Mailbox.org

mailbox.org is an encrypted email service provider based in Germany. The encryption system uses PGP like most other encrypted email providers. It also features address books, calendars, video conferencing, online office and tasks management. It competes against Microsoft 365 and Google Workspace as a German based provider. Its target customers include private, business, school and public authorities.

History

In the wake of Snowden leaks, mailbox was started as a self-funded email provider in 2014 with aim to increase data protection and privacy. Mailbox had been around in different forms since 1990. Mailbox's root lay in political provider JPBerlin since 1989.

Since 2016, Mailbox.org has offered a Tor exit node for anonymizing connection data. If Mailbox.org's services are accessed via the Tor anonymization network and the Tor exit server, Mailbox.org no longer logs IP addresses that would be suitable for data retention.

In January 2021, Berlin education department announced in press release to provide accounts for data-secure service emails for all of its approximately 33,000 Berlin public school teachers by the end of the year through a collaboration with mailbox.org. But in December 2022, Berlin schools were again planned to convert from mailbox email to Microsoft exchange emails as reported by Der Tagesspiegel.

Features

Pricing

Mailbox.org's basic offers 3 plans: light, standard and premium. Light is €1/month/user for 2 GB of email storage and 3 alias address. Standard is €3/month/user for 10 GB email storage, 2 GB drive storage and 25 mailbox alias and 50 custom domain email alias. The premium option is €9/month/user and gives 25 GB email storage, 5 GB cloud storage and 250 alias address to a custom domain as well as 25 mailbox alias address as well as priority email and telephone support.

Security

Mailbox uses PGP encryption. Mailbox.org has received IT Security label from German federal office for Information Security. Mailbox has a dedicated Tor Exit Node with an onion service address.

Mailbox.org developed various new approaches to protect user data: for example, the provider was the first to introduce the option of subsequently encrypting all incoming e-mails with the user's public PGP key, thus providing special protection against access by third parties should the mailbox password be lost or compromised.

When using the webmail offer, it is possible to encrypt and also decrypt one's e-mails using PGP without special client software (e-mail program with any plug-ins that may be required), without necessarily using a browser extension such as Mailvelope. Keys and the encryption process take place outside the user's sphere of influence on mailbox.org's servers, which, however, contradicts the principle of end-to-end encryption. However, according to Peer Heinlein, CEO of mailbox.org, the private keys are stored on the servers at all times with a password known only to the user, so they cannot be viewed by administrators. In addition, this avoids the need to store private PGP keys on end devices that are perceived as insecure.

Video conferencing

The video conference service offered is based on open source OpenTalk software.

Others

Mailbox also has XMPP server for its users. It also offers address books, calendars and online office. The office suit includes online word processor and spreadsheet.

Transparency

Mailbox publishes an annual report of the number of information requests it received from various governments.

Reception

A 2018 review by Ctrl Blog highlighted mailbox.org as a feature-rich and privacy-focused email provider. The reviewer praised its support for PGP encryption, productivity tools and commitment to user privacy. However, the review also criticized the complexity of the PGP setup for non-technical users and noted that some user interface elements could be confusing or unintuitive.

References

{{Ref-list

External links

mailbox.org

Email clients
Secure communication
Webmail
Business software
Communication software