Hey everyone,
I know there are a lot of questions about best email providers, but they usually boil down to general questions about privacy and reliability. I have specific questions that I could not find answers to.
I’ve had a Proton Duo plan for my wife and me for about 2 years now. My wife has low tolerance for tech that is not user friendly and works easily. It took a while to migrate all our emails and passwords to Proton and a lot or accounts to passmail aliases, but now we are happy with how the service works.
We both also have our own domains for our main email, and I recently bought another domain to migrate our aliases to. The reason behind this is to ease future migrations if whatever service we use enshitifies. I know that privacy is reduced by using my own domain for aliases, but it’s a consequence I accept to avoid being tied to a single service and to make migration easier in the future.
For that reason, I’ve been burying my head in the sand about what has been happening at Proton. However, with recent news of Proton’s partnership with ETH Zurich and of Proton re-evaluating employee performance based on their AI usage, I can no longer look away.
So here is the ask. I want to migrate to one or more services to specifically replace the functionality I described above. Here are the features that are important to me:
- Services that support multi-user accounts, where I can be the admin and manage our domains.
- Ability to assign domains for specific user accounts.
- Ease of use for users to create aliases on the fly within the password manager.
- European hosted and privacy focused, with good encryption.
- Preferably open source clients.
My domains are hosted by Infomaniak, and I’ve considered them, Tuta and Mailbox.org for email providers. Not sure about the best alias generator, but I heard good things about addy.io
I already self-host a lot of services, so for password management, I was thinking about Vaultwarden with an integration to an alias generator. For the few services I host that are accessible outside my network, I use a reverse proxy (NPM), with Authentik for authentication. I am thinking about setting up NetBird as well.
Finally, I am ok paying a reasonable amount for the services.
If I am way off base, I am also happy to hear suggestions about better ways to set things up.
Thanks in advance
aliasvault and posteo
With AliasVault, doe it forward the alias emails to one mail address you can set up, or can you only to check for new emails in the vault?
no idea. dev has a discord and an email, you can ask around.
So, I guess I will be the one to say it to everyone-
Every single group will likely eventually use AI. If you want to fully minimize it, you should just buy a mini pc and a domain name and set up your own private mail provider with OSS. That is what I would honestly suggest.
not to shit on your take, but like if even half of what this cretin says is accurate, that’s is pretty fucking far from a pro/contra AI issue.
I don’t trust proton for anything of importance and am occasionally using them to register to unimportant stuff and this latest revelation hasn’t changed my opinion one iota. if you’re depending on them for anything, start looking for alternatives (plural, always) like right now.
There’s a difference between using AI where useful (though I still think it’s unethical), and baing job performance on tokenmxing essentially. For me it signals that Proton’s leadership cannot be trusted.
That being said, that was just the last straw. The biggest issue for me is their partnership with a university that supports Israels genocide of the Palestinians.
I considered hosting my own email server, but I do not trust the uptime of my setup for something as important as email. Maybe in the future with some hardware and networking upgrades with redundancy.
I understand your opinion on the matter, I just unfortunately think any corporation you try and use will eventually be revealed to be supporting genocides or data brokering, or some other horrible thing. For profit groups will always cave to money, and money will always be at someone’s expense. So that’s all I got for you. Sorry.
I get what you are saying, but for me it’s not reason enough not to try. That is why I am trying to set things up in a way that makes it easier to migrate.
This is a good way to get blacklisted by email providers. Not discouraging it but your mileage will vary greatly on this endeavor.
Care to explain? If you are just using the email as an email, it should be fine…
Some things you might face:
- Residential IP blocks from your ISP
- Port 25 is often blocked by ISPs and cloud providers
- Big email providers immediately distrust small email servers; Gmail, Outlook and Yahoo will silently block and move the emails to junk
- You have a multitude of DNS records and they have to be perfect. They’re also fiddly. DKIM, DMARC, reverse DNS. One blip and email ain’t working
- If your security is crap, your server can get turned into a spam cannon and it can take weeks to months to get removed from blacklists
- Managing your own spam filters sucks
- Troubleshooting deliverability can be a nightmare
For a password manager, you can use KeePass and synce databases between devices with SyncThing.
And I recently switched to mailbox.org and I like it. It starts off at $1 per month and you get 3 aliases plus your main address at that plan. There’s a $3 per month plan as well that bumps the number of aliases up to over 20, plus some other features
I’ve heard about SyncThing for other applications, and for some reason had assume it would only work within your network like rsync. But I’ll revisit it, thanks. if I understand it correctly by then, all the passwords are kept in each device locally, so if for some reason my server is inaccessible, users will still have access to their passwords
That’s correct.
An extra note if you end up using SyncThing, make sure to update your “File Versioning” settings in the synced folders. You want anything besides “None” or “Trashcan” and set a duration longer than 0. That will allow SyncThing to hold onto some previous verions of files as a backup in case you need to revert.
Also, you’ll want to avoid having it open on multiple devices at the same time, as it can cause sync conflicts. They’re not that hard to clean up but still annoying.
Open source password manager and email alias manager https://www.aliasvault.com/
Great, thanks. Do you have experience with it? Either the cloud or self hosted one?
I don’t. I use proton lol but I’ve kept this bookmarked for my inevitable switch
Migadu will probably fit all your requirements.
Services that support multi-user accounts, where I can be the admin and manage our domains.
Migadu pricing only cares about storage space used and emails sent/received. You can have any number of domains or mailboxes or accounts otherwise, and there’s a lot of features and flexibility for the admin.
Ability to assign domains for specific user accounts.
