Tuta (email)

The Secure Messenger: Tuta

Imagine an email service that prioritizes your privacy above all else. That's Tuta—formerly known as Tutanota—a freemium, end-to-end encrypted email and calendar service that puts your data first. With over 10 million users as of June 2023, Tuta operates without advertisements, relying instead on premium subscriptions and donations to fuel its mission.

Beyond its commitment to privacy, Tuta also champions sustainability. In March 2019, the company transitioned to 100% renewable electricity, a decision that coincided with employee participation in 'Fridays for Future' protests—a clear statement of its values.

A Secure Message from Germany

The name 'Tutanota' itself offers a clue to its purpose. Derived from Latin, it combines 'tuta' and 'nota' meaning 'secure message.' This vision of secure communication originated in Hanover, Germany, where Tutao GmbH was founded in 2011.

The developers' goal from the outset was to champion email privacy. This mission gained critical importance in July 2013, when Edward Snowden's revelations exposed the NSA's vast mass surveillance programs like XKeyscore, underscoring the urgent need for truly private communication channels.

From 2014 onwards, Tuta embraced an open-source model. This means its software is publicly available for anyone to review on platforms like GitHub, allowing independent experts to scrutinize its code for vulnerabilities and ensure its transparency and security claims are valid.

In a significant move for privacy-conscious users, Tuta became the first email service to release its app on F-Droid in August 2018. This ensured complete independence from proprietary code, including replacing Google Cloud Messaging (GCM) for notifications with open-standard Server-Sent Events (SSE). This major overhaul also brought a revamped user interface, improved search, and robust two-factor authentication (2FA).

Challenges and Rebranding

Even with strong encryption, Tuta has faced legal challenges. In November 2020, a Cologne court ordered the monitoring of a single Tuta account linked to an extortion attempt. Crucially, this order applied only to future unencrypted emails received by that specific account, leaving all previously received and encrypted messages unaffected.

A major shift occurred on November 7, 2023, when Tutanota officially rebranded to the shorter, snappier 'Tuta.' The familiar tutanota.com domain now seamlessly redirects users to tuta.com, streamlining its brand identity.

However, just days later, on November 11, 2023, Tuta faced serious allegations. An ex-RCMP officer, Cameron Ortis, testified that the service was a 'honeypot'—a deceptive trap used by authorities to lure criminals and gather intelligence for the Five Eyes alliance. Tuta vehemently refuted these claims, stating that no evidence was ever presented to substantiate such a serious accusation.

Services: Mail and Calendar

Tuta Mail remains the company's flagship service, offering a fully end-to-end encrypted email experience across Android (via Google Play, F-Droid, or direct APK), iOS, and dedicated desktop clients for Linux, Windows, and macOS. It's also accessible directly through any web browser.

Looking to the future, Tuta Mail introduced groundbreaking quantum-resistant algorithms in March 2024 for new accounts. This hybrid protocol, similar to what Signal uses, aims to safeguard user data against potential attacks from future quantum computers, preparing for a post-quantum world.

Expanding its secure ecosystem, Tuta launched its standalone Tuta Calendar app in October 2024, available for iOS and Android. This calendar, too, is encrypted with post-quantum cryptography, ensuring that your schedule and appointments remain just as private as your emails.

Pricing and Plans

Tuta offers a flexible pricing model, starting with a free plan that includes 1GB of storage and one calendar. For those needing more, paid plans scale up, such as the popular 'Revolutionary' plan at 3€/month, offering 20GB of storage, unlimited calendars, and 15 email addresses. The 'Legend' plan provides a robust 500GB of storage and 30 addresses for 8€/month, with business plans also available.

The Core of Security: Encryption

When you register with Tuta, a unique private and public key pair is generated right on your device. Your private key is then encrypted with your password using strong hashing algorithms like Argon2 and SHA256 before being securely sent to Tuta’s servers. This ensures that even Tuta cannot access your private key without your password.

For emails exchanged between Tuta users, encryption is automatic and seamless. When sending to external recipients, a shared password enables symmetric encryption, creating a secure tunnel. Tuta takes this further by encrypting not just the email body, but also subject lines, attachments, metadata, and even search indexes, protecting more data than many other services.

However, for operational reasons, some information remains unencrypted: the actual email addresses of senders and recipients, and the timestamps indicating when an email was sent or received. This allows the email system to function while maximizing the protection of content.

Tuta's original encryption approach used a standardized hybrid method, combining the symmetrical AES algorithm with a 256-bit key length and the asymmetrical RSA algorithm with a 2048-bit key. When emailing non-Tuta users, a notification links the recipient to a temporary Tuta account. By entering a pre-arranged password, they can then read and reply to messages with end-to-end encryption.

Embracing the future, Tuta Mail introduced 'TutaCrypt' for all new accounts created after March 2024. This new protocol integrates advanced post-quantum cryptography, designed to resist attacks from even the most powerful quantum computers that may emerge in the future. TutaCrypt replaces the previous RSA-2048 key pairs with new quantum-resistant ones, ensuring the security of the key exchange itself.

Crucially, TutaCrypt continues to employ the robust AES-256 algorithm in Cipher Block Chaining (CBC) mode, combined with HMAC-SHA-256 for authenticated symmetric encryption of the actual message content. A phased transition to TutaCrypt for existing accounts created before March 2024 is planned for December 2024. Tuta also deliberately avoids PGP and S/MIME, citing their limitations in encrypting subject lines and lack of flexibility for algorithm updates, alongside known vulnerabilities in S/MIME.

Reception and Future Vision

Tech reviews have largely praised Tuta. TechRadar, in July 2023, hailed it as an 'Excellent encrypted email platform' for its features and design, though they noted limitations in customer support and storage costs. PCMag, in June 2024, gave it a strong 4 out of 5, highlighting its powerful encryption and user-friendly interface. However, some critics, like CyberNews, pointed out the absence of PGP and IMAP support, and raised concerns about Tuta's German headquarters being part of the 'Fourteen Eyes Alliance'.

Looking ahead, Tuta is developing 'TutaDrive,' a new cloud storage platform with a strong focus on post-quantum cryptography. This ambitious project, officially named 'PQDrive,' is significantly funded by the German government's KMU-innovativ program, with further research and development support from the University of Wuppertal.

Tuta also maintains a clear policy regarding inactive free accounts: those not logged into for six months are deleted. This practice, according to Tuta, enhances security and helps keep the free service sustainable for active users.

Operating within strict data protection frameworks, Tuta has been fully GDPR compliant since 2018, ensuring adherence to the highest standards of user data privacy and rights in Europe.

Despite its global aspirations for privacy, Tuta has faced censorship, being blocked in Egypt since October 2019 and in Russia since February 2020. While specific reasons are often undisclosed, these actions are believed to target services operating independently and offering strong encrypted communications outside of government control.