Yes, you can always access the emails sent via Tutanota through the link from your latest notification email. Old notification links from the same sender are de-activated for security reasons. Your exchanged password, however, stays unchanged as long as the sender does not change it. If you have saved the password upon accessing your confidential emails in your browser, you do not have to re-enter it.
Email aliases are additional email addresses that you can use with the same mailbox without having to switch accounts. Additional email addresses are included in all paid plans of Tutanota. If you upgrade to any of our paid plans, you can add alias email addresses.
Find out more about Tutanota aliases in our How-to (create alias, change default sender, etc.). Learn here what the purpose of an email alias address compared to a user is and how aliases can increase your security.
Yes, email addresses are automatically added to your encrypted Tutanota address book when sending an email unless you deactivate this feature. You'll find details here.
Yes, any paid subscription of Tutanota comes with custom email domain support. Multiple domain support is also available in Tutanota. Please check our pricing page for details.
Please refer to our how-to to learn how to add your own email domains to your Tutanota account and how to make sure that your records (MX, SPF, TXT, DKIM, DMARC, CNAME) are set up correctly in your DNS as well as how to activate/deactive catch-all and more.
In addition you can watch this YouTube tutorial to learn how to set up your own domain in Tutanota.
You can download the Tutanota desktop clients (Windows, Linux, Mac OS) on our homepage.
Yes, Tutanota uses different variables to calculate email limits for individual accounts. This is necessary to protect our free and anonymous email service from spammers who try to abuse Tutanota. If spammers were able to abuse Tutanota, it would harm all Tutanota users - ie Tutanota domains could end up on email spam lists, which we have to prevent under all circumstances.
If you receive the following message in your Tutanota account "It looks like you exceeded the number of allowed emails. Please try again later.", the anti-spam protection method has stopped your account temporarily from sending new emails. Please wait a day or two to send new emails again.
If you need to send more emails immediately, please upgrade to any of our paid plans as limits for paying users are much higher. Simply click on 'Plan' in your side menu bar of Tutanota.
Please note that Tutanota is not meant for sending out mass mailings such as newsletters. Please read our Terms & Conditions for details.
Yes, with a paid subscription you can set up email notifications to any email address under 'Settings' - 'Email' - 'Notifications'. You will be informed about new emails once until you log in. Only if you have logged in to view this email, Tutanota will send another notification to keep notification emails to a minimum.
As a Free user, you can receive push notifications in the browser, the Android & iOS app as well as the desktop clients.
Emails: You can export/download individual emails or batch-export emails by using multi-select. Email import is not yet possible. We plan to support email import as well as an even easier export function with our new secure desktop clients.
Contacts: You can import and export contacts via vCard.
Calendars: You can import and export calendars via .ics. Login with a browser and click on the three-dot button next to the calendar you wish to import data to or you wish to export.
Yes, Tutanota supports an unlimited number of inbox rules / filters for paid accounts. Check our how-to to see how to set up inbox rules.
The language in Tutanota is taken automatically from your browser or system settings. Please change the language there. Alternatively, you can go to 'Settings' -> 'Appearance' to switch the displayed language for Tutanota.
We also invite you to join our translation project to improve Tutanota in your native language!
Yes, you can add existing email addresses (e.g. Alice2, Alice3) as aliases or users to a paid account (Alice1):
Please note: You are only transferring the email addresses. Emails and contacts stored in the deleted accounts (Alice2, Alice3) are being deleted. Please export important emails before deleting the accounts.
In the mobile app, you can currently only login with one user. To switch to another user, you must log out and log in again. You can login with multiple users in the browser by opening several tabs or windows. In the desktop clients, you can also open several windows to login with multiple users.
Please check the app settings on your phone. As we do not use Google's push notifications service, battery optimization must be disabled for Tutanota to receive push notifications instantly.
This is necessary to offer you an open source email service free from any links to Google.
