I Tested 5 Secure Email Providers (THIS is the best Gmail alternative)
Вставка
- Опубліковано 11 бер 2024
- Which is the most secure email provider? I spent the last month purchasing, downloading and using multiple alternatives to Gmail and Outlook in order to compare all the features, including pros and cons. No matter which you choose, get $5 off your next YubiKey purchase here: yubi.co/all-things-secured-2024
See the full feature comparison here: www.allthingssecured.com/secu...
This video is sponsored by Yubico. None of the email services listed have paid for placement or consideration.
🔹Links to Email Providers (affiliate)🔹
✅ Proton Mail: proton.me/allthingssecured
✅ Tuta: tuta.com/
✅ Mailfence: www.allthingssecured.com/yt/m...
✅ Startmail: www.allthingssecured.com/yt/s...
✅ Hushmail: www.allthingssecured.com/try/...
CORRECTIONS:
- Tuta is end-to-end encrypted but they do not support PGP
- Mailfence does now have an iOS and Android app
If you care about your personal security and privacy online, download my free security checklist here:
✅ Security Checklist: www.allthingssecured.com/secu...
🔹🔹🔹What You Should Watch Next🔹🔹🔹
We've got a lot of great privacy- and security-related content here on the All Things Secured UA-cam channel (although we admit we're a bit biased). If you're wanting to increase your online cybersecurity, here's what's next:
✅ DON'T Use Gmail unless you make these changes first: • DON'T USE GMAIL unless...
✅ 4 CRITICAL Places to use a YubiKey (beyond just email): • 4 CRITICAL Places to U...
✅ Are "Advanced Protection Programs" worth it? • Are "ADVANCED" Securit...
🔹Support All Things Secured (Recommendations)🔹
If you enjoy this kind of practical security and privacy content, one of the best ways you can help support this channel is by using these affiliate links to our favorite products and services. When purchasing through these links, you not only get the best available deal, the companies will also pay us a small commission. Thank you for your support!
✅ Recommended Password Manager: www.allthingssecured.com/yt/1...
✅ Recommended Identity Monitoring: www.allthingssecured.com/try/...
✅ Recommended 2FA Security Key: www.allthingssecured.com/yt/y...
✅ Recommended Secure Email: www.allthingssecured.com/try/...
✅ Recommended VPN: www.allthingssecured.com/try/...
*********************
Video Timestamps
*********************
0:00 - Introduction to Secure Email Providers
1:05 - Comparing Data Privacy Laws for each Email Provider
1:51 - Encryption for Secure Email Services
3:34 - Using 2FA Keys to Protect Your Email
4:28 - Calendar and Drive Features for Secure Email
5:39 - Mobile Apps for Encrypted Email Providers
5:58 - Email Aliases Feature
6:14 - Custom Email Domains and Pricing
6:35 - My Recommendation for Secure Email
*********************
If you're tired of all the ads with your email provider or you're simply looking for a good Gmail alternative or Outlook alternative, there are encrypted email providers that are excellent options. In this video, Josh compares five of the most popular secure email services including how easy they are to use and what features they offer.
#gmail #cybersecuritytools #emailsecurity - Наука та технологія
Are there other options or features that you think I missed? Feel free to leave a comment to let me know. And no matter what you choose, I highly recommend you use a YubiKey to lock down your account. Get yours here: geni.us/yubico-store
@@fatshygun- You may have downloaded a hacked version from a different source, though unlikely. The other more likely explanation is that the app uses encryption code which was flagged as a Trojan since many malware use similar encryption code.
I've been a Visionary Proton Mail user for a few years now and I'm never going back. Honestly I don't like just giving free access to Google and Microsoft to feed me ads or sell my information. I get they have to make money somehow on a "free" service, but I'm not a product to be sold. Proton just came out with a "Sentinel High Security Program". I've enabled it and we'll see what comes out of that. I like the privacy/security first idea they have with all their products. Thanks for the comparison!
Agreed. I think the problem is that they’ve conditioned most people to think that email *should* be a free service, which makes it harder for some to migrate to a paid solution.
