ABOUT SVPN MAIL
Your conversations.
Your keys.
Email should be easy to use and hard to pry into. SVPN Mail puts a clear, comfortable inbox around encryption that works quietly in the background.
PRIVACY THAT DOES THE WORK
Protection beyond the padlock.
Private Mail protects your words and reduces what needs to be kept around them.
Encrypted on your device
Messages, drafts, attachments and supported private data are protected with keys that unlock on your devices. We can store the encrypted copy, but we can’t read it without your key.
Built for what comes next
Hybrid post-quantum encryption combines ML-KEM-768 and X25519, with AES-256-GCM protecting the content. It is designed to resist attackers saving encrypted data to try to decrypt later.
A smaller metadata trail
Completed internal delivery records keep encrypted sender information and mailbox-specific identifiers. Fresh encryption for each stored copy makes it harder to link mailboxes by matching the same ciphertext.
Private inside. Connected to everyone.
You can use one inbox for protected SVPN conversations and ordinary email.
Encrypted before it leaves you.
Between participating Private Mail accounts, your device encrypts the message for the recipient. Their device verifies and decrypts it. Message text and attachments stay encrypted through internal delivery.
Ordinary email, without extra steps.
Send and receive email as usual. Incoming external email is processed for delivery, then the Private Mail copy is encrypted for storage. External messages aren’t end-to-end encrypted; the other provider can read its copy.
Less retained metadata doesn’t mean invisible traffic. Mail still processes the destination during delivery. Receiving mailbox, timing, size and account activity can remain visible and may allow traffic correlation. Protecting internal metadata doesn’t hide ordinary email from other providers or erase historical backups.
MADE FOR EVERYDAY EMAIL
A good inbox should feel obvious.
Useful tools, thoughtfully placed. Less fuss between you and your next message.
An inbox that makes sense
Nested labels, filters, stars and snooze. Keep your mail organized in a way that feels natural to you.
Write without the friction
Rich text, inline images, attachments and signatures. Reply in context, with contacts suggested as you type.
Find the conversation
Search your messages with useful operators. Private Mail searches protected content on your device while unlocked.
Notes that stay private
Add an encrypted note to a message. It syncs with your mailbox, stays separate from the email, and is never sent.
Keep people close
Contacts, groups and familiar addresses at your fingertips. Your private contacts sync as encrypted data.
Your inbox, at your pace
Choose notifications and sounds for new mail and returning snoozed messages. Preview a sound before choosing it.
A comfortable desktop workspace. A focused phone interface. Install SVPN Mail as an app, and choose a theme that feels right.
FOR THE TECHNICALLY CURIOUS
The protection, spelled out.
These protections apply to supported Private Mail content. Existing content is protected after its migration completes.
- Key encapsulation
- X-Wing hybrid: ML-KEM-768 + X25519. Combines post-quantum and classical protection.
- Message and file encryption
- AES-256-GCM authenticated encryption; HKDF-SHA-256 key derivation. Large files use individually authenticated chunks.
- Sender signatures
- Ed25519 signs internal message manifests. The recipient verifies the signature and checks the sender’s key before decryption.
- Password authentication
- OPAQUE exchanges cryptographic proofs for Private Mail sign-in. Your password and the key used to unlock your mailbox stay in your browser.
- Private key storage
- Keys are generated on your device. Encrypted key copies support sign-in on additional devices and recovery; the service cannot unlock them.
- Internal delivery privacy
- Sender manifests are encrypted to each mailbox. Conversation and retry identifiers are mailbox-specific, and stored message copies use fresh encryption.
- Notifications
- Generic notifications contain no sender, subject or message text. Bursts of internal mail share one notification; mailbox updates remain immediate.
- Recovery
- A recovery code lets you regain access to your encrypted mailbox. If you lose both password access and that code, we cannot recover the key for you.
What encryption can’t protect
Someone who controls an unlocked device or compromises the code running in your browser may access decrypted content. Keep devices and browsers up to date. Recipient fingerprints can be compared through a separate trusted channel; a changed key needs review.
Post-quantum mailbox encryption does not make ordinary external email or its SMTP delivery post-quantum encrypted. Current sender signatures use Ed25519, a classical signature scheme. Metadata reduction limits retained links; it does not provide anonymous routing or prevent all traffic analysis.
See how a calmer inbox feels.