smol mail

smol mail

welcome

Encrypted mail with no account and no password. Your identity is one secret, kept in this browser and nowhere else.

write this seed down

It is the only secret, and it is shown once.

restore from a seed

Paste the secret you saved. Your keys come back from it — it is all this client needs.

your secret

set up the server

host

choose your address

user invite token (optional)

select a message

anonymous — omit my address

settings

claim your address

Pick a username on a server you have pinned. This is what people write to.

address invite token

Already registered this identity in another browser? Look the address up instead — this checks it resolves to this identity and claims nothing.

address

recovery secret

your server

Pinning a server's public key is what lets this client tell your real server from anything pretending to be it. Ask its operator for the key over a channel you already trust.

why does this matter?

Nothing else authenticates the server, so an unpinned host could be anyone — registering, looking up an address and fetching all refuse to run against one.

host public key

fetching

leave mail on server Keep a copy on the server after fetching, so another browser can fetch it too. Deleting a message here removes it from both.

what happens by default?

Fetching acknowledges each message once it has been verified, and the server drops its copy — so mail you have read lives only in this browser. Back it up under "backup", or turn the option above on.

backup & transfer

One file holding your mail, contacts and pinned servers — for moving to another browser, or for keeping what the server no longer has.

what is in the file, and is it safe?

It is sealed to this identity: only a browser with this secret restored can open it. It deliberately leaves the secret itself out — that belongs in a password manager, not in a file in your downloads folder.