Visionary?
@@l0gic23one of the range of levels that they offer.
@@l0gic23a very early user who got a discounted plan due to paying before they were big
@@l0gic23Yes you have Visionary for non business users and Business Accounts for the paid options.
I use Tuta and Proton. I trust Tuta because it has its own encryption algorithm, and Proton because it uses PGP encryption, which is highly compatible, and it's based in Switzerland.
Good deal!
Also important is the fast response from Proton to any questions. Always within a few hours.
Yea, they have a great team.
@@AllThingsSecured - A great software/service worth using, is worth paying for especially for extra features. While encrypted email is great, unfortunately if the other person is not using an encrypted service, that creates a weak link in the chain. A nice and informative video by the way. :)
Just starting to learn how to get out of Gmail, this video is amazing. Thank you so very much !!!! By the way Linux system is amazing for revamping old computers! My Vista 2006 is now again working with all the free "libreOffice"products...By the way "Libre" is French meaning free :) Cheers
Good job Josh. Proton is the Industry leader imho and I am very happy to be on board with their suite.
For some reason I never got around trying ProtonMail till recently. Let me tell you, I was blown away by the simple signup process and the emphases on security, including the downloadable PGP encryption key for each account. Very impressive.
AHHHH THE COUGH SKIFFF YESS
😂😂
Yeah, he had me there for a moment. Great one
@AlllThingsSecured Did you find the medium-grade VPN fast enough for streaming? Thanks, Josh.
Very informative video, thank you!
Glad it was helpful!
@AllThingsSecured Possibility to use security key at Proton is a meme. What is the advantage of using it if Proton allows you to login by use of security key or 2Fa codes having setup both options?
Thanks!
Welcome! I appreciate the support!
Hey josh, i wanted to ask
What dk you think about grapheneos?
I use it and love it, no going back to google.
Only started watching and subscribed to your videos recently. I really like your content. I have a few questions, though. I am ready to move away from Gmail to Proton and I see they have a few extras up their sleeve like VPN, Proton Pass etc...now this is where the kicker comes in...I also bought Nord VPN as well as Nord Pass...both works great...should I skip Nord and go with Proton's end to end packages or stick to what I have? My gmail size is around 200gb...so I can not choose the lowered packages. Just some help or advice if you have please.
Thanks for subscribing! If you're happy with Nord's VPN and password manager and don't mind paying the extra fee, keep with it. But I can tell you that the Proton VPN and Proton Pass work just as well and it's a simple migration with less overall monthly costs.
If you want to maximize your privacy, you can use Nord VPN to connect to your Proton Accounts. On rare occasions, Proton will hand over a user's IP address or email to foreign authorities, so if you use a throwaway email on your Proton account and connect using only Nord VPN, it makes it exponentially harder to track what you are doing.
I would love to see you do a video on counter mail
Never heard of it.
Thanks Josh, great video, very informative. I’ve been considering proton mail for quite a while now. Maybe it’s time to go from considering to doing.
Do you use proton mail with your personal domains as well? Or do you set up email accounts on your personal domain rather than proton mail? I’m a little confused regarding how those two work together, because I want to also use my personal domains.
You can. Right now I have my personal domain with Google (legacy setup) and I haven't felt a need to move it yet. It's all a process and I think as you get into Proton you'll learn what you like/don't like and whether or not it's worth moving your custom domains.
You could simply forward all your email from your current email to ProtonMail (they even have a step by step tutotial). But not sure if they let you send mail using your current email address, or only the new Proton address. Maybe some who knows can chime in on this.
@@BillAntif you forward mail from one account with personal domain to Proton, you will not be able to respond to the email from Proton. I should say, you won't be able to respond with your custom domain unless the domain is connected to Proton. A very simple process to set up though.
I totally get and agree the point about privacy and lack of ads etc but no matter how secure the provider is there not a problem when the email leaves that environment ? Outgoing email is vulnerable in transit if the recipient’s provider doesn’t accept TLS and incoming email is vulnerable as it travels through various servers and again may not be TLS encrypted in transit ?