Yes, the Tutanota mobile apps for iOS and Android as well as the Tutanota desktop clients can store a local copy of your mailbox.
To activate local storage of data, please store your password within the client. By default, all contacts, calendars, and all emails sent and received within the last 30 days are then stored locally.
With all of Tutanota's paid subscriptions you can increase the timeframe for which emails should be stored under Settings -> Email -> Local data. Please note that the emails must be loaded once for creating the local copy.
Current encryption standards like PGP and S/MIME have several issues that we plan to address with Tutanota. These standards do not support forward secrecy and are not resistant to attacks from quantum computers.
In addition, it is important to us that the subject line in emails is also encrypted. That's why we have developed a solution that is also based on recognized algorithms (RSA and AES) and that automatically encrypts the subject, the content and the attachments. In the future, we plan to upgrade these algorithms to quantum-resistant ones that also support forward secrecy. You can find more information on why Tutanota does not use PGP here.
We also see the importance that Tutanota needs to be interoperable with other encryption solutions. We will develop an API so that Tutanota users can communicate with users of other secure services confidentially in the future.
No, Tutanota does not support plus addressing (firstname.lastname@example.org) for Tutanota domains. If you want to register with different plus addresses at different sites, you can upgrade to a plan that supports alias email addresses (limited to the number of aliases you book). Alternatively, you can use a custom email domain with catch-all to create an unlimited number of plus addresses for incoming emails.
Yes, Tutanota comes with full-text search of your encrypted mailbox. In the free version, search is limited to four weeks into the past due to heavy server load caused by the encrypted search feature. Learn here how you can improve your search results. The spam folder is excluded from search.
Search is executed locally via an encrypted search index to guarantee security and privacy of your data as well as your search queries. As the search index needs to be stored in your browser, it does not work in private mode/incognito mode. Read here how our innovative full-text search on encrypted data works.
Tutanota desktop app uses system keychain to be able to encrypt sensitive details such as credentials and alarms. On Linux there must be an app installed which provides secret storage (org.freedesktop.secrets interface). This is usually set up together with the rest of the desktop environment but sometimes it requires manual setup. Installing GNOME Seahorse and configuring keychain there should be sufficient. KeePassXC is another provider which can be used but it must be additionally configured.
The Settings are in the navigation menu to the left.
Yes, Tutanota uses a spam filter to keep your mailbox free from spam. We are improving this filter continuously. Should you receive spam emails in your inbox, you can also configure your own spam rules here to deny or allow certain email addresses or domains. If a sender is blocked (rejected) by the spam filter, you can allow the sender for your account.
In paid accounts, only admins can create spam rules that are being applied across all users.
Yes, Tutanota supports HTML editing options (embed images, add lists, bold, italics, underline, monospace, add hyperlinks, align the text left, center, right, justified, change text size, remove all formatting). These are explained in our how-to along with lots of information on email handling.
Yes, all emails in Trash or Spam are automatically deleted 30 days after the emails were moved to these folders. You can also manually empty these folders with one click. Please note: Emails deleted from Trash or Spam folders are physically deleted and can't be restored.
You can download the Tutanota app from the following stores:
In addition to that, you can also directly download and install the APK for Android. Keep in mind that you will not get updates automatically if you install the app manually instead of using an app store. You can add our blog to your RSS-reader with this link to get notified about updates: RSS-Feed
Web: The web version of Tutanota is automatically updated whenever you reload the page. If an update is released while you're using Tutanota, you will see a pop-up notification prompting you to update. All you have to do is click on "Refresh" to update. If Tutanota does not update in your browser, you can trigger a manual update by loading Tutanota in private/incognito mode of your browser.
Desktop: The desktop app automatically checks for updates by default. Whenever it finds an update, it is downloaded in the background and you receive a push notification. Under Settings -> Desktop you can activate/deactivate automatic updates or manually check for updates
iOS/iPadOS: Please use the App Store to check for Tutanota updates.
