subscription, you can add users to your account. You manage the users (deactivate a user, change password) within your Tutanota account with your administrator user. You may also allow multiple users to be administrators.

In the diagram the '1' at the arrows means there is one item assigned. A user has one mailbox with one main email address, one (or more) calendar(s) and one address book. The '*' means multiple items may be assigned, e.g. an account has one or more users, a user may have multiple calendars and a mailbox has one main email address and may have multiple email aliases (paid feature) on top.

To learn how to set up a user or create an alias, watch this YouTube tutorial.

Yes, Tutanota offers secure business email accounts with lots of whitelabel customizations. You can place the login for your employees directly on your website with a whitelabel domain. Tutanota also offers Secure Connect, an open source encrypted contact form so clients can get in touch with you confidentially directly on your website. Learn here how to use Tutanota in your organization or company with your custom email domain.

Here's a list of all whitelabel customizations for business use. Here's an instruction how to whitelabel Tutanota for your business, how to add the encrypted contact form Secure Connect to your website and more.

Yes, an encrypted calendar is integrated into the Tutanota mail client.

Please check that the time zones of your devices are in sync, including daylight saving time.

If you are using Firefox/Tor Browser with resistFingerprinting option in about:config, this automatically resets the browser time zone to UTC, which then leads to sync issues.

Tutanota was subject to an extensive penetration test by the SySS GmbH in November 2013. During the tests the experts were not able to access the system or to retrieve any confidential data.

Yes, Tutanota will include a whole set of collaboration options such as working together on task lists and documents in the future. You can already book this collaboration tool. Right now it is called 'sharing feature' as you can now share your encrypted calendars as well as email templates with other paid accounts. This is the first step, more collaboration options will be added in the future.

Watch this YouTube tutorial on how to share a calendar in Tutanota.

Yes, you can customize the logo and colors in Tutanota when you book whitelabel.

The date format for your mailbox as well as your calendar is picked either from your language settings in Tutanota or from your system/browser settings. If you pick 'English' under 'Settings' -> 'Appearance', the American date format is displayed. If you pick 'Automatic' under languages, the date format of your browser/system is displayed. If you pick any other language, e.g. German, the date format of this language, e.g. German, is displayed.

Yes, right after registration of a business account you will find a data processing agreement directly in Tutanota under Settings -> Subscription.

Yes, Tutanota as an encrypted email service is perfectly suited for any business that would like to use a GDPR-compliant email service.

Yes, Tutanota is a green email service that relies exclusively on renewable energy for all email systems.

The Tutanota clients use REST services but there is no public documentation for that API or for a library, yet. Keep in mind that when user data is stored in or read from Tutanota, it has to be encrypted/decrypted on the client. You may of course dig into the open source code of Tutanota and integrate with your product, but at this time we can not provide any support for this. We will add a public API documentation in the future.

Tutanota is derived from Latin and contains the words "tuta" and "nota" which means "secure message".

Yes, all Tutanota clients are published as open source under GPLv3. Check out our GitHub repository. We welcome you to review the code, to give us feedback or to contribute!

Your friends deserve email security, too!

Invite your friends to Tutanota and you both win freebies! If they subscribe to Tutanota for one year, you will get credits for 25% of all payments they make within the first month, and they will get one additional free month (13 months instead of 12). Just go to Admin Settings -> Refer a friend and you'll find your personal referral link to share. There is no limit on how many new customers an existing customer can refer.

Please note

• Credits received via our referral program will be used for your invoices within Tutanota. We will never pay out the referral credits nor do we allow transferring those credits to another customer.

• The Tutanota referral program is only meant for inviting people you know. We may terminate contracts with people who spam or bulk mail their referral links.

We donate the business version of Tutanota to non-profit organizations (NPOs), schools and open source projects. Please find details on how your organization can secure your emails for free or with a discount.

Yes, Tutanota supports extensive customization options for business use such as custom colors, custom logo, custom text in the message to external recipients and more. To customize Tutanota, you need to book the Whitelabel feature.

After six months without any login activity, free Tutanota accounts including all contained data are permanently deleted and cannot be restored.

If you still have the correct credentials for the deleted account, you can re-use the same address(es) with a new paid account by adding them either as extra addresses or users.

1. Create a paid account (or use any paid Tutanota account you already have as the target account). It needs to be a different email address than the deleted one.

2. Try to log in to the deleted account.

3. If you enter the correct password, you should see a message below the login form with a "Help" link. Click on "Help".

   

4. Enter the address of your new paid account in the "Target account address" field.

   

5. If the lost account had a second authentication factor (2FA) enabled, enter the Recovery Code. Please make sure to check our guide on using the recovery code here. Otherwise you can leave this field empty.

6. Click OK.

7. Log in to your new account and add the old address(es) under Settings > Email > Email addresses.

If you encounter any issues with receiving emails to your old address, please make sure to wait up to an hour and try again. Otherwise, please read our guide "I have reactivated my deleted address but do not receive Emails."

Make sure that you have waited one hour before trying to receive emails to the reactivated address.

Make sure that you have added the address either as an extra email address or a user to your new account under Settings → Email → Email addresses or Settings → User management. If you are not sure, you can watch our short Youtube video on the difference of email aliases and users.

