I’ve been looking to switch from gmail to a different email provider that’s more private. I’ve been hearing about Tuta, are there any drawbacks to it? Are there better options?

For a while I was planning on making the switch to protonmail but that’s off the table now due to the recent events surrounding them.

  • Arthur Besse@lemmy.mlEnglish
    72·
    3 hours ago

    Tuta’s product is snake oil.

    A cryptosystem is incoherent if its implementation is distributed by the same entity which it purports to secure against.

    If you don’t care about their (nonstandard, incompatible, and snake oil) end-to-end encryption feature and just want a freemium email provider which (purports to) protect your privacy in other ways, the fact that their flagship feature is snake oil should still be a red flag.

      • Arthur Besse@lemmy.mlEnglish
        2·
        1 hour ago

        StartPage/StartMail is owned by an adtech company who’s website boasts that they “develop & grow our suite of privacy-focused products, and deliver high-intent customers to our advertising partners” 🤔

        They have a whitepaper which actually does a good job explaining how end-to-end encryption in a web browser (as Tuta, Protonmail, and others do) can be circumvented by a malicious server:

        The malleability of the JavaScript runtime environment means that auditing the future security of a piece of JavaScript code is impossible: The server providing the JavaScript could easily place a backdoor in the code, or the code could be modified at runtime through another script. This requires users to place the same measure of trust in the server providing the JavaScript as they would need to do with server-side handling of cryptography.

        However (i am not making this up!) they hilariously use this analysis to justify having implemented server-side OpenPGP instead 🤡

  • perishthethought@lemm.eeEnglish
    17·
    9 hours ago

    I’ve used Tuta for more than 4 years. It’s a solid choice if you accept a couple few things:

    • they’re a small company, doing their best to survive.

    • you have to use their client apps. They take security very seriously and assume all of their users do as well.

    • prices might go up every few years but I am still paying my original rate, for my original features.

    • the search function does work but is very slow.

    But otherwise, I’m very happy and expect to stay with them for the forseeable. Good luck in your search.

  • 18107@aussie.zoneEnglish
    6·
    9 hours ago

    I’ve had a bug with the android app where sometimes notifications for emails just don’t happen. I’ve received a new email notification, opened the app, and found that the notification was for an email received 5 hours ago, and I didn’t get any notification for the email 3 days ago or the email 1 hour ago.

    Despite this issue and several other minor issues, I still recommend Tuta. Mostly because I can’t find anything better.

    • FriendOfDeSoto@startrek.websiteEnglish
      2·
      6 hours ago

      If you’re on Android, by any chance, have you gone through all the battery optimization, background process killing, and startup settings? Some OEM’s versions of Android are real bad in that way. Giving the app the right settings and permissions may decrease the number of delayed notifications like that.

      • 18107@aussie.zoneEnglish
        2·
        4 hours ago

        I am using Android until I can find an alternative. I’ve turned off all optimisations I can find. I haven’t had the issue in a few weeks, but it did happen once since changing settings. I’m hoping that something random I did (like a phone restart) somehow fixed everything.

  • drkt@lemmy.dbzer0.comEnglish
    248·
    12 hours ago

    In comparison to Gmail? Yes, but that’s a very low bar to clear. You need to be aware that Tuta are currently enshittifying. The product is getting worse and the price increases. It’s slow, but it’s happening. I switched to disroot.org after 2 years of Tuta because I got fed up with it.

    It is in my Scrolls of Grudge, and I quote:

    Ads in web UI for paying user.
    Made it hard to cancel payment.
    Newsletter is just upselling.
    Can’t unsub from newsletter.

    • Sarcasmo220@lemmy.ml
      11·
      10 hours ago

      I am a paid user of Tuta and I have never seen any ads. Where did you see them and what kind of ads?

      • perishthethought@lemm.eeEnglish
        92·
        9 hours ago

        _drkt provided no proof of Tuta’s enshittification. There are no paid ads for third party products in any Tuta UI. Don’t panic yet. Read all the comments here, maybe.

        • drkt@lemmy.dbzer0.comEnglish
          8·
          8 hours ago

          no paid ads for third party products

          Haha you almost fucking got me, I actually wrote a whole thing about how those are ads but then I read your comment again and noticed that clever little write-off. Ads for their own products are still ads and I don’t want to fucking see it. Get that shit off my eyeballs, I paid for this product.

          The newsletter is an ad, it’s not news. They’re just advertising their products to you and you can’t unsubscribe and you can’t ignore it because they very deliberately have a special styling for the newsletters that makes it stand out from normal emails.

          I don’t know why you want to defend this company. I’m glad you’re okay with the level of shitty behavior they engage in; it’s definitely less than most email providers do- I’m just letting people know that Tuta aren’t angels. They’re a company, and they used to be better. Proton was exactly the same. It was a good service and then it became shitty.

          I would love to log back in and show you the 3 separate buttons on my UI that did nothing except link to a “Please pay us for this feature” page because I was a legacy premium user because I didn’t want all those new bullshit they made. I stress that it’s not a case of them implementing a button in the UI for all users and because I’m a legacy user I get it too even if I can’t use it- the buttons had special CSS to make them stand out. They were ads. Why couldn’t Tuta just leave me alone? I could still be paying them to this day if they had just not gone down that path. I just want an email that is an email and nothing more and doesn’t get in my way. Tuta had that, and then they took it away and asked for more money to put it back.