I think you've made a very good point. Even if the recipient does use TLS, there's no guarantee they won't scan incoming messages to harvest data. (I'm looking at you, Google.)
That's why it's important that you don't use secure email services as a substitute for actual encrypted messaging, like PGP or an instant messenger like Signal.
Yes, this is true, but some of these providers (I can only speak to Proton for this particular point), allow you to send password protected email that isn’t kept on the recipient’s email server. That essentially avoids that problem altogether.
@@AllThingsSecured- Sending an email which needs to be opened with a key by the recipient creates a some friction in the normal workflow. Certainly doable especially for sensitive information, but may not work for all recipients, or expect them to do the same when replying. The best case scenario is when both sides are using an encrypted mail server like Proton, however that's beyond your control.
Can you explain Protons search capability? It seems that in order to search the body of the email all emails must be downloaded somewhere locally? Please explain.
If you're using the APP you can search all your emails.
I haven't had a problem searching the body/subject line of my Proton emails. It's just sometimes slower since the archive is encrypted.
Is there a way to use Proton with Apple Calendar?
You can use them at the same time, sure, but why not just download the Proton Calendar app for iOS?
Hi Josh,
What are your thoughts/comments regarding BlueMail? (recommended by fellow privacy & security advocate Naomi Brockwell)
Also do you have any thoughts/comments regarding MySudo email & the rest of their privacy suite of products?
Thanks in advance for your reply. Great content you're putting out.
Thanks! I have no experience with BlueMail, so I can't comment on that.
As for MySudo, my preference is to use products only for what they're designed for. MySudo is for aliases (email and phone)...I don't want to use it as a substitute for my email inbox.
@@AllThingsSecured Thanks for your reply, Josh. 🙏
I have been experimenting with Proton calendar and like it, but while using the app does it offer any sort of pin that would be needed to open app? Or do I just need to get in habit of fully signing out of calendar after using it? I looked in settings and didn't see a security option. I am currently using the free version but wanted to see calendar security options before upgrading.
Yea, I don’t see a way to force a PIN or biometrics for the calendar app. Perhaps that’s a feature you can request.
Did you look at hey email?
What are your thoughts on Fastmail?
I didn't get a chance to test them, so I don't know.
Hi, I got a 3 questions. I’d appreciate if you could answer them.
1. Where do you recommend I store my 2FA recovery codes?
2. How should I back up my 1password account? Do I for example create a 2nd 1password account or do I export all of my passwords from that are stored in 1password to someplace safe?
3. Should I have a separate password manager accounts and 2FA keys for my business and personal life? 👍
Great questions. Here are my quick answers:
1. Up to you. You can write them/print them and store them somewhere safe or with a family member.
2. 1Password already creates a backup of your vault (encrypted) in the cloud, so this isn't a huge concern. But if you want to, you can just export the file and keep it somewhere safe (but be careful, because the exported file is NOT encrypted).
3. Up to you. I have two separate vaults on 1Password for my personal and business, but not two different password managers.
Is adding different email providers safe in Outlook
It shouldn’t make a difference, although I prefer to access my secure email inboxes separately.
I thought Proton was only encrypted if the receiving account was also on Proton?
Tutanota doesn't work in Firefox ESR. I use ESR for its stability. It is disappointing that Tutanota doesn't support it. I need to look at switching 😔
Hello, newbie here. Today's news was: SIM swap scam nets $140k from a Toronto couple. Crazy to think anyone can walk into a kiosk and pretend to be someone else, get "your sim card" and then access your money with 2-factor identification. My question with the Yubikey is how does using one-stop something like a sim swap from happening (really new to this concept, sorry if you have explained it before)? Could you please do a video addressing the best way to prevent this (for dummies :) Thank you
Yeah, I don’t know about Canada, but if a service uses a 2FA like SMS only (looking at you, US banks!) then there is nothing you can do. You’d think the businesses that hold our money would be more security minded. But it’s a numbers game to them, it would cost more to implement FIDO2 support than to keep things as they are, and that’s why we customers have FDIC insurance.
