Bmail — Encrypted Email

Bmail is end-to-end encrypted email built around your keys, not someone else's policy. Every message you send to another Bmail user is sealed with X25519 + XChaCha20-Poly1305 before it leaves your device. The server stores ciphertext. We can't read your mail, and neither can anyone with a subpoena. WHAT'S INSIDE • Encrypted email with PGP and S/MIME interop, so you can keep talking to people on Gmail, iCloud, and Outlook • Calendar, contacts, and Drive — all encrypted, all backed by the same keys • Custom domains: bring your own domain (you@yourcompany.com) and get the same encrypted pipeline • Push notifications that don't leak content — only "you've got mail" • Account recovery via BIP-39 mnemonic phrase. No phone number, no security-question theatre, no PII collected HOW IT'S DIFFERENT • The server runs inside Intel SGX enclaves. Even the operator can't peek at session keys • Authentication uses OPAQUE (RFC 9807) — your password literally never touches our servers in plaintext • Source is published. The server you're talking to and the WASM crypto in your browser are reproducible from the open repo at github.com/bmailag/bmail • Built by VP.NET. We don't sell ads and we don't sell mailbox metadata PLANS • Bmail: encrypted email + 100 GB encrypted storage. Available monthly, yearly, or three-year • Bmail Bundle: email + calendar + contacts + Drive + custom domain. Same monthly / yearly / three-year pricing Part of the VP.NET Family PRIVACY We only store what we need to deliver your mail. No tracking SDKs, no analytics, no third-party advertising IDs. Recovery is by mnemonic phrase only — we never collect a phone number, identity document, or backup email. TERMS OF USE https://bmail.ag/terms