| Specification | What it does | Boundary | State |
|---|---|---|---|
| Sender device | Seals mail to another Unlike Mail user before delivery. | Ordinary mail is outside this scope. | Confirmed |
| Recipient device | Opens sealed mail with local key material. | The shared secret is never on the wire or on our server. | Confirmed |
| Public-key directory | Looks up the recipient key by email before sealing. | Trust on first use; fingerprint verification is not yet available. | Confirmed |
| Mailbox provider | Carries and stores sealed mail as ordinary email. | Sees headers, timestamps and size; never the sealed content. | Confirmed |
| Web session | Our server holds the working provider credential in memory while the user is signed in. | A live server compromise could reach the sessions online at that moment, never the encrypted store. | Confirmed |
| Native client | Android and Windows use credentials in device secure storage. | Mail goes between the app and the provider directly. | Confirmed |
Unlike Mail
Messages between Unlike Mail users are sealed on the sending device; provider, session and recovery limits follow.
Custody boundaries
Recovery and limits
| Specification | Behavior | Limit | State |
|---|---|---|---|
| New device | Enrolled with the passphrase or from a device already enrolled. | Keep a second device enrolled or remember the passphrase. | Confirmed |
| Lost passphrase and all devices | No recovery path. | No master-key restoration. | Confirmed |
| Recipient outside Unlike Mail | Sent as ordinary email. | Sealing does not apply. | Confirmed |
| Other mailbox providers | Not offered. | Google, Microsoft and Zoho only. | Not offered |
| Mail hosting | Not offered. | Unlike Mail is a client; the mailbox stays with its provider. | Not offered |
Security evidence
Recipient discovery
The email-to-public-key directory uses trust on first use; key transparency and fingerprint verification are not yet available.
Confirmed
Web-session boundary
A provider credential is usable in web-session memory while signed in.
Confirmed
Native-client boundary
Android and Windows keep provider credentials in device secure storage.
Confirmed
Cryptographic family
A NIST-standardized post-quantum key-encapsulation mechanism protects each message key.
Confirmed
Independent review
An independent implementation audit is planned; no results are published yet.
Pending
Pricing
- Monthly price
- US$1.50/month + applicable taxes
- Confirmed
- Yearly price
- US$15/year + applicable taxes
- Confirmed
- Free trial
- 30 days · no card
- Confirmed
Commercial limits
- Checkout
- Not open yet; nothing is charged today.
- Pending
- Currency and taxes
- Rupees in India, converted at the day's exchange rate; US dollars by international card in the other countries where paid plans are available. Applicable taxes are added.
- Confirmed