Yes, you can always access the emails sent via Tuta through the link from your latest notification email. Old notification links from the same sender are de-activated for security reasons. Your exchanged password, however, stays unchanged as long as the sender does not change it. If you have saved the password upon accessing your confidential emails in your browser, you do not have to re-enter it.
Email aliases are additional email addresses that you can use with the same mailbox without having to switch accounts. Additional email addresses are included in all paid plans of Tuta. If you upgrade to any of our paid plans, you can add alias email addresses.
Find out more about Tuta aliases in our How-to (create alias, change default sender, etc.). Learn here what the purpose of an email alias address compared to a user is and how aliases can increase your security.
Yes, email addresses are automatically added to your encrypted Tuta address book when sending an email unless you deactivate this feature. You'll find details here.
Yes, any paid subscription of Tuta comes with custom email domain support and unlimited email addresses for custom domains. Multiple domain support is also available in Tuta. Please check our pricing page for details.
Please refer to our how-to to learn how to add your own email domains to your Tuta account and how to make sure that your records (MX, SPF, TXT, DKIM, DMARC, CNAME) are set up correctly in your DNS as well as how to activate/deactive catch-all and more.
In addition you can watch this YouTube tutorial to learn how to set up your own domain in Tuta.
Yes. Before logging in, click on 'More' and 'Switch color theme' to switch to the dark theme. This works in all Tuta clients (web, desktop, apps). Alternatively, you can go to 'Settings' -> 'Appearance' to switch to the dark theme. To add a custom theme, you need to book whitelabel.
You can download the Tuta desktop clients (Windows, Linux, Mac OS) on our homepage.
Yes, Tuta uses different variables to calculate email limits for individual accounts. This is necessary to protect our free and anonymous email service from spammers who try to abuse Tuta. If spammers were able to abuse Tuta, it would harm all Tuta users - ie Tuta domains could end up on email spam lists, which we have to prevent under all circumstances.
If you receive the following message in your Tuta account "It looks like you exceeded the number of allowed emails. Please try again later.", the anti-spam protection method has stopped your account temporarily from sending new emails. Please wait a day or two to send new emails again.
If you need to send more emails immediately, please upgrade to any of our paid plans as limits for paying users are much higher. Simply click on 'Plan' in your side menu bar of Tuta.
Please note that Tuta is not meant for sending out mass mailings such as newsletters. Please read our Terms & Conditions for details.
Yes, with a paid subscription you can set up email notifications to any email address under 'Settings' - 'Email' - 'Notifications'. You will be informed about new emails once until you log in. Only if you have logged in to view this email, Tuta will send another notification to keep notification emails to a minimum.
As a Free user, you can receive push notifications in the browser, the Android & iOS app as well as the desktop clients.
You can request and discuss new features with us and other users in our Reddit community. You can check whether someone has already requested this feature and whether we have already added it to our Roadmap.
Emails: You can export/download individual emails or batch-export emails by using multi-select. Email import is not yet possible. We plan to support email import as well as an even easier export function with our new secure desktop clients.
Contacts: You can import and export contacts via vCard.
Calendars: You can import and export calendars via .ics. Login with a browser and click on the three-dot button next to the calendar you wish to import data to or you wish to export.
Yes, Tuta supports an unlimited number of inbox rules / filters for paid accounts. Check our how-to to see how to set up inbox rules.
The language in Tuta is taken automatically from your browser or system settings. Please change the language there. Alternatively, you can go to 'Settings' -> 'Appearance' to switch the displayed language for Tuta.
We also invite you to join our translation project to improve Tuta in your native language!
Yes, you can add existing email addresses (e.g. Alice2, Alice3) as aliases or users to a paid account (Alice1):
Please note: You are only transferring the email addresses. Emails and contacts stored in the deleted accounts (Alice2, Alice3) are being deleted. Please export important emails before deleting the accounts.
In the mobile app, you can currently only login with one user. To switch to another user, you must log out and log in again. You can login with multiple users in the browser by opening several tabs or windows. In the desktop clients, you can also open several windows to login with multiple users.
Please check the app settings on your phone. As we do not use Google's push notifications service, battery optimization must be disabled for Tuta to receive push notifications instantly.
This is necessary to offer you an open source email service free from any links to Google.
Yes, the Tuta mobile apps for iOS and Android as well as the Tuta desktop clients can store a local copy of your mailbox.
To activate local storage of data, please store your password within the client. By default, all contacts, calendars, and all emails sent and received within the last 30 days are then stored locally.
With all of Tuta's paid subscriptions you can increase the timeframe for which emails should be stored under Settings -> Email -> Local data. Please note that the emails must be loaded once for creating the local copy.
Current encryption standards like PGP and S/MIME have several issues that we plan to address with Tuta. These standards do not support forward secrecy and are not resistant to attacks from quantum computers.
In addition, it is important to us that the subject line in emails is also encrypted. That's why we have developed a solution that is also based on recognized algorithms (RSA and AES) and that automatically encrypts the subject, the content and the attachments. In the future, we plan to upgrade these algorithms to quantum-resistant ones that also support forward secrecy. You can find more information on why Tuta does not use PGP here.
We also see the importance that Tuta needs to be interoperable with other encryption solutions. We will develop an API so that Tuta users can communicate with users of other secure services confidentially in the future.
No, Tuta does not support plus addressing (xyz+username@tutanota.com) for Tuta domains. If you want to register with different plus addresses at different sites, you can upgrade to a plan that supports alias email addresses (limited to the number of aliases you book). Alternatively, you can use a custom email domain with catch-all to create an unlimited number of plus addresses for incoming emails.
Yes, Tuta comes with full-text search of your encrypted mailbox. In the free version, search is limited to four weeks into the past due to heavy server load caused by the encrypted search feature. Learn here how you can improve your search results. The spam folder is excluded from search.
Search is executed locally via an encrypted search index to guarantee security and privacy of your data as well as your search queries. As the search index needs to be stored in your browser, it does not work in private mode/incognito mode. Read here how our innovative full-text search on encrypted data works.
Tuta desktop app uses system keychain to be able to encrypt sensitive details such as credentials and alarms. On Linux there must be an app installed which provides secret storage (org.freedesktop.secrets interface). This is usually set up together with the rest of the desktop environment but sometimes it requires manual setup. Installing GNOME Seahorse and configuring keychain there should be sufficient. KeePassXC is another provider which can be used but it must be additionally configured.
The Settings are in the navigation menu to the left.
Yes, you can change the signature in Settings -> Email. Every account can change their signature. To support our free and secure email service, please leave the link to our homepage in your signature.
Yes, Tuta uses a spam filter to keep your mailbox free from spam. We are improving this filter continuously. Should you receive spam emails in your inbox, you can also configure your own spam rules here to deny or allow certain email addresses or domains. If a sender is blocked (rejected) by the spam filter, you can allow the sender for your account.
In paid accounts, only admins can create spam rules that are being applied across all users.
Yes, Tuta supports HTML editing options (embed images, add lists, bold, italics, underline, monospace, add hyperlinks, align the text left, center, right, justified, change text size, remove all formatting). These are explained in our how-to along with lots of information on email handling.
Yes, all emails in Trash or Spam are automatically deleted 30 days after the emails were moved to these folders. You can also manually empty these folders with one click. Please note: Emails deleted from Trash or Spam folders are physically deleted and can't be restored.
You can download the Tuta app from the following stores:
In addition to that, you can also directly download and install the APK for Android. Keep in mind that you will not get updates automatically if you install the app manually instead of using an app store. You can add our blog to your RSS-reader with this link to get notified about updates: RSS-Feed
Web: The web version of Tuta is automatically updated whenever you reload the page. If an update is released while you're using Tuta, you will see a pop-up notification prompting you to update. All you have to do is click on "Refresh" to update. If Tuta does not update in your browser, you can trigger a manual update by loading Tuta in private/incognito mode of your browser.
Desktop: The desktop app automatically checks for updates by default. Whenever it finds an update, it is downloaded in the background and you receive a push notification. Under Settings -> Desktop you can activate/deactivate automatic updates or manually check for updates
iOS/iPadOS: Please use the App Store to check for Tuta updates.
Android: If you're using the Google Play store, please check there for updates.
F-Droid: Please make sure that you open F-Droid and navigate to the updates page. Swipe down anywhere on the screen to sync your repositories. Once done, you will be able to see any available updates for Tuta.
Please note: Our system sends update notifications via email whenever we detect an active session from an outdated client. Please go to Settings -> Login and close any unused sessions under Active Sessions.
Download: You can download the Tuta clients here.
If you add another user to your account (family member, partner, team member etc.), you get the following benefits:
Here are more details on user management. If you do not need these sharing options, you can also upgrade accounts individually. Please check our pricing calculator for details.
Furthermore, we have recently added a sharing feature for the encrypted calendar which we will extend in the future. Sharing of entire calendars only works with other paid Tuta accounts.
WebView is a system app on Android devices which allows us to display web content inside the Tuta app. Newer versions let us use newer technologies to make the app smaller, faster, more beautiful and more reliable. If you experiencing issues or bugs with the Android app, updating WebView has a good chance to help.
We recommend setting up 2FA because of its security benefits. Learn in our online security guide how 2FA helps you to keep your emails safe from hackers.
Registering your second factor
You can connect your second factor with Tuta in Settings -> Login. As admin you can setup second factors for your users in Settings -> User management.
Tuta currently supports the following second factor types:
Second factors can be added by administrators and users, but only admins can remove assigned second factors.
Note: If you lose your second factor, you will no longer be able to login to your account. To prevent this, you can add multiple second factors. Additionally, please note down the recovery code shown to you when adding a second factor.
Authenticating with your second factor
During login you have to authenticate with one of your second factors. Alternatively, you may also accept that session from another logged in client. If your browser does not support the second factor you had registered, you can only accept the session from another client.
How to reset your second factor if you lose it
For resetting your second factor, you will need your personal recovery code and your password. You can view and also update your recovery code in Settings -> Login.
If you have lost your second factor, click on More -> Lost account access on the login page. There you will have to enter your recovery code as well as your password to delete all your second factors.
Email encryption is needed whenever you want to send a confidential email. That is whenever your email contains personal information that should not become public. The following examples show the differences between end-to-end encrypted, confidential emails and emails that are not being end-to-end encrypted in Tuta.
In this YouTube tutorial we demonstrate how you can send an encrypted email in seconds.
Alice is registered with Tuta, Bob may be registered with Tuta or an external recipient and Carol is not registered with Tuta. In any case all emails (including attachments) are stored encrypted on the Tuta servers. Independent of the end-to-end encryption, the transport between client and Tuta servers is secured with TLS to maximize security.
Sending and receiving end-to-end encrypted emails
The email is encrypted on Alice's client, stored encrypted on the server and can only be decrypted by Alice or Bob.
Sending non-confidential emails
The email is sent via SMTP to the recipient. Still, the sent email is encrypted for Alice on the server and then stored.
Receiving non-confidential emails
When the SMTP email is received by the Tuta server, it is encrypted for Alice and then stored on the server.
If you own one or more domain names that you want to use with Tuta, you can add these domains to your paid subscription of Tuta. The setup wizard for your custom email domain will guide you through the process in just four small steps. In each step the wizard will explain, which configuration changes you have to make. If you don't have a Tuta account, you can register here.
The setup wizard for your custom email domain can be found in 'Settings' -> 'Global settings' -> 'Custom email domains' by clicking the '+' button.
Check out this YouTube tutorial to learn how to set up your own domain in Tuta.
In order to send and receive emails with your custom domain in Tuta, you need to configure the following types of DNS records in the settings of your domain name provider. Prior to configuring those DNS records the wizard will allow you to create new users or email aliases for your custom domain in order to have a smart switch to receiving emails in Tuta.
The exact values that these DNS records should point to will be shown to you in the setup wizard.
The MX record is necessary to relay emails for your domain to the Tuta servers. The SPF TXT record marks the Tuta server as valid sender of emails from your domain. The _domainkey and _dmarc records make sure your emails are signed with DKIM and sender spoofing of your domain's email addresses can be detected automatically by the recipient mail servers. The MTA-STS records make sure that transport encryption and authentication is used between different mail servers.
Tuta will indicate if the DNS records are fine for all your domains or if there is something that has to be changed.
Please note that with some domain name providers it may take up to a few hours before changes to your DNS records become visible for other mail servers. You can check your DNS settings here.
Please note that we do not support email import, yet. We plan to enable import in the coming months. For now, we recommend to keep your old mailboxes as a reference when moving to Tuta from another provider or storing all emails locally.
On our business site, there is a summary of all available features of Tuta's secure business emails.
When you create a new Tuta account, our secure password reset feature empowers only you to reset your account yourself. Please make sure that:
In case you can't login to Tuta, please make sure that:
We do not know your password and can't modify your second factors. However, there are different ways on how to regain access to your mailbox in case of a lost password or a second factor.
Administrator is available
If you are a member of an organization or a business: Ask your administrator to reset your password. Each administrator can reset the passwords of other users and admins. If you want to make sure to never lose your paid account, it's best to have at least two administrators.
Recovery code is available
Your recovery code is your personal code to resetting your account. If you did write it down when you created your account, you can reset your password or second factor using your personal recovery code by clicking on More > Lost account access on the login page.
You can view and also update your recovery code in Settings > Login. You can also find more information on this secure reset feature on our blog.
With 2FA enabled, you will need 2 out of 3 to reset your Tuta account:
Click here to reset your password. You will need your second factor (if 2FA enabled) and your recovery code.
Click here to reset your second factor. You will need your login password and the recovery code.
Please note: If you lose your password and your second factor, there is no option to reset your Tuta account with the recovery code.
To search your encrypted mailbox, simply click on the top search field or press F.
It is very important to know that you can search for multiple words at once, for instance sender's email address, keyword and file ending. Such a search could look like this: alice@tutanota.de meeting notes pdf
When you press enter, Tuta takes you to a more detailed search mask. The free search feature goes back one month into the past.
The detailed search mask lets you specify the time frame which should be searched (one month for free users). The unlimited search feature also lets you filter your search, e.g. who sent the email, to whom did you send the email, was the search query contained in the subject or in the body, what folder should be searched.
As all data in Tuta is encrypted, using our innovative search feature causes a lot of traffic. This is why unlimited search is only available to paying users. Learn here how you can benefit from extra features by upgrading.
Please note: You can only search emails and contacts, thus, the search field is not shown when you are browsing the 'Settings' of your mailbox.
To update WebView it is enough to install or update one of the following apps:
For most Android versions: Android System WebView
For Android N (7), Android O (8), Android P (9): Chrome
For some specific Android installations (e.g. custom Android ROMs, some LeEco devices) the procedure might be different or might not work. Please refer to your device or OS vendor for instructions.
Advanced: Changing WebView provider
If you do not want to use Google-provided WebView, it is possible to install some other app (like Chromium or another WebView build) which can be used instead. Please refer to these instructions. Please note that we can only support Chrome/Chromium based WebView.
When sending an encrypted email to an external recipient, you need to specify a password when composing the email.
Once set, the password will be automatically saved along with the contact in your Tuta address book, which makes your encrypted address book the password manager for your external contacts. Next time you write an email to that recipient, you simply specify the email address and Tuta automatically enters the password. The password needs to be exchanged via a second channel. If you would like to change the password, you can either do this within the contacts view or when composing a new email to this external recipient.
The external recipient
Note: The link within the notification email contains a salt which is needed for decryption along with the password. Thus, someone who wants to intercept your encrypted messages needs the exact link and the password. (An old link gets deactivated as soon as you send a new email to the same email address.)
Watch our YouTube tutorial on how to send an encrypted email to external recipients.
When you select an email, these options show up to its top.
The top email menu has the following options:
If you want to print an email as pdf, you can use the browser function for printing.
Sending of emails
Condensed email window.
Enlarged email window.
When writing an email you can use these text editing tools
Please use mouse-over in the web client to see what symbol represents what function. The Tuta text editing tools enable you to embed images, add lists (bullets and numbers), change texts to bold, italics, underline, monospace, add hyperlinks, align the text left, center, right and justified, change the text size, and remove all formatting from selected text.
Depending on the width of your browser Tuta displays the left Settings menu, your folder list, your mail list, and the selected mail.
Spam detection in Tuta is multi staged. For incoming unencrypted SMTP emails, the received email is checked against DNS spam lists first. In a second stage we filter emails by executing content checks and mark emails as spam or not. Emails that have been marked as spam will be moved to the spam folder of your mailbox. In a third stage we filter spam on the base of user defined email sender lists. This list provides the possibility to classify email addresses as spam or not as spam. The check is active for all incoming emails and can be configured by the administrator. The rules are valid for all users.
As administrator for a Tuta account you can configure the email address list here in Settings.
Within a received email, please click on 'Show more', then click on the From address to assign the email address, the domain, or the top level domain with one of the following spam rules:
The "No spam" rule has a higher priority than "Always spam" and "Discard" has the lowest priority.
You can set spam rules for sender addresses (highest priority), domains (lower priority), and top level domains (lowest priority). To add a spam rule for a domain, just enter the domain like xyz.com without putting an @ in front. This rule will also apply to emails sent from a subdomain. To add a spam rule for a top level domain, just put in com - for example - no dot is needed before this.
Rules for domains are restricted. You are not able to assign the rules "Always spam" and "Discard" to Tuta domains, neither to your custom domains.
You also have the option to allow all emails. To do this, create a spam rule and put in an asterisk * where you would usually put in the email address that the rule should apply to.
To insert a template into the mail editor, please login to Tuta in the browser or in one of the Tuta desktop clients:
If you have created several language versions for this template, you can choose the correct one after hitting tab (step 2).
Alternatively, you can access your templates by typing ctrl+space, or from the editor toolbar. There you can search for the correct template and insert it.
Tuta blocks automatic image loading to protect your privacy. To load external images, please click on 'Show' above the mail body to load the image for now or on 'Always trust sender' to always load all images sent from this email address. Please note that you have to allow images from a trusted sender on all your devices once. In the case that mail authentication fails or is non-existent, images will not be loaded even if the sender has been allow-listed. Inline images are displayed directly as no external content needs to be loaded.
How to receive blocked emails.
Go to 'Settings' -> 'Global Settings' -> 'Rejected email senders' to check whether any email to your account has been blocked due to the sender being listed on a spam list. You can click 'Refresh' to refresh the list in case you are waiting for a registration email. If a blocked email is shown here, you can allow the sender so that emails from this sender will reach your inbox in the future.
'Login' shows you several info items about your Tuta account.
Here you can configure how you want to send your mails.
'Inbox rules' (filter): Click on 'Show Inbox Rules' and then on the plus-button. A pop-up with three options opens: 'Field', 'Value' and 'Target folder'.
For inbox rules we support javascript regular expressions. You have to enclose the expression with slashes / like the literal definition of regular expressions. More information can be found here.
'Notifications': Click on 'Show' and the plus symbol. A pop-up opens where you can enter an email address that should be notified once a new mail arrives in your Tuta mailbox.
Push notifications
Please login to Tuta in the browser or in one of the Tuta desktop clients. In Settings -> My Templates you can create templates to answer repetitive requests faster. Click on 'New template' to create new template.
For your template, enter a Title, a Shortcut, select the language (here: English), the content. When using templates, you will need the shortcut to find the correct template. The content will be added to the mail editor automatically.
Here we explain how to add templates to an email or you can watch our YouTube tutorial on email templates.
Go to Settings -> Payment to view and update your payment details.
Once upgraded you can add 'Extensions':
To upgrade a Free account (or downgrade), please go to Settings -> Plan -> Plan and click on the pen symbol. Then you can pick another plan (picture below).
Under Settings -> Plan you can also sign the 'Order processing agreement' if you need to comply with the GDPR, switch your 'Payment interval' from monthly to yearly, check your price per year, and add more 'Extensions' or order gift cards.
When you order the Whitelabel feature, you have two options: The Whitelabel feature is already included in the Pro subscription. Alternatively, you can order it separately in your paid account. Your whitelabel domain can be any subdomain, and might look like 'secure.mycompany.com' or 'email.mycompany.com'. In order to setup whitelabel you must be able to set the CNAME DNS entry.
Now you can open your website in your browser and see the Tuta login with your customizations.
Manage users
Manage groups
Windows: Go to Settings > Apps > Default Apps to choose Tuta as you default email app.
Mac: Go to the Settings -> Desktop -> set "Default email handler" to "Registered".
Linux: This depends on your distribution. Please refer to the relevant documentation. Useful keywords are "mailto handler", "protocol handler"
On all platforms, you may have to tell applications like your internet browser to use the system default mail app.
Mac: Double-click the installer and follow the instructions on your computer.
Linux: After download, right click the AppImage and give it execute permission. Alternatively, run chmod +x tutanota-desktop-linux.AppImage
from a terminal window. Now you can run the App like any other executable, no further installation required. You may want to let it integrate itself with your desktop and app launcher.
Windows: Double-click on the Tuta app and follow the instructions on your computer.
Enterprise mode (Windows): The desktop client can be installed on Windows in "enterprise mode" by passing the following flags to the installer:
The application may also be uninstalled silently, by passing /S to the uninstaller (in the installation directory under Program Files).
Sometimes the browser does not recognize the newly installed Tuta desktop client as the default mailto app. If clicking a mailto-link does not open an email in the desktop client, please make sure that the Tuta desktop client is activated as the default email app in your system settings as described above.
If everything is set up correctly, these instructions might help to troubleshoot:
Firefox
Chrome
The Windows desktop client comes with MAPI support. Via the context menu of a file -> Send to... -> Email recipient - you can directly attach files to a new email.
In various programs (Office, Adobe Acrobat Reader, SAGE50) you can use the "Send document as mail" function and attach the currently opened file to a new email. You can find more details on our blog.
You need to activate the 'Run in background' option to receive notifications from the desktop client. This option appears in your notification area on Windows and in the Tray on Linux.
When it is active, the desktop client will not terminate when all windows are closed and instead remain in the background to provide desktop notifications in case of incoming email or calendar alarms.
If you can't see the tray icon on Linux despite the app running and the 'Run in background' option being set to 'Yes', please refer to your distribution's documentation to enable tray icons or AppIndicators. On MacOS, this option is not visible, and the dock icon is always used to provide a context menu.
If you still do not receive notifications, please check that you do not have focus mode, alarms only, or do not disturb modes on. You can also check the desktop settings of the client.
Windows: Hit the windows key, type "apps", choose the entry "Apps & Features". In the settings window, search for "Tuta Desktop". Click it and then click the "Uninstall" Button.
Mac: Right-click the Application in the Applications folder and select "Move to bin". To remove the app cache as well, you need to delete the directory ~/Library/Application Support/tutanota-desktop/
, for example via the terminal:
cd ~/Library/Application\ Support/
rm -r ./tutanota-desktop
Linux:
Delete the AppImage, then delete the file ~/.local/share/applications/appimagekit-tutanota-desktop.desktop
and the directory ~/.config/tutanota-desktop/
if they're present.
If you want to remove the icons, too, open a terminal window and type
cd ~/.local/share/icons/hicolor/
ls **/*/appimagekit-tutanota-desktop.png
rm -i **/*/appimagekit-tutanota-desktop.png
The Tuta desktop applications for Linux, Windows, and Mac OS are signed. The signatures make sure that the desktop clients as well as any updates come directly from us and have not been tampered with. Upon every update, the desktop client automatically checks that the signature is valid.
You can verify the authenticity of your manually downloaded installer with the OpenSSL utility yourself as well. It should be installed on most Linux and Mac systems, but needs to be added to Windows, you can get OpenSSL via this link.
The installer signatures are provided as separate files:
For further details, please refer to GitHub, lines 12 to 21.