Android: If you're using the Google Play store, please check there for updates.
F-Droid: Please make sure that you open F-Droid and navigate to the updates page. Swipe down anywhere on the screen to sync your repositories. Once done, you will be able to see any available updates for Tutanota.
Please note: Our system sends update notifications via email whenever we detect an active session from an outdated client. Please go to Settings -> Login and close any unused sessions under Active Sessions.
Download: You can download the Tutanota clients here.
If you add another user to your account (family member, partner, team member etc.), you get the following benefits:
Furthermore, we have recently added a sharing feature for the encrypted calendar which we will extend in the future. Sharing of entire calendars only works with other paid Tutanota accounts.
WebView is a system app on Android devices which allows us to display web content inside the Tutanota app. Newer versions let us use newer technologies to make the app smaller, faster, more beautiful and more reliable. If you experiencing issues or bugs with the Android app, updating WebView has a good chance to help.
We recommend setting up 2FA because of its security benefits. Learn in our online security guide how 2FA helps you to keep your emails safe from hackers.
Registering your second factor
Tutanota currently supports the following second factor types:
Second factors can be added by administrators and users, but only admins can remove assigned second factors.
Note: If you lose your second factor, you will no longer be able to login to your account. To prevent this, you can add multiple second factors. Additionally, please note down the recovery code shown to you when adding a second factor.
Authenticating with your second factor
During login you have to authenticate with one of your second factors. Alternatively, you may also accept that session from another logged in client. If your browser does not support the second factor you had registered, you can only accept the session from another client.
How to reset your second factor if you lose it
For resetting your second factor, you will need your personal recovery code and your password. You can view and also update your recovery code in Settings -> Login.
If you have lost your second factor, click on More -> Lost account access on the login page. There you will have to enter your recovery code as well as your password to delete all your second factors.
Email encryption is needed whenever you want to send a confidential email. That is whenever your email contains personal information that should not become public. The following examples show the differences between end-to-end encrypted, confidential emails and emails that are not being end-to-end encrypted in Tutanota.
In this YouTube tutorial we demonstrate how you can send an encrypted email in seconds.
Alice is registered with Tutanota, Bob may be registered with Tutanota or an external recipient and Carol is not registered with Tutanota. In any case all emails (including attachments) are stored encrypted on the Tutanota servers. Independent of the end-to-end encryption, the transport between client and Tutanota servers is secured with TLS to maximize security.
Sending and receiving end-to-end encrypted emails
The email is encrypted on Alice's client, stored encrypted on the server and can only be decrypted by Alice or Bob.
Sending non-confidential emails
The email is sent via SMTP to the recipient. Still, the sent email is encrypted for Alice on the server and then stored.
Receiving non-confidential emails
When the SMTP email is received by the Tutanota server, it is encrypted for Alice and then stored on the server.
If you own one or more domain names that you want to use with Tutanota, you can add these domains to your paid subscription of Tutanota. The setup wizard for your custom email domain will guide you through the process in just four small steps. In each step the wizard will explain, which configuration changes you have to make. If you don't have a Tutanota account, you can register here.
The setup wizard for your custom email domain can be found in 'Settings' -> 'Global settings' -> 'Custom email domains' by clicking the '+' button.
Check out this YouTube tutorial to learn how to set up your own domain in Tutanota.
In order to send and receive emails with your custom domain in Tutanota, you need to configure the following types of DNS records in the settings of your domain name provider. Prior to configuring those DNS records the wizard will allow you to create new users or email aliases for your custom domain in order to have a smart switch to receiving emails in Tutanota.
The exact values that these DNS records should point to will be shown to you in the setup wizard.
The MX record is necessary to relay emails for your domain to the Tutanota servers. The SPF TXT record marks the Tutanota server as valid sender of emails from your domain. The _domainkey and _dmarc records make sure your emails are signed with DKIM and sender spoofing of your domain's email addresses can be detected automatically by the recipient mail servers. The MTA-STS records make sure that transport encryption and authentication is used between different mail servers.
