Switch to Tutanota now!

We donate the business version of Tutanota to non-profit organizations (NPOs), schools and open source projects. Please find details on how these organizations can secure their emails for free or with a discount.

To apply for the 50% discount, please contact our sales team from your organization's email address and provide the following information:

• Short description of your NPO or school
• Link to your website
• Proof that you are a registered NPO or a school for general education

We will then send you a signup link for Tutanota with the discount included. In case you already have a Tutanota account you want to use for your NPO, please let us know the email address and we will configure the discount for that existing account.

You can sign up for a Tutanota account in four easy steps.

1. Please choose one of the available paid subscriptions.

2. Choose your new Tutanota email address, set a password, and confirm that you have read our terms and privacy policy and that you are above 16 years old.

Then your account is being prepared. If applicable, you can add your custom domain later.

3. Choose a payment method, enter your payment details and confirm.

4. The last step is to make sure that you never lose access to your Tutanota account: Tutanota asks you to write down or print your recovery code. Please take the time to store your recovery code in a safe place. The recovery code is the only way to reset your password should you lose it in the future.

To get started, you need to pick one of the available Tutanota domains for your account.

With any of the paid subscriptions, you can later add alias email addresses and your custom domain to your new Tutanota account.

Tutanota uses its own Captcha so that we do not have to depend on using Google Captcha. This enables us to offer an open source email service without any links to Google.

The Tutanota Captcha shows a clock. If applicable, you need to enter the displayed time with four numerals, including the colon in the middle. If the displayed time is 8.30 for example, you have to enter 08:30 or 20:30 exactly.

After signing up for Tutanota as your new email address, you can easily switch important conversations over from your previous provider. Simply forward all emails from your previous email account to Tutanota. Here is an explanation of how you can activate this process in your old email account:

• Fastmail
• Gmail
• GMX
• Mailbox.org
• Outlook
• Posteo
• Protonmail
• Riseup
• Web.de
• Yahoo
• Zoho Mail

If you own one or more domain names that you want to use with Tutanota, you can add these domains to your paid subscription of Tutanota. The setup wizard for your custom email domain will guide you through the process in just four small steps. In each step the wizard will explain, which configuration changes you have to make. If you don't have a Tutanota account, you can register here.

The setup wizard for your custom email domain can be found in 'Settings' -> 'Global settings' -> 'Custom email domains' by clicking the '+' button.

Check out this YouTube tutorial to learn how to set up your own domain in Tutanota.

In order to send and receive emails with your custom domain in Tutanota, you need to configure the following types of DNS records in the settings of your domain name provider. Prior to configuring those DNS records the wizard will allow you to create new users or email aliases for your custom domain in order to have a smart switch to receiving emails in Tutanota.

• a TXT record to prove that you are the owner of the domain
• an MX record with any priority
• a TXT record for SPF
• CNAME records (_domainkey) for DKIM
• CNAME records for MTA-STS
• a TXT record (_dmarc) for DMARC is recommended

The exact values that these DNS records should point to will be shown to you in the setup wizard.

The MX record is necessary to relay emails for your domain to the Tutanota servers. The SPF TXT record marks the Tutanota server as valid sender of emails from your domain. The _domainkey and _dmarc records make sure your emails are signed with DKIM and sender spoofing of your domain's email addresses can be detected automatically by the recipient mail servers. The MTA-STS records make sure that transport encryption and authentication is used between different mail servers.

Tutanota will indicate if the DNS records are fine for all your domains or if there is something that has to be changed.

Please note that with some domain name providers it may take up to a few hours before changes to your DNS records become visible for other mail servers. You can check your DNS settings here.

A catch-all email address lets you receive all emails sent to your custom domain – even if the sender mistyped your email address.

In Tutanota you can set up a catch-all email address with any paid subscription.

1. First you need to complete the setup process of your custom domain.

2. Go to Settings -> Global Settings -> Custom email domains.

3. Next to each custom email domain is a three dot symbol. When you click it, you can select 'Set a catch all mailbox'. Then you need to choose to which email address and, consequently, to which of your inboxes catch-all mails should go to. This is usually your main admin, but can be any user that you have added to your account.

