Confidesk
Encrypted in your browser
Mail and files are encrypted on your device before they leave it, using modern elliptic-curve encryption. We move the data — we can never read it.
End-to-end encrypted workspace
Confidesk encrypts your mail, files, documents, chats and everything else in your browser or in the apps — always on your device. The server only ever holds scrambled data — so nobody else can open it. Not even us.
Decrypted just for you, in this browser. No tracking pixels loaded — opening this told the sender nothing.
Why Confidesk
Most email asks you to trust the provider with everything. Confidesk is built so that trust isn't required — your data lives on our servers as scrambled gibberish, and the passphrase that unlocks it never leaves your device.
Mail and files are encrypted on your device before they leave it, using modern elliptic-curve encryption. We move the data — we can never read it.
Your key is unlocked in memory, only while you're signed in, only by a passphrase that never leaves your device. There is no reset and no back door.
Messages render in a sealed sandbox and remote content stays blocked, so reading a message tells the sender nothing — no read receipts, no tracking pixels, no hidden code.
Share a contact form so anyone can send you an encrypted message — no account needed — and use Secure Send to deliver a one-time encrypted message to anyone.
More than email
Mail is just the start. The same encryption protects your files, passwords, and conversations — all readable only by you.
Send and receive mail encrypted to your key — readable only by you, on your device.
Keep documents in encrypted storage — decrypted only when you open them, in your browser.
Encrypted notes in Markdown, plain text, or rich text — rich notes download as real .rtf files that open formatted in compatible applications.
A full document editor for writing that outgrows a note — and no lock-in: every document exports from your device to PDF, Word, and EPUB.
A built-in KeePass (.kdbx) manager for your passwords — the same file opens anywhere.
End-to-end encrypted one-to-one and group chat — sealed separately for each person.
Open PDFs, documents, images, and video inside a sealed frame — nothing runs, nothing tracks.
Advanced accounts run several of your own identities, aliases, and custom domains.
Signing in
Every sign-in uses a login code we email you and a passphrase we never see. One proves it's you; the other unlocks your key — right in your browser. Any standard TOTP authenticator app can take the place of the emailed code.
You start the sign-in from any device, any browser.
A short, one-time code goes to your external address — proving you control it.
Your encrypted key reaches your browser and your passphrase unlocks it, in memory only.
Your passphrase decrypts your key on this device. We never receive it.
Unlock held in memory only · erased on sign out
The test that proves it
Confidesk can't recover yours — and that's the proof. No reset link, no recovery code, no back door: your passphrase is the only key, and it lives in exactly one place, your memory. That's the trade for data only you can read. For certainty rather than a promise, you can remove your key from our servers entirely and provide it yourself at each sign-in.
Built on one rule
Anything that would need a machine other than yours to read your mail is something Confidesk deliberately won't do. That rules out a few features you might expect — because offering them would break the whole promise.
Searching needs a readable index of your mail — and in a browser that index has to be written to disk, leaving a decrypted copy of your mailbox behind on the machine. Search lives in the desktop app instead, where your mail is already stored encrypted on your own computer. Included with Pro and Advanced.
Both would need our servers to read each message. You forward and organise yourself, in your browser, where your mail is decrypted only for you.
Accounts are for one person. Sharing a mailbox would mean handing over a key only you control. One Advanced account can hold many of your own identities — never someone else's.
The difference
Confidesk for desktop
A fully PGP-compatible email client that keeps working with no connection. Add your own IMAP and POP mailboxes, and everything stays stored encrypted, locally on your device. Available now for Apple Silicon Macs, Linux and Windows.
Confidesk for iPhone
Mail, files, notes, documents, chat and the vault — encrypted the same way, stored encrypted on the phone, and readable offline. On every plan, from Free up.
Pricing
Prices shown in USD · your exact local-currency price is shown before you commit · email is mostly text, so storage goes far — add more anytime in 1 GB steps.
Prices are shown per month for comparison. Pro is billed quarterly or yearly; Advanced monthly, quarterly or yearly.