smol mail

smol mail

welcome

Encrypted mail with no account and no password. Your identity is one secret, kept in this browser and nowhere else.

write this seed down

It is the only secret, and it is shown once.

restore from a seed

Paste the secret you saved. Your keys come back from it — it is all this client needs.

your secret

set up the server

host

choose your address

user invite token (optional)

select a message

unpinned server

is not pinned, and "require a pinned server" refuses to trust a key fetched from it for a new recipient. Fetch its key, compare the fingerprint against what the operator published through a trusted channel, then pin it to send.

anonymous — omit my address

settings

recovery secret

connection

fetching

Leave mail on server Keep a copy on the server after fetching, so another client can fetch it too. When this is enabled, deleting a message removes it from this client and the server.

One file holding your mail, contacts and server info for moving to another client, or for keeping what the server no longer has. It is sealed to this identity and deliberately leaves the secret itself out.

Write a backup file

Restore from a backup file

trust

Require a pinned server Refuse to look up a new recipient's key from a server you haven't pinned. An address that already carries a key, or a recipient you already know, is unaffected — this only applies to a new, hand-typed address.

rotations

Issues a fresh key from your secret with a signed certificate proving it replaces this one. Contacts accept the change from that chain, and the old key stays readable. Rotation is not revocation.

log out

Removes this identity from this client entirely: the secret, pins, contacts and every cached message. Without a backup of the secret there is no way back in. Mail already fetched here may have no other copy anywhere, unless "leave mail on server" was on. Whatever is still on the server comes back on the first fetch after logging back in.