Security and privacy
Secure email hosting, in the EU
Your mail is your business. PostPike keeps it in Europe, encrypts it at rest and in transit, and gives you the controls to keep it that way.
- Hosted in the EU
- Encrypted at rest
- Two-factor sign-in
- No ad tracking
Where your mail lives
- PostPike runs on servers in Germany, operated by a company in the Netherlands.
- Mail is stored in EU-only storage, and nightly backups go to a separate, locked storage bucket in the EU.
- Mail is encrypted on the server before it goes into storage, so the storage provider can't read it.
Encryption
- The servers' disks are fully encrypted, and their key is never stored at the hosting company.
- Messages are encrypted again before they go into storage, and so are backups.
- Connections from webmail and mail apps use TLS, and so does mail between servers whenever the other side supports it.
Signing in
- Two-factor sign-in, with app passwords for mail apps.
- Repeated wrong passwords are blocked for a while, to stop guessing.
- An email alert when a mail app signs in to your mailbox from a new country.
- A recovery address for account owners, so a lost password isn't a lost account.
Stopping spoofing
- Every message is signed with DKIM, and SPF and DMARC are set up for your domain.
- A mailbox can only send as its own addresses, so nobody in an account can pretend to be someone else.
- Sending limits keep spammers off PostPike, which protects the reputation of every domain on it.
AI agents
- Agents never get a password. You approve each one on PostPike's own page.
- You choose what each agent may do, and can disconnect it at any time.
- You get an email whenever an agent connects or a key is made.
- PostPike doesn't run AI on your mail itself.
Your data, your choice
- Export any mailbox as standard .eml files whenever you like.
- Delete a mailbox, a domain or your whole account yourself in the admin console.
- This website has no ads, no trackers and no cookies.
Built on open source
Standards and software anyone can inspect
PostPike runs the Stalwart mail server and a webmail app, both open source, unmodified, and the open standards behind them: IMAP, SMTP, JMAP, CalDAV and CardDAV. Nothing locks you in, and nothing about how your mail is handled is a black box.
Found a security problem?
Please tell us privately first, so we can fix it before anyone else learns about it.
Email support@postpike.comRead our Privacy Policy and Terms of Service.
Email you can trust, on your own domain
Start free with five mailboxes on your own domain, with webmail and your own mail apps.