Once you have set up your catch-all email address, all emails that are being sent to your own domain that do not match any existing email address will be delivered to this catch-all inbox.

Tip: If your domain got leaked to spam lists, we recommend that you set up a dedicated user within your Tutanota account for receiving catch-all emails, e.g. catchall@yourdomain.com.

An email alias is an additional email address that you can use within your mailbox. Tutanota lets you add five or more aliases in any of the paid versions. You can use these alias email addresses for both receiving and sending secure emails.

Alias email addresses can be set up if you would like several email addresses to be linked to one inbox.

For example, as a private user, you might want to have different alias addresses for different purposes, e.g. youraddress@tutanota.com, shopping.youraddress@tutanota.com, newsletters.youraddress@tutanota.com etc.

As a business, you might want several email addresses for different purposes to go to one centrally managed inbox, e.g. support@yourcompany.com, sales@yourcompany.com, jobs@yourcompany.com etc.

If using any of the paid plans, you can add email aliases to your account. You can also switch to larger alias packages. Refer to our pricing page for details.

Go here in your mailbox→ 'Email aliases': Click on 'Show Email Aliases'. Click on the plus symbol to add aliases. A pop-up opens where you can create the alias you want to add. Click on the three-dot button to choose the domain for your alias. This can be any of the Tutanota domains or of your custom email domains that you have added to your Tutanota account.

Please note: It is technically not possible to delete aliases created with a Tutanota domain. These can only be deactivated. Deactivated aliases remain linked to your account in case you want to activate them again in the future. When you are using your own domain with Tutanota, you can delete aliases with your custom email domain and create new ones.

If you need more than five aliases, you need to buy a larger alias package here, even if the aliases are deactivated.

You can change the default sending address to your own domain alias (or any other alias) by changing the default sender here in your mailbox→ 'Default Sender'. This will make your alias the default sender. However, the main address of your Tutanota account (name in tab) will remain unchanged.

To change the alias upon sending an email, click on 'SHOW' in the "Sender" field. Then click on the pen symbol next to the sender and choose the alias you want to send an email from.

As a family or organization using Tutanota, you can set up users for each family member or employee. These users get a separate mailbox, including contacts and calendars, accessible via their personal login credentials.

When you sign up for Tutanota, you create an email account. This account initially has a single user which is also an administrator. With any paid subscription, you can add multiple users to your account. As an admin you can manage the users (deactivate a user, change a password or remove a second factor). You may also allow multiple users to be administrators.

To learn how to set up a user or create an alias, watch this YouTube tutorial.

• Click 'Add user' at the top of the user list. A pop-up opens where you can enter the 'Name' of the user, his 'Email address' and a 'New password' for logging in.
• Please note: Each user gets their own mailbox and login so each user costs extra. If you simply want to add another email address, you can also add the address an alias which are already included in all paid subscriptions.

In Tutanota you can create an unlimited number of folders. Subfolders are currently not supported, but are planned for future release.

To add folders, please click the plus symbol next to 'Your Folders' in your mailbox. A pop-up opens where you can enter the folder name. The newly created folder will be sorted alphabetically under 'Your Folders'.

You can rename or delete existing folders by clicking on the three-dot button next to the folder.

Emails: You can export/download individual emails or batch-export emails by using multi-select. Email import is not yet possible. We plan to support email import as well as an even easier export function with our new secure desktop clients.

Contacts: You can import and export contacts via vCard.

Calendars: You can import and export calendars via .ics. Login with a browser and click on the three-dot button next to the calendar you wish to import data to or you wish to export.

If you have a large number of users, you can import a CSV file containing user name, email address and password. This is useful to automatically create all users in a single step.

To import all users via CSV, you need to create a CSV file with the items 'name', 'email address' and 'password' that contains all users for your company. Then you login with your admin to Tutanota and go to 'Settings' → 'User management' →  '...' → 'Import Users'

You can then provide the user passwords to the users, so they can log in into their individual mailboxes.

