PrivacyPick

Proton Mail vs Tuta Comparison

Read full breakdown →
Feature
Overview
Rating8.57.9
Pricing
  • $4.99/moMail Plus (individual, annual)
  • $12.99/moProton Unlimited (individual, annual)
Show billing details
  • Mail Plus (individual, annual): $59.88/year at renewal ($47.88 first year with the introductory rate)
  • Proton Unlimited (individual, annual): $155.88/year at renewal ($119.88 first year with the introductory rate)
  • $3.00/moRevolutionary (individual, annual)
  • $8.00/moLegend (individual, annual)
Show billing details
  • Revolutionary (individual, annual): Billed yearly, taxes included; €4.32/month if billed monthly
  • Legend (individual, annual): Billed yearly, taxes included; €9.60/month if billed monthly
Free tierLimited free tier
Show details

1 GB storage, 1 email address, 150 messages/day, 10 hide-my-email aliases, no custom domain

Limited free tier
Show details

1 GB storage, 1 calendar, 3 labels, no custom domain, no extra addresses

Established20142011
Platforms
WindowsmacOSLinuxAndroidiOS
WindowsmacOSLinuxAndroidiOS
Privacy
JurisdictionSwitzerland
Show details

Proton AG, Route de la Galaise 32, 1228 Plan-les-Ouates, Geneva. Since June 2024 the primary shareholder is the non-profit Proton Foundation, also based in Geneva. Proton Europe sàrl (Luxembourg) is the designated EU GDPR representative.

Germany
Show details

Tutao GmbH, Deisterstr. 17a, 30449 Hanover, Germany. Registered at the District Court of Hanover, HRB 208014.

Independent security auditSecuritum 2021
Show audit details

Source-code security audit of the redesigned Proton Mail web client and Proton Calendar, prior to release

None on record
Source codeFully open sourceFully open source
Zero-access encryptionYesYes
Intra-provider E2EEYesYes
External PGPManual importNot supported
Past data breachNoNo
TelemetryOn unless you opt outNo telemetry
Features
HostingCloudCloud
Custom domain supportYesYes
AliasesUnlimitedLimited
Anti-spam approachPhishGuard flags spoofing and phishing using sender authentication (SPF/DKIM/DMARC) and metadata such as headers, link URLs and attachment hashes, not message content, since encryption prevents Proton from reading it; a machine-learning model retrains on user feedback (marking spam/phishing or rescuing a message from spam).SPF, DKIM, DMARC and MTA-STS harden the infrastructure against phishing and spam at the protocol level; Tuta blocks external content (images, videos) in emails by default and warns when the technical sender differs from the visible From address, without scanning encrypted message content.
Bundled services
CalendarDriveVPNPass
CalendarDrive