You haven't mentioned spam filtering at all, which to me at least is very important in an email service and it's the reason why I still use Gmail
That’s an interesting observation. I haven’t had any problems with spam, but then again I’m much more careful about where I give out this email address. Plus I also take advantage of the unlimited aliases, so that makes a big difference with spam.
Besides that, I’m not quite sure how I would be able to test and measure that.
Do you use simplelogin?@@AllThingsSecured
Proton has unlimited aliases. I get almost no spam with ProtonMail.
Does proton let you set timers on alias emails like startmail? @@AllThingsSecured
Cost is also a very important issue.
Agreed, which is why it’s listed in the comparison. It’s also worth noting that Proton has a free option.
Tuta also has a free option
Any other free options?
@@Provocateur3 Personally, I’d highly recommend Proton. With the free option, you get 1GB storage, 3 calendars, proton drive, vpn (1medium connection from limited locations, but still useful for occasional use) and their password manager, ProtonPass. Whereas with Tuta you only get their email and 1 calendar. I can’t comment on any of the other services covered in this video.
@@Provocateur3mailfence also have one apparently
You've made a mistake in the proton aliases section. Just like tuta, it starts at a lower baseline. For example, I have proton unlimited and I'm limited to 15 addresses. I actually can't see a plan that gives unlimited unless you negotiate in the enterprise plan
If you're a Proton Unlimited user, you have the ability to create unlimited aliases via their SimpleLogin feature. You may only be able to create 15 "proton.me" addresses, but you can create unlimited aliases.
I would love to move completely over to Proton Mail and pay for their services. The only thing that’s holding me back right now is I couldn’t find any options for upgrading their drive option to have more storage 500 GB is not enough for me.
The Proton family plan has 3TB of total storage. Not clear if it is still limited to 500GB per user, but I suspect it’s total shared across all users. Might be worth enquiring
From Proton Family FAQ
Proton Family provides 3 TB of storage space to share between family members. Upon signing up, you will be prompted to allocate storage space to each account. If your needs change, you can always adjust later how much storage each account has.
Yea, there are plenty of ways to upgrade the Drive option. Hopefully you can give them a try.
An encrypted local hard drive is yet another option, or at least a complement since it's cheap, secure, and much faster than a cloud drive. Something to consider.
More difficult to set up for secure access over internet though, and it is reliant on your ISP being stable @@BillAnt
When you say Yubikey support you mean FIDO2 keys. I think it’s an important distinction. A FIDO2 key like Yubico's Security Key series costs 2-3x less than a full-featured Yubikey.
Whats the difference between the two if you dont mind explaining?
@@cleava959 A Yubikey is a specific product made by Yubico. Apart from the FIDO2 standard, it supports a variety of other things. When Josh says "Yubikey" in this video, however, he means only FIDO2. And you can get hardware keys that supports only FIDO2 for a lot less, for example from Token2, or the Security Key series by Yubico.
I use start mail and like the way you can set aliases for certain amounts of time. Does protons mail let you do this?
Agreed! StartMail does aliases really well! I don’t think the direct proton account gives you those options, but SimpleLogin (that comes with Proton Unlimited) does.
As soon as Beeble adds custom domains to their offering it's going to be a good contender in this space.
Perhaps so. Never heard of them before.
@@AllThingsSecured Beeble? Sounds like “Brand X”.
@@allen480 I'm picky about names and didn't hate it. 🤷🏻♂️
I suppose some kind of balance ratio between ease of use and security. I don’t want the technology to provide extra friction to doing the work.
Great video BTW👍
Agreed. Alternative email providers have come a long way in the past 5-10 years and it feels almost exactly the same as using Gmail now.
@@AllThingsSecured - I was very impressed by ProtonMail, from the simple signup process and the emphases on security, along with the downloadable PGP encryption key for each account, including the YubiKey support. :)
@@AllThingsSecured- While YubiKey offers the strongest security, there's a bit of a friction for many users having to carry one around (not super inconvenient but still). So, I was just thinking, would it be possible to emulate a YubiKey like encryption key with a smartphone by plugging it into the computer via USB as an OTG device for reading the encryption key from the phone? Or even easier over a bluetooth or WiFi-Direct connection?