Tutanota will indicate if the DNS records are fine for all your domains or if there is something that has to be changed.
Please note that with some domain name providers it may take up to a few hours before changes to your DNS records become visible for other mail servers. You can check your DNS settings here.
Please note that we do not support email import, yet. We plan to enable import in the coming months. For now, we recommend to keep your old mailboxes as a reference when moving to Tutanota from another provider or storing all emails locally.
On our business site, there is a summary of all available features of Tutanota's secure business emails.
When you create a new Tutanota account, our secure password reset feature empowers only you to reset your account yourself. Please make sure that:
In case you can't login to Tutanota, please make sure that:
We do not know your password and can't modify your second factors. However, there are different ways on how to regain access to your mailbox in case of a lost password or a second factor.
Administrator is available
If you are a member of an organization or a business: Ask your administrator to reset your password. Each administrator can reset the passwords of other users and admins. If you want to make sure to never lose your paid account, it's best to have at least two administrators.
Recovery code is available
Your recovery code is your personal code to resetting your account. If you did write it down when you created your account, you can reset your password or second factor using your personal recovery code by clicking on More > Lost account access on the login page.
You can view and also update your recovery code in Settings > Login. You can also find more information on this secure reset feature on our blog.
With 2FA enabled, you will need 2 out of 3 to reset your Tutanota account:
Click here to reset your password. You will need your second factor (if 2FA enabled) and your recovery code.
Click here to reset your second factor. You will need your login password and the recovery code.
Please note: If you lose your password and your second factor, there is no option to reset your Tutanota account with the recovery code.
To search your encrypted mailbox, simply click on the top search field or press F.
It is very important to know that you can search for multiple words at once, for instance sender's email address, keyword and file ending. Such a search could look like this: email@example.com meeting notes pdf
When you press enter, Tutanota takes you to a more detailed search mask. The free search feature goes back one month into the past.
The detailed search mask lets you specify the time frame which should be searched (one month for free users). The unlimited search feature also lets you filter your search, e.g. who sent the email, to whom did you send the email, was the search query contained in the subject or in the body, what folder should be searched.
As all data in Tutanota is encrypted, using our innovative search feature causes a lot of traffic. This is why unlimited search is only available to paying users. Learn here how you can benefit from extra features by upgrading.
Please note: You can only search emails and contacts, thus, the search field is not shown when you are browsing the 'Settings' of your mailbox.
To update WebView it is enough to install or update one of the following apps:
For most Android versions: Android System WebView
For Android N (7), Android O (8), Android P (9): Chrome
For some specific Android installations (e.g. custom Android ROMs, some LeEco devices) the procedure might be different or might not work. Please refer to your device or OS vendor for instructions.
Advanced: Changing WebView provider
If you do not want to use Google-provided WebView, it is possible to install some other app (like Chromium or another WebView build) which can be used instead. Please refer to these instructions. Please note that we can only support Chrome/Chromium based WebView.
When sending an encrypted email to an external recipient, you need to specify a password when composing the email.
Once set, the password will be automatically saved along with the contact in your Tutanota address book, which makes your encrypted address book the password manager for your external contacts. Next time you write an email to that recipient, you simply specify the email address and Tutanota automatically enters the password. The password needs to be exchanged via a second channel. If you would like to change the password, you can either do this within the contacts view or when composing a new email to this external recipient.
The external recipient
Note: The link within the notification email contains a salt which is needed for decryption along with the password. Thus, someone who wants to intercept your encrypted messages needs the exact link and the password. (An old link gets deactivated as soon as you send a new email to the same email address.)
Watch our YouTube tutorial on how to send an encrypted email to external recipients.
When you select an email, these options show up to its top.
The top email menu has the following options:
If you want to print an email as pdf, you can use the browser function for printing.
Sending of emails
Condensed email window.
Enlarged email window.
