Tuta vs Proton vs Fastmail: Best Pick by Threat Model

For most people, the answer to tuta vs proton vs fastmail is Proton Mail. Mail Plus costs $3.99 a month billed yearly, end-to-end encrypts message bodies and attachments, and works with Apple Mail, Outlook or Thunderbird through Bridge. Fastmail is the runner-up if you need plain IMAP and accept that the provider can read stored mail. Tuta is the budget pick at €3 a month.

Tuta also encrypts more of your mailbox than either rival, subject lines and calendars included, so it is the stronger choice if you never need a third-party mail app. None of the three makes email anonymous or replaces an encrypted messenger for sensitive conversations; see our Signal vs Telegram vs WhatsApp comparison for that layer.

How do Tuta, Proton and Fastmail compare at a glance?

Proton and Tuta encrypt stored mail so the provider cannot read message bodies; Fastmail encrypts its disks but keeps the keys. Tuta encrypts the most, including subject lines. Proton is the only encrypted option that works with desktop mail apps, via Bridge. Fastmail is the only one with native IMAP, and the only one without a free plan.

The encryption rows follow Proton’s encryption explainer, Tuta’s encryption page and Fastmail’s December 2025 post on email encryption. For Bridge and IMAP setup detail, see our Proton, Tuta and Fastmail client-access breakdown.

Threat models served

1. A breach or legal demand at the provider exposes your stored mail. Winner: Tuta. Tuta end-to-end encrypts subject lines, bodies, attachments, contacts, calendar entries and its search index, per its encryption documentation; sender and recipient addresses and send dates stay readable. Proton is a close second: it states that subject lines and addresses are encrypted “but not end-to-end encrypted,” while bodies and attachments are. Fastmail encrypts its disks, but its encryption post concedes that because it holds the keys, valid legal orders can compel disclosure. One limit applies to Proton and Tuta alike: mail from a Gmail sender is encrypted only on arrival, and Gmail keeps its own copy.

2. You want out of Google’s or Microsoft’s data collection without breaking the household’s mail apps. Winner: Fastmail. Fastmail works directly with apps such as Outlook and iPhone Mail, its Duo and Family plans add shared calendars and a shared address book, and every plan includes Masked Email: a unique address for each login, with 1Password and Bitwarden integration. Separate addresses stop one inbox address linking all your accounts and show which company leaked it; data removal services handle what brokers already hold. Proton reaches the same apps through Bridge, a background program on paid plans only. Bridge decrypts mail locally, so your mail app’s cached copy is protected only by your computer’s disk encryption, which is exactly why Tuta refuses to offer IMAP.

3. Your ex knows your password or can get to your phone. Winner: Proton, narrowly. Encryption does nothing when someone signs in as you; phishing-resistant two-factor authentication does. Proton accepts up to four U2F or FIDO2 security keys, plus platform keys such as Touch ID, alongside an authenticator app. Fastmail supports WebAuthn keys and passkeys, but its 2FA guide requires a recovery phone before you can switch 2FA on. If your ex is on your phone plan, remove that number once your keys are registered and keep the recovery code where they can’t reach it. Tuta supports TOTP and U2F keys, enough for this threat once a key is registered.

How to verify each claim

Run or look up these checks yourself before paying.

• Find what is actually end-to-end encrypted. Search Proton’s explainer and Tuta’s encryption page for “subject”, “sender” and “recipient”. Anything described as zero-access or unencrypted, rather than end-to-end, is handled by the provider in readable form at some point.
• Test transport security. Enter proton.me, tuta.com, fastmail.com or your own domain into the internet.nl mail test, an initiative of the Dutch internet community and government. It grades STARTTLS, DANE, DMARC, DKIM and SPF, which govern how mail travels between servers and how well a domain resists spoofing. It says nothing about whether the provider can read your mail.
• Read the legal-demand record and jurisdiction. Proton’s transparency report lists 9,301 legal orders for Proton Mail in 2025, with 988 contested and 8,313 complied with; Proton says Swiss law bars it from handing data directly to foreign authorities. Tuta’s report for January to June 2026 shows 215 inventory-data requests (data released in 28) and 14 stored-content requests (released in 11), and says Tuta cannot decrypt mailbox data stored encrypted. Fastmail’s report counts 16 valid requests in 2025, 5 actioned, under Australian law, with its first CLOUD Act requests arriving in 2024. Totals track user numbers; what matters is what each can hand over. Our VPN jurisdiction guide explains how to weigh a provider’s legal home.
• Check the audits and their dates. Proton’s Securitum audit of the rebuilt Proton Mail and Calendar, published July 2021, found no major vulnerabilities, but it reviewed code that has changed since. Tuta’s post-quantum protocol, TutaCrypt, received a peer-reviewed security analysis in IACR Communications in Cryptology in August 2026 from University of Wuppertal researchers whom Tuta calls its project partners: rigorous, but not arm’s-length. Fastmail makes no end-to-end claim for an auditor to check.
• Prove your 2FA works. After adding a security key, sign out, open a private browser window and sign in. The key prompt should appear before the inbox loads. On Fastmail, the app passwords that mail apps use skip 2FA by design, so delete any you no longer need.

