Private email from Alien Tech Services LLC
Private email that stays easy to use.
EndPaper Mail blocks trackers, seals your mail with keys only your devices hold and signs you in without ever sending your password. Use it on the web, on Android and on Windows, with a new EndPaper address or the Gmail, Yahoo and iCloud accounts you already have.
Free plan: 2 GB and every security feature. Paid plans from $3.99 a month.
One mailbox on every device you use
Your EndPaper folders and rules live on the server, so every device shows the same mailbox.
Android
Native app for phones and tablets. Use your EndPaper address or connect any IMAP account.
Windows
Native app for Windows PCs, built for both x64 and Arm processors.
Web
Open your mailbox in any current browser on any computer. Nothing to install.
iPhone and iPad
A native app for iOS and iPadOS is in development. Use the webmail in Safari until it launches.
Mac
A native macOS app is in development. Use the webmail in Safari or Chrome until it launches.
Native apps for Windows and Android
The same private mailbox, now as apps built for your PC and your phone.
- Windows app in the Microsoft Store. All your inboxes in one list, search across every folder and conversation view.
- Android app on Google Play. Layouts for phones and tablets, a contacts picker and folder backup to ZIP.
- Seven languages in both apps. English, Spanish, French, German, Portuguese, Japanese and Arabic, with a right-to-left layout for Arabic.
- A harder lock on every account. Two-step sign-in now fails closed, every account table locks to its owner and server admin ports answer only one approved address.
Release at a glance
Windows app 1.0.2 · Android app 1.0.2 · Server 0.115.0
Existing sign-ins keep working. Turn on two-step sign-in or add a passkey in Settings to get the full benefit. Read the setup guide.
A stolen password should not open your mailbox
The sign-in page and the apps share one rule. Phishing and server breaches should get an attacker nothing.
Password-free sign-in
EndPaper uses the OPAQUE protocol. Your device proves it knows your password without sending the password. A server breach leaks no password to crack.
Passkeys
Sign in with your fingerprint, face, phone or a security key. A passkey works only on the real EndPaper site, so a fake page gets nothing.
Authenticator codes
Add a 6-digit code from Google Authenticator, Microsoft Authenticator, 1Password or Aegis. Too many wrong codes lock sign-in for 15 minutes.
Passwords sealed on your device
Android seals saved secrets with AES-256-GCM in the phone's hardware keystore. Windows seals them with Windows data protection, so other people on the same PC can't read them.
Encryption your devices control
Mail sealed for your address opens only on devices that hold your keys. We keep a copy of your recovery file only if you ask, and it opens only with your 24 recovery words.
Post-quantum keys
Your phone or browser creates ML-KEM keys, the standard built to resist future quantum computers, alongside OpenPGP for mail with the rest of the world.
Signed key log
Every public key goes into a signed, append-only log. Your devices refuse keys the log cannot prove, and you compare a short code between devices.
Sealed on arrival
Our gateway seals incoming mail for your address as it arrives. The stored copy opens only with your keys.
Protected messages to anyone
Send an encrypted message to someone without EndPaper. They read and reply on a protected page.
Protection in every message you open
Most tracking and fraud arrives inside ordinary mail. EndPaper Mail checks each message before you act on it.
Trackers blocked
Remote images stay blocked until you allow them, so senders can't see when or where you opened a message.
Unsafe link warnings
The Windows app warns you before a link opens when its text hides a different address, a look-alike name or a bare IP address.
Scanned attachments
Attachments sent to your EndPaper address pass a virus scan before download. Preview a file before you save it.
Paid by subscribers
EndPaper Mail earns its money from plans. The apps carry no ads and no analytics code.
Everything you expect from a mail app
Switching takes minutes. Provider presets fill in the server settings for you.
Bring your accounts
Add Gmail, Yahoo, iCloud, AOL, Fastmail, Zoho, GMX or any IMAP mailbox to the Android and Windows apps. That mail goes straight from your provider to your device.
Schedule, snooze, undo
Schedule a send up to 30 days ahead, snooze a message up to 90 days and undo a send for up to 30 seconds.
Rules and auto-reply
Rules sort mail at delivery, even while you are signed out. Block a sender in one step. Out-of-office replies go once per sender per interval.
Find anything
Search one folder or every folder at once. Conversation view groups replies into one thread.
Keep your mail
Back up a whole folder to a ZIP file of standard .eml messages. Print any message or save it as a PDF.
Keyboard shortcuts
Press ? in the Windows or Android app to see every shortcut. Works with a hardware keyboard on tablets.
Plans start at $0. Paid plans from $3.99 a month.
Each paid plan gives you more storage, more addresses or a lower monthly price than the matching Proton Mail, Tuta and Fastmail plan. Billed monthly. Cancel anytime.
Want it on your own server? The Server edition runs on your VPS with unlimited mailboxes. Free Community edition, paid licenses from $4.99 a month.
Questions before you switch
Can I keep using my Gmail, Yahoo or iCloud account?
Yes. The Android and Windows apps connect to Gmail, Yahoo, iCloud, AOL, Fastmail, Zoho, GMX or any IMAP mailbox. Mail from those accounts goes straight from your provider to your device and never passes through EndPaper servers.
What does the free plan include?
One @endpapermail.com address with 2 GB of storage and the full security set: password-free sign-in, passkeys, authenticator codes, post-quantum encryption and the signed key log.
When do the iPhone, iPad and Mac apps arrive?
They are in development. Until they launch, open the webmail at mail.endpapermail.com in Safari on your iPhone, iPad or Mac.
What happens if I lose my phone?
Your keys come back from your recovery file, which opens only with your 24 recovery words. EndPaper keeps a copy of that file only if you ask.
Where are the servers?
In Phoenix, Arizona, in the United States. Mail travels between servers over verified TLS, and the gateway checks DANE records where the receiving domain publishes them.
How do I cancel a paid plan?
Plans bill monthly through Stripe. Open the billing portal, sign in with the email you paid with and select Cancel subscription. Your plan stays active until the end of the month you paid for.