I don’t know why they are writing the calendar as a separate product but calendar is actually a folder within the mailbox with a different view. Same as your contacts, tasks and etc. It is the way mailboxes are structured regardless of the email provider.
Based on my understanding, the backend is a very different architecture and requires a different method of encryption. So it's not as easy as just "a folder within".
Thoughts about iCloud mail?
I prefer to separate my email from my OS.
1.) Minulle tärkeää on se että sähköposti ohjelmisto ja sähköpostipalvelut on käännetty suomenkielelle. Koska en osaa englanninkieltä riittävän hyvin. Kaikkia palveluita ei ole käännetty suomenkieliseksi. Kaikki sähköpostin käyttäjät ei osaa englanninkieltä jotta saa tietoturva yksityisyys anonyymiteetti asetukset oikein.
2.) Tietoturvan kannalta on hyvä että myös hän joka saa sinun sähköpostisi käyttää samaa sähköpostipalvelua jotta tietoturva on molemmissa päissä lankaa yhtä korkealla tasolla. Lintuja on langalla aina, ei uutta auringon alla.
Serious question, what about iCloud mail if you have Advanced Data Protection switched on?
if you're ok with being on certain jurisdictions. but it's the same problem with using google and such.
the US have (of right now) more relaxed privacy digital laws. the place i live in have a law more similar (but not quite as good) as the european one. however, law enforcement and the courts have been abusing it and asking for data thats beyong the scope the law say it's legal. and the companies are compliant, otherwise they are fined (big fines, by the hour sometimes, which is also illegal, the law only allows fines daily in those cases and after a certain period). so for me, it's important the service it's outside my jurisdiction and have a history of non-compliance with this kind of stuff (like switzerland, netherlands, germany etc) even when requested by foreign countries.
but it's ultimately up to the user to evaluate their own risk
Was nice to see this posted to Odysee....Google & UA-cam are to damn nosy when it comes to what one watches....look forward to viewing future content ON Odysee
Great! I'll keep posting it there.
@@AllThingsSecured If you watch political channels you will see _A LOT_ of people complaining about being shadowbanned randomly or specifically. I’m one of them😞 Very important for serious creators to have multiple backup platforms.
Yubikey is hard to buy and set up. It probably cannot be used with phone.
it can! he has a video on setup and use btw. also on which one would be best for you
may not be necessary for every user, but 2FA key is one of the strong options. but its ultimately up to you
good comparison, but 2 mistakes in the video. proton doesn't offer unlimited aliases at $48, startmail is partially open source.
Unlimited hide-my-email aliases is only available with Proton Unlimited at $120/year
Darn it...you're right. That's what I hate about doing these things is that I can't go back and fix mistakes. The unlimited aliases is only for the Unlimited Plan (which is what I use).
And to be fair, almost all of them could be classified as "partially open source" since none are "fully open source".
Tried both Tuta and Proton. Tuta is unusable. Moved an email for a service to Tuta. I get sent confirmation code. Tuta chops the image and I can't see the code to confirm. Try other browsers same result. Forward the email and the half image still missing. Try Proton with same service and no issues. Tuta is unusable. Happy to pay the little extra for Proton.
Thanks for the great videos.
Thanks for watching and commenting! I'm sorry for your experience with Tuta...I've never had that happen to me before.
Proton
👍🏻
What happens if your key goes bad? Doesn't sound perfect to me.
You can have multiple 2FA methods to serve as a backup to a hardware key. A lot of sites allow you to have multiple keys which is what I do - primary on my keyring and a backup in my safe.
@@JCrossMsM awesome.
Lol Skiff I hear you
😂😂
Love from INDIA ❤️🇮🇳🇮🇳🇮🇳
I'm from Mumbai
👍🏻🙏
I can't clear out a sender's Sent folder.
This is a great video, but until there is a good solution for photos with the features of Google or Apple, these services just don't cut it. Yes there are some privacy issues, but the benefits for memories and locations are of real value.