          I think the misunderstanding here is that I was a legacy premium user. I was paying less to get only the email+calendar because that’s what I signed up for, originally. When people sign up today, that’s not an option. People who are new to Tuta (relatively) haven’t seen this change happen and haven’t witnessed how obviously desperate Tuta was to get people off the legacy premium plan.

          Also my name is drkt_ but I’m sure you tried your best.

          • Libb@jlai.luEnglish
            12·
            3 hours ago

            Get that shit off my eyeballs, I paid for this product.

            You should try Proton, then /s

            Proton constantly tries to push you to upgrade to their next plaid plan too. So much so that this coupled with still zero fucking support for Proton Drive under Linux are the two reasons I have cancelled my paid Proton plan… and I had been paying for years.

            edit: typos

  • ProdigalFrog@slrpnk.netEnglish
    232·
    11 hours ago

    Tuta and Posteo are both pretty excellent (posteo is cheaper, but has a few less options that might be a deal breaker if you need them, like custom domain support).

    Disroot is a good free option, and they offer custom domains after a one time donation.

    Mailbox is okay, though they are known to have a very odd 2fa, and will recycle your address if you ever stop paying, allowing others to claim it and potentially impersonate you.

    Posteo is unique in that they’ll never delete your account for inactivity, or even if you stop paying, where they’ll let you access and read emails, but not let you send them until you pay again.

    Edit: apparently Tuta is going downhill according to others here, which is unfortunate :(

    • reksas@sopuli.xyz
      1·
      57 minutes ago

      thanks for mentioning disroot, that seems much more like what i was looking for than tuta which i was originally going to try out.

      • ProdigalFrog@slrpnk.netEnglish
        6·
        11 hours ago

        From what I understand, Tuta may have a slight edge theoretically, but email itself is a pretty poor protocol when it comes to privacy.

        Tuta was forced by court order to implement a message logger for an individual, but AFAIK all of their previous messages were encrypted and could not be read by Tuta, and therefore the Government could only see new unencrypted messages coming in before they were encrypted.

        Disroot only recently implemented at-rest encryption, so that should be fairly solid now. Posteo also allows you to encrypt your inbox and calendar at rest.

        Even with that, consider all private email providers as mostly just to avoid surveillance capitalism (to prevent your data from being mined and sold), but with only marginal protection from state agents.

  • brownmustardminion@lemmy.ml
    131·
    13 hours ago

    I’ve used Tuta for years, paid account with multiple custom domains.

    I prefer them for their principles, but their clients are extremely frustrating. Emails load very slowly and their email search is basically unusable.

    I’ve resorted to downloading old emails and using other clients to import and search through them. I really wish they would improve their email search.

  • geography082@lemm.ee
    12·
    5 hours ago

    I have the feeling people actually need to have the urge from panic to have to migrate all their data.

  • BroBot9000@lemmy.worldEnglish
    7·
    12 hours ago

    I’m currently planning on switching to Tuta as well. They have been the most recommended replacement since the proton incident.

  • aleq@lemmy.world
    3·
    12 hours ago

    I don’t know if tuta and posteo have some special privacy features, but if you’re just looking for a non-gmail provider I’ve been very happy with fastmail. It’s an Australian provider with a good track record afaik.

    Would also highly recommend getting your own domain if you can, so your address doesn’t belong to whichever provider you choose.

    • countrypunk@slrpnk.netOP
      31·
      12 hours ago

      I’m in the US. I wonder if there’s any drawback to using an Australian provider. Like, will it get flagged or something?

      • EvenOdds@lemm.ee
        2·
        5 hours ago

        If it’s Australian, don’t expect strong privacy. But then again, I wouldn’t expect that from a US based email provider either.

        Source: am Australian.

  • bl4kers@lemmy.mlEnglish
    3·
    13 hours ago

    Yes, I use it and generally like it. Their app is a little buggy, but they have email support and accept bug reports on GitHub. This is helpful for finding out what other users are seeing. It’s a small dev team with frequent releases

    • countrypunk@slrpnk.netOP
      2·
      12 hours ago

      Do you know if there’s a difference in the frequency of releases of the f-droid version and the play store version?

  • KokusnussRitter@discuss.tchncs.de
    3·
    13 hours ago

    I don’t have the know how to talk about safety and privacy, but here are some caveats.

    I think you have to use their client and can’t add your adress to 3rd party clients like thunderbird. Their client is however nice to work with.

    If you forgot your password, the only way to change it is by using a key that is given to you after account creation. Keep it safe! Check for spelling errors If you lost the note or it’s not in you passwordmanager or whatever you use, your account is not recoverable. Their support can’t help you reset your pw.

    Other than that they make email encryption pretty easy with a checkbox right under the recipient in the email editor.

    Another handy feature are the aliases. (Payed feature) You can set up some email adresses for certain purposes, and filter their traffic into different inboxes quite easily. If one of them.get’s compromised, deactivate and move in. Your master adress is probably still usable.

    What I do not like is the fact that paying customers get support first.

    • countrypunk@slrpnk.netOP
      3·
      12 hours ago

      I don’t get why they don’t just make it a paid service entirely. Seems odd that email providers like to do that.

      • ProdigalFrog@slrpnk.netEnglish
        4·
        11 hours ago

        Offering a free tier let’s people try the service, and encourages them to becone a paid user if they run up against the limits of the free tier.