Bmail — Encrypted Email

Bmail is end-to-end encrypted email built around your keys, not someone else's policy. Every message you send to another Bmail user is sealed with X25519 + XChaCha20-Poly1305 before it leaves your device. The server stores ciphertext. We can't read your mail, and neither can anyone with a subpoena.

WHAT'S INSIDE

• Encrypted email with PGP and S/MIME interop, so you can keep talking to people on Gmail, iCloud, and Outlook

• Calendar, contacts, and Drive — all encrypted, all backed by the same keys

• Custom domains: bring your own domain (you@yourcompany.com) and get the same encrypted pipeline

• Push notifications that don't leak content — only "you've got mail"

• Account recovery via BIP-39 mnemonic phrase. No phone number, no security-question theatre, no PII collected

HOW IT'S DIFFERENT

• The server runs inside Intel SGX enclaves. Even the operator can't peek at session keys

• Authentication uses OPAQUE (RFC 9807) — your password literally never touches our servers in plaintext

• Source is published. The server you're talking to and the WASM crypto in your browser are reproducible from the open repo at github.com/bmailag/bmail

• Built by VP.NET. We don't sell ads and we don't sell mailbox metadata

PLANS

• Bmail: encrypted email + 100 GB encrypted storage. Available monthly, yearly, or three-year

• Bmail Bundle: email + calendar + contacts + Drive + custom domain. Same monthly / yearly / three-year pricing

Part of the VP.NET Family

PRIVACY

We only store what we need to deliver your mail. No tracking SDKs, no analytics, no third-party advertising IDs. Recovery is by mnemonic phrase only — we never collect a phone number, identity document, or backup email.

TERMS OF USE

https://bmail.ag/terms