Shutbox
Shutbox is a private email service currently in beta, with a web inbox that includes folders, labels, conversations, and search.
What Shutbox is
Shutbox is a private email service currently in beta, with a web inbox that includes folders, labels, conversations, and search. Users can bring a custom domain or start with an @shutbox.im address and use aliases. For messages between Shutbox accounts, bodies and attachments are encrypted on the sending device for each recipient. When sending to other providers, a delivery bridge decrypts mail in memory for transmission; sender, recipient, and timestamp metadata remain unencrypted. Account security options include OPAQUE authentication, optional TOTP two-factor authentication, and WebAuthn passkeys. An API using JSON over HTTPS is available, with API-key creation on paid plans. Shutbox supplies MX, SPF, DKIM, and DMARC records for DNS setup. If storage exceeds the account quota, outbound sending is suspended, while inbound mail continues through a 30-day grace period. The free plan is $0 forever and includes 512 MB storage, one custom domain, two aliases, and 50 outbound emails per day. Pro costs $1.99 a month and Business costs $4.99 a month. Mail and account data are stored in Nuremberg, Germany, with encrypted database backups in Germany.
Good
- Web inbox includes folders, labels, conversations, and search
- Supports custom domains and aliases
- Offers TOTP two-factor authentication and passkeys
- Paid plans provide API-key creation
- Mail and account data are stored in Germany
Watch out
- The service is currently in beta
- External delivery decrypts mail in memory
- Sender, recipient, and timestamp metadata remain unencrypted
- Free plan includes 512 MB of storage
Who it suits
Shutbox may suit people seeking a private email service with custom domains, aliases, and a web inbox. Its plan options vary by storage, alias, and daily outbound-email limits.
Verdict
Shutbox offers an encrypted approach for messages between its own accounts, plus domain and alias support. Review how external delivery works and compare plan limits with your expected storage and sending needs.
Plans and prices
From Shutbox's own pricing page, checked 9 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Free | Free | 512 MB storage · 1 custom domain · 2 aliases · 50 outbound emails/day · Web inbox · $0 forever |
| Pro | $1.99 a month | 10 GB storage · 5 custom domains · 8 aliases · 500 outbound emails/day · API access · Priority delivery · DKIM signing · Billed monthly |
| Business | $4.99 a month | 30 GB storage · Unlimited domains · 20 aliases · 2,000 outbound emails/day · API access with higher limits · Priority delivery · DKIM signing · Dedicated support · Billed monthly |
The facts
Each one read from Shutbox's own pages, with the date it was checked.
What it does
- Account security
- The service supports OPAQUE authentication, optional TOTP two-factor authentication, and WebAuthn passkeys.checked 9 Oct 2026
- API
- The API uses JSON over HTTPS, and API-key creation is available on paid plans.checked 9 Oct 2026
- Custom addresses
- Users can bring their own domain or start with an @shutbox.im address and use aliases.checked 9 Oct 2026
- Data location
- The privacy policy says mail and account data are stored in Nuremberg, Germany, with encrypted database backups in Germany.checked 9 Oct 2026
- Domain setup
- Shutbox provides MX, SPF, DKIM, and DMARC records for users to publish with their DNS provider.checked 9 Oct 2026
- External mail
- Outbound mail to other providers is decrypted in memory by a delivery bridge for transmission, while sender, recipient, and timestamp metadata remain unencrypted.checked 9 Oct 2026
- Inbox features
- The web inbox includes folders, labels, conversations, and search.checked 9 Oct 2026
- Internal encryption
- For mail between Shutbox accounts, message bodies and attachments are encrypted on the sending device for each recipient.checked 9 Oct 2026
- Product
- Shutbox is a private email service that is currently in beta.checked 9 Oct 2026
- Storage limit
- When an account exceeds its storage quota, outbound sending is suspended and inbound mail continues for a 30-day grace period.checked 9 Oct 2026
- Support
- Dedicated support is included with the Business plan; the security policy says Shutbox is run by one person and does not currently pay vulnerability bounties.checked 9 Oct 2026
Where it runs
- Mobile app
- The security disclosure policy lists the Shutbox Android app within its scope.checked 9 Oct 2026
Alternatives to Shutbox
- 1

Disroot Email
Free planOpen sourceAndroidiOSWebExtension8.6Free plan - 2

Aster Mail
Free planOpen sourceAndroidiOSWebLinux8.5From $2.42 a month - 3

Mailfence
Free planAndroidiOSWebAPI8.2From $2.50 a month - 4
PreVeil
Free planAndroidiOSWebExtension8.1From $25 a month - 5

Tuta Mail
Free planAndroidiOSLinuxmacOS8.1From €3 a month - 6

eclipso Mail Europe
Free planAndroidiOSWebAPI8.0From €1.49 a month
