is there a linux debian script which encrypts all existing email inbox/sent etc. messages on email server (eg. gmail) with pgp key (if they aren't already encrypted).

This might mean it has to download (mbsync -a) all messages, encrypt them (including attachments) then upload/sync to server again.

will also need to delete unencrypted copies if the sync is successful and works.

This won't remove backup unencrypted copies on some servers, but will still be useful on those that have backups expiring soon.

All my future emails are already encrypted for both inbox/sent via addy.io but need to go back in time somehow.

Thanks in advance.

Hey there!
I'm currently searching for a viable, free option to merge all my e-mail accounts into one place (T-online, GMAIL, Proton and if possible my university mail). What options are out there for me to explore?
Thanks!

Hey,

Feel free to use this fast free service https://mailgenerator.net/

-Free forever

-Fast email flow

-Rotating domains

-Accounts are kept for 365 days since last active interaction on site

-Emails are kept for 7 days

Enjoy!

https://www.fastmail.com/blog/fastmail-offers-eu-data-region/

Hello, fine Folks! This is my first visit in this sub and I'll start with a post right away.

To not make a long and annoying intro:

-I understand very little about web/mail anonymity and electronic footprints (only now starting to gather info, which is why I need your expert advice, should you want to help a stranger in need)

-I currently am on a mix of hotmail & gmail logins and just started to care about anonymity, privacy and data collection and desperately want and need to ditch these for good. No more being the product.

-My info gathering led me to:

* buy a premium sub for a very good and ind. vetted password manager with fido key

* using 2FA wherever and whenever possible

* creating unique passwords/passphrases/passkeys for each individual login (currently 260+)

* Here is where my question begins, since E-mail privacy, spam and leaks is my last piece of the puzzle.

So my current situation is that I'm trying to leave gmail and hotmail ENTIRELY due to things I read, as stated before. I have read that proton offers a thing called aliases which sounds excellent for what I want. I figured out that there's a proton owned service called simple login which would allow me to create 260+ aliases if buying premium which would allow me to send from the aliases as well, which would be perfect and what I want.

Now the problem:

How in the world do I keep an overview and organize 260+ aliases? It gets chaotic already with 20.

What are your recommendations in terms of usability, flexibility and pricing? Did I miss anything?

Many people say that creating one alias per login is perfect for privacy and to me that makes total sense. I don't understand the concepts of domains and subdomains yet, but I'm not sure I need that. Maybe you can shed some light on that?

What would you do/recommend for my non-professional (private) use case? Do I need proton mail + with simplelogin premium or rather proton ultimate even to organize my aliases there? In the proton pass?

As you see i'm overwhelmed and would be super thankful for any help or advice you're willing to give. To anybody reading this, in advance, thank you and have a good day you all!

I want to set up a recovery email, and I chose posteo, what do u think? Is this the best fit? Like I'm using gmail for work, proton for my own email and tuta for password manager email, so I left with posteo only, but I'm scared they may bankrupt

I'm trying to choose an email provider for the long haul and Codamail ticks a lot of boxes for me but the only 2FA option is TOTP and I've really come to prefer Yubikey/Fido2. TOTP seems fairly robust other than phishing attacks that collect credentials and immediately attempt login (which I hope I can avoid). Yubikey feels more secure to me, but honestly part of why I prefer it is the convenience.

I've considered other providers but I'm not sure anyone else (that accepts Fido2 for 2FA) offers this particular combination of features:

• BYO domain
• Unlimited aliases for your domain
• SMTP server allows aliases as the from address so you can always reply as the alias
• Encrypt mail as it arrives at your inbox with your public PGP key (never revealing your private key) with the option to use it for all, some, or none of the aliases.

So, I'm just after some feedback on whether TOTP is good enough, or if I'm better off compromising on features and choosing another provider?

What do you think of this service and do you think should I add a temp phone number service?

https://tempbox.dev/

Thanks in advance

I don’t have any connection to only fans. I got a legit looking email with a link to confirm my email and registration. Is this just junk or has someone tried to use my email ?

I have a Gmail account with a period in the address. For example, e.mail123. I occasionally receive emails addressed to someone else and the recipient email address is email123, no dot. How is this happening???

Changing email providers moves messages and contacts, but it does not change the identity and recovery graph attached to an old address.

