Arisrv Mail: how your email is protected

Mail between Arisrv users is end-to-end encrypted: each message is sealed on your device to the recipient's key, and the subject, recipients and attachment names are encrypted along with the body.

End-to-end encryption between Arisrv users

When you write to another Arisrv user, your app seals the message on your device to the recipient's public key. The subject line, the recipients and the attachment names are encrypted together with the body. Each recipient gets their own sealed copy, so Bcc recipients stay hidden. Your private keys are protected by a key derived from your password on your device with Argon2id.

Mail with other providers

Email to and from Gmail, Outlook and other providers works too, but the internet's mail system is not end-to-end encrypted. While such a message is being sent or received, our servers can read it. Incoming external mail is checked for spam, phishing and malware, cleaned of known tracking pixels (remote images are blocked by default), and then encrypted to your key before it is stored.

Search without plaintext

Search words are turned into keyed tokens on your device, so the search index never contains your plaintext. The index covers the subject, participants and preview snippet.

Aliases

Alias addresses let you give each sign-up its own address and switch it off when it starts receiving spam. Paid plans have no alias limit; the free plan includes a small number of aliases.

What our servers can see

Some metadata is needed to deliver mail: recipient addresses, message sizes and times, whether a message has attachments, threading identifiers, labels and flags.

Platforms

Arisrv Mail is available on the web and on Windows; the Android app is in testing. iOS is not available yet. Arisrv Mail is funded by subscriptions and contains no advertising.