Tuta: encryption, apps and email recovery

Try reading, search and attachments

Search for an invoice, reply from your phone and open an attachment on your computer. These tasks show whether Tuta fits your habits before you move archives and important accounts.

Tuta provides a web interface and its own applications, with encryption central to its approach. It is worth examining for a personal mailbox separate from your current provider. If your workflow depends heavily on an existing mail client, ask about integration early.

Content, subjects and what remains visible

Between Tuta users, end-to-end encryption covers content, attachments and subjects. Email addresses and dates remain among the information required for mail delivery. Ordinary incoming mail from an external provider is encrypted for storage, but that incoming journey was not end-to-end encrypted.

Distinguish an encrypted stored message from an end-to-end encrypted conversation. This helps avoid attributing protection to an exchange that the other end does not use. It also matters when deciding which details belong in an email.

Writing to someone who does not use Tuta

For confidential exchanges with external addresses, Tuta offers a shared-password method and a secure reading interface. The recipient receives a notification giving access to the message. Send the secret through a separate channel and make sure the person knows what to expect.

You can also send ordinary mail when that level of protection is unnecessary. Check the sending mode before clicking. A recipient can still keep a copy, screenshot or attachment: encryption in transit does not control what happens after reading.

Make room for Tuta’s applications

Tuta does not offer conventional IMAP/POP3/SMTP account access that can be configured in any mail client. Its desktop applications cover Windows, macOS and Linux. A specific integration with another program, where available, should not be confused with a standard IMAP account.

Try the application on the device you use every day. Examine notifications, search, filing and attachments. If you usually combine several mailboxes in one interface, assess what adding another app changes. An acceptable compromise for a secondary inbox may become frustrating when handling fifty messages a day.

Keep the recovery code safe

Tuta provides a recovery code to store safely; support cannot simply reset your password. With two-factor authentication enabled, resetting a lost password requires the recovery code and second factor. Removing a lost second factor requires the password and recovery code.

The code alone therefore does not solve losing both password and second factor. Keep that scenario in mind when choosing where to store recovery materials. Your current phone should not be the sole location for everything.

Import archives and check export options

Tuta now supports email import through its desktop application, including EML and MBOX files. Availability depends on the plan: check the current offering before preparing a large migration. An import button does not replace checking the result.

Start with a small set: a simple message, a conversation with several replies, an attachment and some older mail. Compare dates, senders, content and attachments after importing. Also try exporting a message. You want to know how to retrieve data in a usable format even if you like the service today.

1. Keep an independent copy of the original archive.
2. Check the subscription, available space and supported formats.
3. Import a representative sample before moving the whole archive.
4. Review failures and compare a few messages individually.
5. Try an export and protect the resulting files as sensitive mail.

Plan the transition from your old address

Consider Tuta if you want email built around encryption and are comfortable using its applications. Take more time if you depend on conventional IMAP access or most of your correspondence already requires another particular tool.

Keep your old address during the transition. Move a few routine conversations first, then important accounts once you are comfortable with reading, search and recovery. Check that your contacts understand how to read password-protected messages, too.

• Proton Mail: message encryption, Bridge and recovery↗