When writing an email you can use these text editing tools
Please use mouse-over in the web client to see what symbol represents what function. The Tutanota text editing tools enable you to embed images, add lists (bullets and numbers), change texts to bold, italics, underline, monospace, add hyperlinks, align the text left, center, right and justified, change the text size, and remove all formatting from selected text.
Depending on the width of your browser Tutanota displays the left Settings menu, your folder list, your mail list, and the selected mail.
Spam detection in Tutanota is multi staged. For incoming unencrypted SMTP emails, the received email is checked against DNS spam lists first. In a second stage we filter emails by executing content checks and mark emails as spam or not. Emails that have been marked as spam will be moved to the spam folder of your mailbox. In a third stage we filter spam on the base of user defined email sender lists. This list provides the possibility to classify email addresses as spam or not as spam. The check is active for all incoming emails and can be configured by the administrator. The rules are valid for all users.
Within a received email, please click on 'Show more', then click on the From address to assign the email address, the domain, or the top level domain with one of the following spam rules:
The "No spam" rule has a higher priority than "Always spam" and "Discard" has the lowest priority.
You can set spam rules for sender addresses (highest priority), domains (lower priority), and top level domains (lowest priority). To add a spam rule for a domain, just enter the domain like xyz.com without putting an @ in front. This rule will also apply to emails sent from a subdomain. To add a spam rule for a top level domain, just put in com - for example - no dot is needed before this.
Rules for domains are restricted. You are not able to assign the rules "Always spam" and "Discard" to Tutanota domains, neither to your custom domains.
You also have the option to allow all emails. To do this, create a spam rule and put in an asterisk * where you would usually put in the email address that the rule should apply to.
To insert a template into the mail editor, please login to Tutanota in the browser or in one of the Tutanota desktop clients:
If you have created several language versions for this template, you can choose the correct one after hitting tab (step 2).
Alternatively, you can access your templates by typing ctrl+space, or from the editor toolbar. There you can search for the correct template and insert it.
Tutanota blocks automatic image loading to protect your privacy. To load external images, please click on 'Show' above the mail body to load the image for now or on 'Always trust sender' to always load all images sent from this email address. Please note that you have to allow images from a trusted sender on all your devices once. In the case that mail authentication fails or is non-existent, images will not be loaded even if the sender has been allow-listed. Inline images are displayed directly as no external content needs to be loaded.
How to receive blocked emails.
Go to 'Settings' -> 'Global Settings' -> 'Rejected email senders' to check whether any email to your account has been blocked due to the sender being listed on a spam list. You can click 'Refresh' to refresh the list in case you are waiting for a registration email. If a blocked email is shown here, you can allow the sender so that emails from this sender will reach your inbox in the future.
'Login' shows you several info items about your Tutanota account.
Here you can configure how you want to send your mails.
'Inbox rules' (filter): Click on 'Show Inbox Rules' and then on the plus-button. A pop-up with three options opens: 'Field', 'Value' and 'Target folder'.
'Notifications': Click on 'Show' and the plus symbol. A pop-up opens where you can enter an email address that should be notified once a new mail arrives in your Tutanota mailbox.
Please login to Tutanota in the browser or in one of the Tutanota desktop clients. In Settings -> My Templates you can create templates to answer repetitive requests faster. Click on 'New template' to create new template.
For your template, enter a Title, a Shortcut, select the language (here: English), the content. When using templates, you will need the shortcut to find the correct template. The content will be added to the mail editor automatically.
Go to Settings -> Payment to view and update your payment details.
Once upgraded you can add 'Extensions':
To upgrade a Free account (or downgrade), please go to Settings -> Plan -> Plan and click on the pen symbol. Then you can pick another plan (picture below).
Under Settings -> Plan you can also sign the 'Order processing agreement' if you need to comply with the GDPR, switch your 'Payment interval' from monthly to yearly, check your price per year, and add more 'Extensions' or order gift cards.