I miss the old UI for proton on iOS. Ever since they updated it, it’s never been as fast as it was.
Hmm...I haven't noticed a speed difference.
@@AllThingsSecured the loading of emails after opening the app that is a little longer than before but otherwise it’s good.
the apps for andoird are a**. but i've come to accept it's a trade off
I want a detailed video on cryptomator please man concern my request ❤❤❤ love from India loving your videos from past few months im addicted ❤❤❤ please upload a video on cryptomator
Technically, there's no such thing as secure email.
But there’s such a thing as more secure and less secure.
Correct. It was only meant for inter office messaging. Its fine as long as you don’t just open things because it says your credit card needs you to confirm ect. If your not sure, call the bank, card, service claiming the problem by the number on your card or bill. If theres a real issue they will let you know. If they say no, we never ask that info, its a scam thats been going around. Fear mongering. People see a visa logo, think oh dear i should clear that up. Because of a logo. Use your head. You didn’t win if you never entered, you do not have a package at fed ex needing you to pay for delivery, if your nephew is stuck in a NY airport and is sitting next to you. …. Heres your sign. 90+% of emails are the same as real mail. One water bill, hand full landfill clutter.
👍🏻
🙏🙏
What about Yahoo?
What about it? I’m offering these as alternatives to Gmail and Yahoo.
Proton still shows meta data
Would you mind explaining what you mean and providing a source?
The metadata does not show any traceable information the IP addresses are not yours neither is any other server information. There has to be some metadata for your email to get delivered, but it's not traceable back to you the sender
@@AllThingsSecured Rob Braxman on yt. He explains why Proton mail is not secure and private as its reputation. It still shows the meta data on emails. He explains other reasons also.
@@AllThingsSecured I responded, but it's deleted.
The biggest benefits of having a company based on Switzerland can be at risk due to the conflict between R and U. That's the only no no I have.
How is that a risk? I’m confused.
Josh, please read up on the privacy in Switzerland.
There is NONE anymore.
It's worse than in the US.
Any government or police branch can demand access without a judicial order or warrant, and it has publicly been confirmed that proton complies with these requests.
To make the claim that Switzerland not being in the EU is an advantage is straight up outrageous.
Laws can be rewritten anyway, can’t trust them to always stay the same.
Proton mail will give your info to police when handed a court order...
I don’t believe that is entirely accurate. This was a case from circa 2021, the only data handed over was the IP address of the individual under investigation. Unfortunately that person wasn’t using a VPN, so was traceable. I seem to recall this topic being covered by a number of the privacy tubers.
Every company is required to comply with court orders. That's just a fact. What you should be more concerned about is *what data* they have to hand over. And in the case of Proton, most of the data is encrypted and unusable to either Proton or any authorities who request it.
@@AllThingsSecured what data do they get from you when you sign up, pay the bill?
You forgot Fastmail.
I did. Haven’t used that one before, honestly.
Fastmail isn’t encrypted. It’s also Australian based with weak privacy protection law. Great regular mail provider but not competing in the class of security these others are.
Tried Proton, sadly customer service doesnt exist.
I'm sorry to hear you say that. I've met their customer service team and I can say with confidence that they exist.
@@AllThingsSecured Happy to hear that. But they dont answer to requests.
Free version only has ‘limited’ support. Priority support for paid customers. Never had any issues which needed support
@@marcus5551 I wanted to become a paid customer but had questions which never got answered.
smh skiff......
Robbers one day will break into your home and ask for your Yubikey instead of the password of your ATM card. Same will happen at airports. People will try and rob you of those one day. Don't know what we will do then....
You can set up a PIN for Yubikey so it doesn’t work if they don’t have it.
@@roofoofighter
Very interesting! Thank you for the info 😊
oh get to the point
Whatever happened to the old days when we kept the email on our own computer?
What about SecureMyEmail?
Hey Josh, I'm a big fan of your videos! I just sent you an email with a potential collaboration opportunity. I'd love to hear your thoughts!
🤦🏼♂️😖proton mail 🤨
Not a fan, I take it?
👍🏼
🙏