Private email, explained properly
Email is where your life happens — contracts, health, family, money. With most "free" providers, that inbox is scanned, profiled and monetized. GrafMails exists so that yours isn't.
What you get
- A truly private mailbox — your own @grafmails.com address, or your own domain for you, your family or your small team.
- Encryption by default on every mailbox — no plugins, no setup, no crypto homework.
- No scanning, no ads, no data mining. You pay a fair hosting fee, so you are the customer — not the product.
- Works everywhere: webmail in your browser, plus any mail app over IMAP/SMTP — iPhones configure themselves automatically.
- Serious deliverability: clean IP reputation, SPF, DKIM and DMARC configured for you, so your mail reaches inboxes.
What "encrypted" means here — exactly
Most providers say "encrypted" and mean only the connection. We mean the mailbox itself:
- Between GrafMails users — true end-to-end encryption. Your mailbox has its own OpenPGP key pair, generated automatically when your account is created. Mail between GrafMails mailboxes is encrypted before it leaves the sender and decrypted only by the recipient. Our servers relay ciphertext they cannot read.
- Mail arriving from outside — zero-access storage. A message from Gmail, Outlook or any other provider reaches our server over an encrypted connection and is locked with your personal key at the moment of delivery, before it is written to disk. From that point on, nobody without your key — not hackers, not admins, not GrafMails — can read it.
- Mail you send outside — authenticated and TLS-protected. Outgoing mail travels over enforced TLS with full sender authentication. Once it arrives at another provider, their policies apply — that's how email works, and we won't pretend otherwise.
The honest caveat: a message arriving from an outside sender exists in server memory for the brief moment it takes to encrypt it. Stored mail is always ciphertext. This is the same model used by the most respected private email services — we just say it out loud.
Your keys, your mailbox — with a safety net
Because we cannot decrypt your mailbox, losing your key would mean losing your mail. That's why you receive an offline recovery key when your mailbox is created — keep it printed in a drawer, in a safe, wherever you trust. We can't use it; only you can.
Who is this for?
- You — if you simply believe your correspondence is nobody else's business.
- Families who want private addresses on their own domain, managed for them.
- Professionals handling sensitive matters — legal, medical, financial — who can't afford a scanned inbox.