Not sure how exactly you mean this but it’s probably more flexible than you intend. You can create any number of mail accounts under any of the domains you add to it.
Ease of use for users to create aliases on the fly within the password manager.
They have a thing called “pattern rewrites” that could be better called “wildcard aliases”. Basically you can have aliases with both variable and fixed parts. For example “shop-*@example.com” will receive email sent to “shop-amazon@” and “shop-walmart@” but not to “amazon@”. It’s a sort of catch-all’s, but mitigates some of the downsides of an actual catch-all because outsiders can’t guess what’s your fixed part of the alias.
They also have regular aliases, domain aliases, catch-all’s and some other stuff.
I typically use those wildcard things for all my needs.
European hosted and privacy focused, with good encryption.
They’re Swiss-based and committed to privacy.
Regarding encryption, if that’s a deal-breaker to you I’d urge you to reconsider. Encryption for email-at-rest is a gimmick. There’s only a handful of providers that even attempt it, because it’s nonsense, but if spinned right it appeals to the public. You will get away from Proton only to get locked down by Tuta or… actually I don’t remember if there was a 3rd.
Preferably open source clients.
You don’t want open source clients, you want standard protocols (IMAP and SMTP). You can use any standard mail client with those protocols, both open- and non-open-source clients.
The problem with “encrypted email” is that it doesn’t work without putting it through non-standard protocols, which lead directly to lock-in. So they’ve spinned it so that you need a “special client” to work with it. But whether Proton’s special client is open-source or not is irrelevant, because they can close down their non-standard protocol at any given moment and close source the client and your mailbox becomes their prisoner.
All you need is a provider with regular IMAP and SMTP, and when a provider starts acting up you can switch to another one with regular IMAP and SMTP as fast as your domain(s)’ DNS can propagate.
They seem really interesting. I’m curious about the pattern-rewrite part. I currently do a similar thing with filters on proton (i.e. anything not sent to prefix-* goes to spam), but the downside is that anytime I need to actually send an email from one of these, I have to add it to the limited list of addresses. This is the only part I’d want from one of these masking services, being able to send/respond without having to manually add each address.
Do you happen to know if this is possible with migadu? E.g. I set up the pattern for shop-*@… If I want to send an email from shop-bla@… Do I also need to add that specific one as an address? Similarly, if i get an email sent to shop-bla@…, can I respond if that’s not specifically added as an address or do I need to add it first?
No worries if you don’t know, just curious - thanks.
With Migadu you can send email as anything you want @yourdomain, as long as you use the correct credentials (user+password) for SMTP. You don’t have to set up anything in advance, you just modify your “From” in the mail client. The “From” addresses don’t have to bear any relation to any alias or pattern or existing mailbox, just have to be @ the domain associated with the SMTP login. It’s entirely your problem if the address doesn’t make sense and whether the recipient will be able to reply.
There are mail clients that know how to work with this and let you set up multiple sender “identities” that are basically bookmarked “From” addresses. Migadu’s webmail also has this feature (not sure what webmail app it is, HTML source code says “SnappyMail”). But as long as the email client lets you edit the “From” field you can always change this on the fly.
That’s awesome, thank you.
This is an excellent answer, and seem to cover all my needs. I’ll definitely check them out!
The pattern rewrites especially are interesting. I had ruled out catch alls not only because of the usual downsides but also becauseci could not direct aliases to specific mailboxes with a catch all. I assume with the pattern rewrites, ibcan direct different fixed parts to different mailboxes?
Yes, you can send each pattern to one mailbox or to multiple.
Also check out port87 https://port87.com/ if you’re looking for an AI-free mail service (as in, they don’t use AI to develop nor have any AI features). They have a blog post about it: https://sciactive.com/2026/01/21/our-stance-on-ai-in-email/
They do look interesting, and the label based alias seems like a very useful feature. Unfortunately, they seem to be based in the US. I am like oking for a fully European service.
See, this is exactly what question marks are for, so people know whether you’re asking for or giving advice.
Title edited for clarity
Just to mention it, addy.io is partnered with Tuta much like SimpleLogin is partnered with Proton.
Good to know. Do you have an opinion on either of them?
I’ve been using Addy.io for a while no complaints here, definitely my first recommendation for an alias service
Unfortunately no. I’m in a similar place to you, currently using Proton and SimpleLogin but hoping to switch to a custom domain and move from Proton. Tuta has been a strong recommendation here but I don’t have personal experience with them yet.
Look at infomaniak.com.
Do you have experience withe their mail hosting? How is account management for other users? I only use them for domains for now, but am considering them for mail.
I tried them at a certain point the first time I left proton. Featurewise they were great, but then they came out against Swiss privacy protections in a very concrete way which I felt was a bridge too far. Went back to proton, but infomaniak does not support email forwarding on free accounts so there was no way to migrate out. Luckily I wasn’t there long but did miss a few emails in the process. Which is to say, I would use your own domain name to make leaving easier or keep this in mind if you switch.
Hmm, that makes me want to movevmy domains away fromnthem as well.
I don’t think Tuta offers the features you need; but at least it’s privacy focused, EU based, and with foss apps (they are even on fdroid!!)
I don’t mind combining multiple services to achieve what I need, so they are not out fornmy consideration.
For the aliases you can use Cloudflare with an SMTP https://sh.itjust.works/post/68898771/28119358
I did not know that was an option.
Though I’ve been avoiding Cloudflare as they support Omarchy.
Indeed avoiding Cloudflare is the ethical thing to do. But I just wanted to point out that sh.itjust.works is a Cloudflare node, so I suggest choosing a different fedi instance.
Dang, TIL. Thanks for the info, I’ll move instances.
