Bmail — Encrypted Email

Bmail is end-to-end encrypted email built around your keys, not someone else's policy. Every message you send to another Bmail user is sealed with X25519 + XChaCha20-Poly1305 before it leaves your device. The server stores ciphertext. We can't read your mail, and neither can anyone with a subpoena. WHAT'S INSIDE • Encrypted email with PGP and S/MIME interop, so you can keep talking to people on Gmail, iCloud, and Outlook • Calendar, contacts, and Drive — all encrypted, all backed by the same keys • Custom domains: bring your own domain ([email protected]) and get the same encrypted pipeline • Push notifications that don't leak content — only "you've got mail" • Account recovery via BIP-39 mnemonic phrase. No phone number, no security-question theatre, no PII collected HOW IT'S DIFFERENT • The server runs inside Intel SGX enclaves. Even the operator can't peek at session keys • Authentication uses OPAQUE (RFC 9807) — your password literally never touches our servers in plaintext • Source is published. The server you're talking to and the WASM crypto in your browser are reproducible from the open repo at github.com/bmailag/bmail • Built by VP.NET. We don't sell ads and we don't sell mailbox metadata PLANS • Bmail: encrypted email + calendar + contacts + Drive + custom domains, with 100 GB encrypted storage. Available monthly or yearly Part of the VP.NET Family PRIVACY We only store what we need to deliver your mail. No tracking SDKs, no analytics, no third-party advertising IDs. Recovery is by mnemonic phrase only — we never collect a phone number, identity document, or backup email. TERMS OF USE https://www.apple.com/legal/internet-services/itunes/dev/stdeula/