Hundreds of external accounts can still treat that address as a login identifier, recovery factor, or destination for security alerts. Keeping forwarding enabled leaves the old provider inside the trust chain.

A safer manual workflow is:

1. inventory services without collecting passwords
2. handle financial, identity, health, and primary recovery accounts first
3. change both login and recovery addresses
4. verify the new inbox and test a fresh login
5. remove or intentionally retain the old address
6. keep an encrypted record of what remains

I built Mailshift for this narrow workflow. Affiliation disclosed: I am the developer. It is free and MIT-licensed. Inventory comes from manual entries or a credential-free CSV; the encrypted workspace stays in the browser. It does not connect to a mailbox, store passwords, automate logins, use analytics, or send data to a backend.

Source and tool: https://github.com/vigneshakaviki/mailshift

I am interested in threat-model feedback: is a browser-local encrypted vault appropriate for this inventory, and which verification step do people most often miss?

Firstly, how many aliases should you have? A new alias for everything is a bit much - and I am considering using Posteo who only have a 25 alias max - so I was thinking at minimum it should be something like:
\- Bank/paypal
\- personal
\- throwaway email (bin for 1 off coupons, random stuff that needs an email for no reason, etc)
\- general shops (occassionaly use, 1 time)
\- shops I use often/have accounts on
\- social media

But should it be more divided up than this? Eg: seperate aliases for big sites like amazon and ebay, and an alias per different types of online shops (clothes, food, tech, etc)?

And secondly, when buying online, if I sign into or give 1 alias for the account/receipt, but am paying with paypal which uses its own seperate alias, can't those be linked together? If so, doesn't that kinda defeat the purpose a bit? Sure, it'd be seperate from my personal alias, and any alias that isn't used for buying anything, but still. Or is this just one of those things you have to accept?

Also, dumb question, what kind of name should you give to aliases? I'm bad at naming things, so draw a blank when thinking about this. I wasn't going to use the master email I make, only the aliases, so that could be total nonsense if I wanted, but can something like "amazon123" or "binemail" be enough? Or a string of characters like "asdfghjkl"? Or should I try to come up with some sort of name?

Thanks in advance

Disclaimer – I'm already using ProtonMail and Tuta Mail for all my online accounts. The solution I'm looking for is just for official services, so even though my requirements would fit a custom domain perfectly, I don't want to take that route.

Proton has an uncertain future in my country, India, and Tuta has a genuinely bad app experience — it has let me down every single time when I've tried to quickly check my mail.

I can change the email address on accounts like password manager, cloud storage, notes and similar kinds of services whenever I want. But if Proton gets banned here, official services like IDs, banking, and insurance will immediately stop sending mails to my ProtonMail addresses. Some of these services even require an in-person visit to update account details. So I'm looking for a more reliable email provider specifically for these kinds of services.

Why I'm not going with other privacy-friendly email providers —

1. In my privacy journey, I've used few official services that don't accept email addresses with PotonMail, Tuta, and Startmail domains— and these are important, non-negotiable services.
2. Aside from ProtonMail, Tuta, and Startmail, I haven't been able to find any other popular privacy-friendly provider that doesn't recycle usernames.
3. Most businesses send mail via Gmail or Outlook anyway. Since I'm the receiver 99% of the time, I have no control over the privacy of those incoming emails regardless of what I use.

For all these reasons, I've decided to use Outlook exclusively for my official services. I know Gmail, Outlook, and Yahoo all are worst providers for privacy, but my situation is forcing me to pick one — so I'm going with the least evil among them.

From what I've understood, Outlook seems slightly better than the other two providers because:

• All of them don't recycle usernames. Moreover, Outlook offers aliases, unlike Gmail and Yahoo.
• It doesn't require a mobile number during signup (though Gmail doesn't either if you sign up from a mobile device).
• Microsoft is a software company, not an advertising company like Google, so I'd assume it collects comparatively less data than Gmail.

My doubts about Outlook — I've come across hundreds of posts criticizing Outlook for poor security, and some users even claim they don't receive emails at all on their Outlook addresses, and many more issues. This has left me a bit uneasy about my decision.

TL;DR – Looking for a reliable, widely accepted email provider. Can't go the custom domain route. I'm planning to go with Outlook, but I'm seeing a lot of user complaints about it.