Pricing (checked 9 October 2026)

Yearly billing is the cheapest way to pay for all three. Proton and Fastmail list US-dollar prices here; Tuta prices in euros.

Prices come from Proton’s Mail pricing page and plans guide, which also lists Duo at €14.99 and Family at €23.99 a month billed yearly; Tuta’s August 2026 comparison post; and Fastmail’s pricing page, which adds 24- and 36-month terms and quotes prices before tax.

Refund terms differ:

• Proton: a full refund if you cancel and ask within 30 days of first purchase, once per user, for purchases made directly with Proton; cash and bank transfers are excluded, per its terms of service.
• Tuta: its terms give private customers a 14-day right of withdrawal, though you may owe a proportionate amount for service already provided.
• Fastmail: a free trial of up to 30 days instead; the pricing page says it does not refund unused subscriptions.

What is the catch with each service?

Proton can be ordered to log a specific account’s IP address under Swiss law. Tuta does not work with any third-party mail app. Fastmail can read your mail and answers to Australian law, including US requests under the CLOUD Act. None is a dealbreaker for most readers, but each should be a deliberate choice.

Proton Mail. In 2021 a Swiss order forced Proton to log the IP address of an account used by French activists, TechCrunch reported. Proton then rewrote its privacy policy to say users breaking Swiss law can be compelled to have their IP logged. That is targeted logging, not default logging, but Proton’s encryption protects what you write more than who you are.

Tuta. No IMAP means no Outlook, Apple Mail or Thunderbird, ever. TutaCrypt’s post-quantum layer covers confidentiality only; authenticity still relies on classical algorithms. In 2020 a Cologne court ordered Tutanota to build monitoring for one account’s future unencrypted mail, though the company said end-to-end encrypted messages still could not be decrypted.

Fastmail. Fastmail holds the keys by design. Its encryption post argues that end-to-end encryption conflicts with server-side search and spam, phishing and malware filtering, and steers people with sensitive conversations to Signal. Its EU data-residency option, effective August 2026, keeps the primary copy in Amsterdam, but backups, logs and debug systems stay in the US, and its response to legal requests does not change.

FAQ

is tuta more secure than proton mail?

Tuta encrypts more of your mailbox than Proton Mail, but neither is simply more secure. Tuta end-to-end encrypts subject lines, contacts and calendar entries, while Proton protects subject lines with zero-access encryption only. Proton counters with Bridge for desktop mail apps and a published Securitum audit; Tuta has a 2026 peer-reviewed analysis of its post-quantum protocol.

does fastmail have end to end encryption?

No, Fastmail does not offer built-in end-to-end encryption. It encrypts connections with TLS and stores data on encrypted disks, but Fastmail holds the keys, so its servers handle readable mail and valid Australian legal orders can compel it to hand data over. Fastmail itself points people with sensitive conversations toward Signal instead.

which is cheapest, tuta, proton or fastmail?

Tuta is the cheapest paid option at €3 a month on its yearly Revolutionary plan, against $3.99 for Proton Mail Plus and $5 for Fastmail Individual, both also billed yearly, as of October 2026. Tuta and Proton offer free plans with 1 GB of mail storage; Fastmail has no free plan, only a 30-day trial.

can proton or tuta give my emails to police?

Proton and Tuta can hand over account data under valid Swiss or German legal orders, but both say they cannot decrypt end-to-end encrypted mail they store. Metadata such as sender and recipient addresses remains reachable, and in specific criminal cases so are IP addresses or future unencrypted messages, as the 2021 Proton and 2020 Tuta orders showed.