Tuta Mail The European alternative to Gmail / Outlook

Tuta Mail (formerly Tutanota, rebranded November 2023) is an encrypted email service from German Tutao GmbH in Hanover, founded in 2011. Unlike PGP, Tuta encrypts not just message content but also subject lines, attachments, contacts, and calendar. Since March 2024, new accounts use TutaCrypt, a proprietary quantum-resistant hybrid protocol with CRYSTALS-Kyber and CRYSTALS-Dilithium. Apps are available for Android (Google Play and F-Droid), iOS, Windows, macOS, Linux, and web. Tuta Drive has been in closed beta since April 2026 (funded with 1.5 million euros by the German government).

Tuta Mail operates its own infrastructure in ISO 27001 certified data centers in Germany. No AWS, Google Cloud, or Microsoft Azure is used. The servers run on renewable energy. All clients are open source and published on GitHub and F-Droid. Tuta follows a consistent zero-knowledge policy, where even Tuta cannot decrypt the emails. The company is subject to the GDPR and the German Federal Data Protection Act.

Tuta is the first email provider to combine post-quantum cryptography (NIST-standardized CRYSTALS-Kyber and CRYSTALS-Dilithium) in a hybrid approach with classical algorithms. This is intended to keep emails secure even if future quantum computers can break today's asymmetric encryption. The TutaCrypt protocol has been active for new accounts since March 2024 and is gradually being rolled out to existing accounts. Tuta thereby addresses the "harvest now, decrypt later" risk, where encrypted data could be intercepted today and decrypted later with quantum computers.