In you mailbox, go to 'Settings' -> 'Email' -> 'Inbox rules'

Under 'Inbox rules' (filters) click on 'Show Inbox Rules' and then on the plus-button. A pop-up with three options opens: 'Field', 'Value' and 'Target folder'.

• Field: Click on the pen symbol to define what field should be used for the inbox rule 'Sender', 'To recipient', 'Cc recipient', 'Bcc recipient', 'Subject contains', or 'Header contains'.
• Value: You can enter text such as an email address, a domain name or required content of the subject or header.
• Target folder: Click the pen symbol to define what folder the specified mails should be moved to automatically upon hitting your inbox.
• For inbox rules we support javascript regular expressions. You have to enclose the expression with slashes / like the literal definition of regular expressions. More information can be found here.

We recommend setting up 2FA because of its security benefits. Learn in our online security guide how 2FA helps you to keep your emails safe from hackers.

Registering your second factor

You can connect your second factor with Tutanota in Settings -> Login. As admin you can setup second factors for your users in Settings -> User management.

Tutanota currently supports the following second factor types:

• Security keys (U2F), e.g. Yubikey. U2F is supported in all Tutanota clients.
• TOTP with an authenticator app such as FreeOTP+, andOTP, Authenticator, Authy etc. If setting up a second factor with TOTP fails, please make sure that the time is synced between your devices.

Second factors can be added by administrators and users, but only admins can remove assigned second factors.

Note: If you lose your second factor, you will no longer be able to login to your account. To prevent this, you can add multiple second factors. Additionally, please note down the recovery code shown to you when adding a second factor.

Authenticating with your second factor

During login you have to authenticate with one of your second factors. Alternatively, you may also accept that session from another logged in client. If your browser does not support the second factor you had registered, you can only accept the session from another client.

How to reset your second factor if you lose it

For resetting your second factor, you will need your personal recovery code and your password. You can view and also update your recovery code in Settings -> Login.

If you have lost your second factor, click on More -> Lost account access on the login page. There you will have to enter your recovery code as well as your password to delete all your second factors.

You can secure the stored app login with a pin, pattern or biometrics (fingerprint, Face ID etc.). Please go to Settings -> Login -> Unlock method to activate this.

This option will only show after you have stored your login credentials in the Tutanota app. Upon login tick the checkbox 'Store password' to store your login credentials.

Spam detection in Tutanota is multi staged. For incoming unencrypted SMTP emails, the received email is checked against DNS spam lists first. In a second stage we filter emails by executing content checks and mark emails as spam or not. Emails that have been marked as spam will be moved to the spam folder of your mailbox. In a third stage we filter spam on the base of user defined email sender lists. This list provides the possibility to classify email addresses as spam or not as spam. The check is active for all incoming emails and can be configured by the administrator. The rules are valid for all users.

As administrator for a Tutanota account you can configure the email address list here in Settings.

Within a received email, please click on 'Show more', then click on the From address to assign the email address, the domain, or the top level domain with one of the following spam rules:

• Not spam - Emails from this sender email address are always stored in the inbox.
• Always spam - Emails from this sender email address will always be stored in the spam folder.
• Discard - Emails from this sender email address will be silently discarded. The sender does not get any information about it.

The "No spam" rule has a higher priority than "Always spam" and "Discard" has the lowest priority.

You can set spam rules for sender addresses (highest priority), domains (lower priority), and top level domains (lowest priority). To add a spam rule for a domain, just enter the domain like xyz.com without putting an @ in front. This rule will also apply to emails sent from a subdomain. To add a spam rule for a top level domain, just put in com - for example - no dot is needed before this.

Rules for domains are restricted. You are not able to assign the rules "Always spam" and "Discard" to Tutanota domains, neither to your custom domains.

You also have the option to allow all emails. To do this, create a spam rule and put in an asterisk * where you would usually put in the email address that the rule should apply to.