Unfortunately, some services put email addresses on a blacklist after receiving a bounced delivery report and do not send emails to them at all anymore. If you are trying to receive a password reset link or a login confirmation from an online service, your address might have been banned during the time when your account was inactive. In this case, we cannot do anything from our side. Please contact the service in question and have them check the status of your email address. This usually solves the issue.

The recovery code is a 64-character long string and consists of the characters a-f and 0-9 only. This means that there could be no confusion between similar looking letters and numbers like the letter "o" and the number zero "0" for example.

This string is separated into 16 ordered groups each consisting of 4 characters.

When entering the recovery code you have to include the spaces between every four characters and all letters must be entered in lower case.

You can share a contact list with any Tutanota user. Go to contacts and click the three dots next to your contact list's name. When sharing you can also specify one of three different access permissions to the list:

• Read
• Read and write
• Write and manage sharing

The recipient will receive a notification email and will be able to see and accept the invitation under the contact lists section in the contacts view.

Recipients of shared contact lists can change the display name of the list on their account.

Contact lists are lists of addresses which can be used in Tutanota to easily and quickly include multiple recipients when sending emails, event invitations or even when sharing contacts.

The list can include existing contacts or other addresses and can be shared with other Tutanota users.

Here you can read how to create and use contact lists or how to share contact lists.

Contact lists are available on all new paid plans. To create a contact list navigate to contacts and click on the plus button. On mobile devices, open the left side menu in order to see the contact lists section and the plus button.

An editor pop-up window will open where you can enter the name of the new contact list and optionally add entries below.

When you start typing an address you, will see suggestions from your existing contacts but you can also add addresses which are not yet in your address book.

You can add multiple addresses and click "Save" when done. If you later decide to rename or delete the list, simply click on the three dots button next to its name.

Once you have a list created, you can use it in any recipient field in Tutanota. For example when sending an email or an event invitation. Just enter the name of the contact list in the address field.

Here you can read how to share contact lists.

Some accounts are automatically marked for approval upon sign-up to prevent abuse. This often affects IPs from VPN services or Tor as spammers try to bypass our anti-spam protection method by abusing these services. Please read here why the 48-hour wait is necessary to protect your privacy to the maximum with a truly anonymous email service.

During these 48 hours emails cannot be sent or received. Please do not share your new email address before the blocking has been lifted automatically.

Tutanota uses its own Captcha so that we do not have to depend on using Google Captcha. This enables us to offer an open source email service without any links to Google.

The Tutanota Captcha shows a clock. You need to enter the displayed time with four numerals, including the colon in the middle. If the displayed time is 8.30 for example, you have to enter 08:30 or 20:30 exactly.

To delete your account, go to Settings - Subscription - Delete Account. You need to enter your password upon deletion.

Please note: Deleted Tutanota accounts can't be restored. Deleted email addresses are blocked for registration and can't be used again.

Please check whether the sender was blocked by following this instruction.

Sometimes newly created email addresses are put on hold for 48 hours to prevent abuse. It is important that you do not share your email address until this block is lifted automatically. If you do use the email address to register elsewhere or sign up for newsletters before the block is lifted, this service will send you a confirmation email, which will bounce with a temporary error. This might lead to problems registering with this service, even in the future.

The same issue sometimes affects users whose Tutanota email address has been blocked, for instance due to inactivity. Even after you reactivate your Tutanota email address, this might lead to problems receiving emails from online services because they stopped sending to your address due to bounces. In that case, please contact the service in question and ask them to start sending to your address again.

Most websites and online services let you register with your chosen Tutanota email address just fine. Unfortunately, we have received reports by users that some websites block Tutanota email addresses for registrations. Please check these options to resolve this situation.

If you would like to inform us about abusive usage of one of our domains (tutanota.com, tutanota.de, tutamail.com, tuta.io, keemail.me), please contact us at abuse@tutao.de. Please forward the abusive message to us if appropriate.

If you are a Tutanota user and have received a phishing email, you can report this email by clicking on the three-dot button to the right and then click on 'Report phishing'. Here are more details.

If you would like to report abusive usage originating from another provider's email address, you can find contact addresses at abuse.net.

We at Tutanota take utmost care to secure your mailbox to the maximum. The Tutanota code is published on GitHub, and we invite security experts to check the code. In case you find a vulnerability in Tutanota, please report it directly to us so we can fix it.

Yes, you can downgrade back to free anytime. Before this, you need to disable all extra bookings. You can keep your main Tutanota email address as a free account.

Check here to see how you can upgrade or downgrade.

Yes, the Tutanota Transparency Report is updated every six months. You can check it here. It also includes a Warrant Canary.

You may opt in to share your Tutanota usage data with us to help us test new features and find issues with existing functionality. This consent is optional and may be revoked at any time in settings.

We use usage tests only to improve Tutanota. To evaluate usage tests, we will generate and store a random identifier on your device that is shared across all logged-in accounts. Since your usage data is about your interactions with the app, we do not collect any personally identifiable information.

Your anonymized usage data may be used for research purposes, but apart from this we do not share your usage data with third parties.

Usage data usually takes the form of one of the following:

• Sequences of interactions
• Time required for certain actions
• Points at which a certain interaction is aborted