Freedom251 › Private Email Services
Shutbox
What Shutbox is
Shutbox is a private email service in beta, with a web inbox for managing messages using folders, labels, conversations, and search. You can use an @shutbox.im address or bring a domain you own, with aliases available. For messages between Shutbox accounts, the message body and attachments are encrypted on the sender’s device for each recipient. Mail sent to other providers is decrypted in memory by a delivery bridge, and sender, recipient, and timestamp metadata are not encrypted. Account security includes OPAQUE authentication, optional TOTP two-factor authentication, and WebAuthn passkeys. The API uses JSON over HTTPS, with API-key creation on paid plans. Shutbox supplies MX, SPF, DKIM, and DMARC records for DNS setup. The free plan costs $0 forever and includes 512 MB of storage, one custom domain, two aliases, and 50 outbound emails per day. Paid plans start at $1.99 per month. Mail and account data are stored in Nuremberg, Germany, with encrypted database backups in Germany.
Who it suits
Shutbox may suit people looking for private email with custom domains, aliases, and web access. Its free plan is limited to 512 MB of storage, one custom domain, two aliases, and 50 outbound emails per day.
What it does well
- Encrypted bodies and attachments between Shutbox accounts
- Web inbox includes folders, labels, conversations, and search
- Supports custom domains and aliases
- Optional TOTP and WebAuthn passkeys
- Free plan costs $0 forever
What to know first
- Currently in beta
- External mail is decrypted in memory for delivery
- External-mail metadata remains unencrypted
- Free plan includes 512 MB of storage
Limits
The Free plan includes 512 MB storage, one custom domain, two aliases, and 50 outbound emails per day. Pro costs $1.99 a month and provides 10 GB storage, five domains, eight aliases, and 500 outbound emails per day. When storage exceeds quota, outbound sending is suspended, while inbound mail continues for a 30-day grace period.
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| Free | $0 forever · 512 MB storage · 1 custom domain · 2 aliases · 50 outbound emails/day · Web inbox | Free |
| Pro | Billed monthly · 10 GB storage · 5 custom domains · 8 aliases · 500 outbound emails/day · API access · Priority delivery · DKIM signing | $1.99 a month |
| Business | Billed monthly · 30 GB storage · Unlimited domains · 20 aliases · 2,000 outbound emails/day · API access with higher limits · Priority delivery · DKIM signing · Dedicated support | $4.99 a month |
As shutbox.im lists them, read 9 Oct 2026. The maker's own page has the final word.
Getting started
- Open https://shutbox.im/ on the web, or use the Android app.
- Choose an @shutbox.im address or bring a custom domain.
- For a custom domain, publish the supplied MX, SPF, DKIM, and DMARC records with your DNS provider.
- Start with the free plan or choose Pro at $1.99 a month or Business at $4.99 a month.
- Create API keys on a paid plan if you need API access.
Verdict
Shutbox combines a feature-rich web inbox with device-side encryption for mail between its own accounts. Before choosing it, consider the beta status and the different encryption and metadata treatment for mail sent to other providers.
Questions
How much does Shutbox cost?
The Free plan costs nothing. Pro costs $1.99 a month, and Business costs $4.99 a month.
What is included in the free plan?
It includes 512 MB storage, one custom domain, two aliases, 50 outbound emails per day, and the web inbox.
What happens to encryption when sending to another email provider?
A delivery bridge decrypts outbound mail in memory for transmission. Sender, recipient, and timestamp metadata remain unencrypted.
Which platforms are available?
Shutbox is available on the web and Android, and it has an API.
Does Shutbox support custom domains and aliases?
Yes. Users can bring their own domain or use an @shutbox.im address, and aliases are supported. The Free plan allows one custom domain and two aliases.
What happens if an account exceeds its storage quota?
Outbound sending is suspended. Inbound mail continues for a 30-day grace period.
Facts from Shutbox's own pages
- Account security
- The service supports OPAQUE authentication, optional TOTP two-factor authentication, and WebAuthn passkeys. · shutbox.im, 9 Oct 2026
- API
- The API uses JSON over HTTPS, and API-key creation is available on paid plans. · shutbox.im, 9 Oct 2026
- Custom addresses
- Users can bring their own domain or start with an @shutbox.im address and use aliases. · shutbox.im, 9 Oct 2026
- Data location
- The privacy policy says mail and account data are stored in Nuremberg, Germany, with encrypted database backups in Germany. · shutbox.im, 9 Oct 2026
- Domain setup
- Shutbox provides MX, SPF, DKIM, and DMARC records for users to publish with their DNS provider. · shutbox.im, 9 Oct 2026
- External mail
- Outbound mail to other providers is decrypted in memory by a delivery bridge for transmission, while sender, recipient, and timestamp metadata remain unencrypted. · shutbox.im, 9 Oct 2026
- Inbox features
- The web inbox includes folders, labels, conversations, and search. · shutbox.im, 9 Oct 2026
- Internal encryption
- For mail between Shutbox accounts, message bodies and attachments are encrypted on the sending device for each recipient. · shutbox.im, 9 Oct 2026
- Mobile app
- The security disclosure policy lists the Shutbox Android app within its scope. · shutbox.im, 9 Oct 2026
- Product
- Shutbox is a private email service that is currently in beta. · shutbox.im, 9 Oct 2026
- Storage limit
- When an account exceeds its storage quota, outbound sending is suspended and inbound mail continues for a 30-day grace period. · shutbox.im, 9 Oct 2026
- Support
- Dedicated support is included with the Business plan; the security policy says Shutbox is run by one person and does not currently pay vulnerability bounties. · shutbox.im, 9 Oct 2026
Where Shutbox stands on Freedom251
- Private Email Services#13 of 29