When you order the Whitelabel feature, you have two options: The Whitelabel feature is already included in the Pro subscription. Alternatively, you can order it separately in your paid account. Your whitelabel domain can be any subdomain, and might look like 'secure.mycompany.com' or 'email.mycompany.com'. In order to setup whitelabel you must be able to set the CNAME DNS entry.
Now you can open your website in your browser and see the Tutanota login with your customizations.
Windows: Go to Settings > Apps > Default Apps to choose Tutanota as you default email app.
Mac: Go to the Settings -> Desktop -> set "Default email handler" to "Registered".
Linux: This depends on your distribution. Please refer to the relevant documentation. Useful keywords are "mailto handler", "protocol handler"
On all platforms, you may have to tell applications like your internet browser to use the system default mail app.
Mac: Double-click the installer and follow the instructions on your computer.
Linux: After download, right click the AppImage and give it execute permission. Alternatively, run
chmod +x tutanota-desktop-linux.AppImage from a terminal window. Now you can run the App like any other executable, no further installation required. You may want to let it integrate itself with your desktop and app launcher.
Windows: Double-click on the Tutanota app and follow the instructions on your computer.
Enterprise mode (Windows): The desktop client can be installed on Windows in "enterprise mode" by passing the following flags to the installer:
The application may also be uninstalled silently, by passing /S to the uninstaller (in the installation directory under Program Files).
Sometimes the browser does not recognize the newly installed Tutanota desktop client as the default mailto app. If clicking a mailto-link does not open an email in the desktop client, please make sure that the Tutanota desktop client is activated as the default email app in your system settings as described above.
If everything is set up correctly, these instructions might help to troubleshoot:
The Windows desktop client comes with MAPI support. Via the context menu of a file -> Send to... -> Email recipient - you can directly attach files to a new email.
In various programs (Office, Adobe Acrobat Reader, SAGE50) you can use the "Send document as mail" function and attach the currently opened file to a new email. You can find more details on our blog.
You need to activate the 'Run in background' option to receive notifications from the desktop client. This option appears in your notification area on Windows and in the Tray on Linux.
When it is active, the desktop client will not terminate when all windows are closed and instead remain in the background to provide desktop notifications in case of incoming email or calendar alarms.
If you can't see the tray icon on Linux despite the app running and the 'Run in background' option being set to 'Yes', please refer to your distribution's documentation to enable tray icons or AppIndicators. On MacOS, this option is not visible, and the dock icon is always used to provide a context menu.
If you still do not receive notifications, please check that you do not have focus mode, alarms only, or do not disturb modes on. You can also check the desktop settings of the client.
Windows: Hit the windows key, type "apps", choose the entry "Apps & Features". In the settings window, search for "Tutanota Desktop". Click it and then click the "Uninstall" Button.
Mac: Right-click the Application in the Applications folder and select "Move to bin". To remove the app cache as well, you need to delete the directory
~/Library/Application Support/tutanota-desktop/, for example via the terminal:
cd ~/Library/Application\ Support/ rm -r ./tutanota-desktop
Delete the AppImage, then delete the file
~/.local/share/applications/appimagekit-tutanota-desktop.desktop and the directory
~/.config/tutanota-desktop/ if they're present.
If you want to remove the icons, too, open a terminal window and type
cd ~/.local/share/icons/hicolor/ ls **/*/appimagekit-tutanota-desktop.png
rm -i **/*/appimagekit-tutanota-desktop.png
The Tutanota desktop applications for Linux, Windows, and Mac OS are signed. The signatures make sure that the desktop clients as well as any updates come directly from us and have not been tampered with. Upon every update, the desktop client automatically checks that the signature is valid.
You can verify the authenticity of your manually downloaded installer with the OpenSSL utility yourself as well. It should be installed on most Linux and Mac systems, but needs to be added to Windows, you can get OpenSSL via this link.
The installer signatures are provided as separate files: