مقارنة منصفة

Compared, honestly

Proton Mail and Tuta are serious products run by serious people — if you stop reading here, use either and you will be better off than at a surveillance mailbox. This page exists because comparison tables in this market are usually advertisements with columns, so ours keeps the rows where they win.

Claims about others reflect our reading of their public documentation on 2026-08-14. If we have misstated something, correct us at security@rocmail.is — we will fix it and say so.

	RocMail	Proton Mail	Tuta
End-to-end encryption covers	Stored mail — bodies, subjects, senders, previews, attachments and their filenames — plus drafts, contacts and the senders the user blocks, sealed to keys only the user holds; the search index is not stored at all, it lives on the user’s devices. Between members, sealed in the sender’s browser. Mail from or to outside addresses is readable to the server only as it arrives or is sent, as ordinary email requires, and is stored sealed.	Message bodies and attachments (PGP). Subjects and routing metadata are not end-to-end encrypted.	Bodies, subjects, attachments, contacts and calendar — end-to-end encrypted.
Post-quantum cryptography	Mashrabiya, our hybrid seal (X-Wing: ML-KEM-768 + X25519), on every stored message, today.	Rollout of post-quantum PGP underway; not yet the default everywhere.	TutaCrypt hybrid post-quantum encryption shipped for new accounts.
Payment privacy	Cash by mail, Monero, Bitcoin — through vouchers with no user column: the payment↔mailbox join is never stored. No card rail exists.	Cards and PayPal, plus documented cash and Bitcoin options. Payment attaches to your account.	Card-first checkout attached to the account; some crypto options per their pages.
A constitution the build enforces	Twelve articles; a guard test fails the build if a named protection leaves the code.	Strong public policies — not mechanically bound to the codebase.	Strong public policies — not mechanically bound to the codebase.
Server self-hosting	The full server is AGPL — the service you can run is the service we run.	Clients are open source; the server is not self-hostable.	Clients are open source; the server is not self-hostable.
Arabic	Full right-to-left Arabic across the product and these public pages — a first-class locale, not a community patch.	No Arabic interface offered.	No complete right-to-left Arabic experience that we know of.
What deletion destroys	The keys first: every wrapping of the mailbox key in the live database is destroyed, so the mail there is unreadable at once. Backups taken before it keep the old wraps until they age out, and open only with the old passphrase or recovery phrase. A test sweeps the whole schema afterwards for the departed account id. No escrow, no override, no support path back.	Deletes accounts on request. We have not found published detail on whether key destruction, rather than row deletion, is the mechanism — check their policy directly rather than taking our word.	Deletes accounts on request. We have not found published detail on whether key destruction, rather than row deletion, is the mechanism — check their policy directly rather than taking our word.
Free tier	None — €5/month flat, always. We would rather be paid in money than in anything else.	Yes, with paid tiers above it.	Yes, with paid tiers above it.

Their own words: proton.me and tuta.com — links, not embeds; nothing loads from either until you choose to go.

حيث يتفوقون

Where they win, today

Printed at full size, not in a footnote. A comparison that cannot concede a row is an advertisement.

Third-party audits

Proton and Tuta have both commissioned and published independent security audits. RocMail has not yet been audited: the source, the threat model, and the test suite are public in the interim, and the audit is budgeted to follow revenue — its report will be published with the source when it exists.

Native mobile apps

Both ship mature, long-polished iOS and Android apps. RocMail is an installable web app with young native shells — not a decade of mobile refinement, and signing in or unlocking needs the network.

Ecosystem

Proton is a suite: Calendar, Drive, VPN, Pass. Tuta includes an encrypted calendar. RocMail is mail, and nothing else yet.

Track record and team

Proton and Tuta have operated for over a decade with large teams and millions of users. RocMail is new and small, and no honest table hides that. What we offer against it is radical verifiability, not history.

Custom domains and IMAP

Both competitors support custom domains on paid plans, and Proton offers IMAP access through its Bridge. RocMail members can add a domain of their own, receive on it once its MX points here, and send from it on this instance. For desktop clients, a local bridge run from the source serves IMAP, POP3 and SMTP on your own machine and decrypts there, nowhere else; the exit door is standard mbox export.

Own datacenters

Proton runs its own hardware in Switzerland; Tuta runs its own in Germany. This instance runs on a server rented in our name alone in Iceland, behind no CDN — rented, not owned, and we say so; the sealing denies even that host readable stored content, which is why we can say it plainly.

So who should use what?

If you want a polished suite with a calendar, a drive, audited apps and a decade of history — Proton or Tuta, genuinely. If your threat model is payment identity, if you read Arabic, if you want a provider whose promises are enforced by a build that fails when they break, or if you want the exact server you can also run yourself — that is the corner we exist for.

Start from the threat model, not the feature list — ours or anyone’s. €5 flat if it fits →