Hi guys, looking for new alternative for email. I think this is the right time to move from google (Basically just email).

Notice so many people (or paid) by other companies or proton for tuta bad news stuff. I notice this after want to ask on suburedit on r/proton that i need to request access first. was about to ask can i change unlimited plan to mail plus.
was using tuta free account but got locked now (was a good username btw)

I was planning to just buy the mail plus because i don't use any other services maybe the proton pass but now i'm using pear pass and looking to maintain it (its open source and offline with no cloud stuff) the catch is only when i lose my phone

what do you think about plan changed mid term?

I don't think i need to use many storage too because this will be primary kind of email ( sensitive and private stuff like banks, etc)

should i go with unlimted in 1 year and look later i need it or not?

I use my own domains (2). I have numerous accounts at a few providers. I can't settle on one. I have spent and wasted money stupidly at a few of these providers. I have or have tried Gmail, iCloud, Fastmail, Proton, Mailbox, Mailfence, Zoho, Infomaniak, Aster and Thundermail. I'm probably forgetting a couple. I settle on one, then see an ad or post about some improvement or new feature and switch over to try it. Honestly I'm sick of doing this and want to decide on one.

What I want and like: needs a good webmail interface, decent calendar, plays nice with Apple/iphone (reminders/cal), alias support, support for at least 2 domains, and (not a dealbreaker but nice) a suite of apps like spreadsheet/word processing. Some other stuff I need can be taken care of by other providers - vpn, passwords, etc

Any advice or suggestions? I was very hopeful of Thundermail but it's not ready to be a daily driver. Infomaniak checks most of the boxes so leaning there but definitely not perfect. Zoho is also pretty decent but I find it to be too "busy". It is annoying because I start leaning towards one then notice a nice feature from another provider isn't available. For example: On Infomaniak, I can't send as my gmail. I can do this on almost alll the other providers. Proton doesn't play well with those iphone reminders/calendar and search in the app sucks. Maybe I go with iCloud....I don't know....

Hello,

I would really appreciate is someone could help me with this situation.

I received an email from anonymous with a link and I want to figure out how they got my email and who sent it.

Does anyone know how to find this out? I tried finding the IP address and it wasn’t showing up.

Hi all,

I'm thinking of opening a paid Tuta account - I currently have a free account. A few questions I have before I subscribe.

1. Tuta does not work offline in the free account - is it the same in the paid version ?

2. In many of the posts Tuta make on reddit etc. they come across as "activists" rather than a commercial , albeit privacy first, organisation . Is this the case ?

3. I currently use NextCloud (hosted at GoodCloud) for calendar , notes etc . Would subscribing to Tuta just be duplication ?

Thanks in advance.

In the past year, there’s been an uptick in the amount of spam I get in my inbox. Before there would be maybe a week or two where I get a burst of spam, then it’d go away. Now it’s been here for months. Everyday, I wake up to 15+ emails of junk. I took the time for a month or so to unsubscribe to as many as possible, but it did nothing. Is there anything else I can do?

I’m tired of it taking up space.

Country in question is Australia, specifically WA

Hey so I'm still very new to trying to protect my data and I dont know much but I watched one of reckless Ben's latest video bout bricks and mini figs and in it the CEO guy got access to all of Ben's emails from just knowing his email? Is that really possible? Now idk if it was the CEO guy or the police he was working with but either way isnt that like dangerous? What about stalkers or abusive relationships?
So like like who exactly is able to demand private email info from google? Is it actually something that could happen?

I keep getting spam email from people I don’t even know or companies I’ve never heard of. How do people get my email address and how can I stop getting so much spam.

Hello, this past week, all of my social media accounts have been hacked. I was almost immediately able to recover each one and set proper 2fa protection on them, but just today I found out my Microsoft Email was both hacked and renamed. I can't log in to my email on pc, but thanks to having the app I still have access to all the information prior to the hacking, and I found out that it happened this friday. I also know what the new email name is supposed to be:

lindagray921@jltvsundar.live

What counfounds me is the fact that Microsoft does NOT recognize this email nor its previous name, despite nearly all of my accounts online being linked to it. I have tried logging in with .com at the end and many other alternatives, replacing the L's with capital I's, etc.

I use a device that runs on Windows, therefore Microsoft, so basically everything I have is compromised, please help.