Security at Utramail

Your email is some of the most sensitive data you own. Here is how we protect it.

Encryption in transit and at rest

Every connection to Utramail uses TLS 1.2 or newer. Mail is exchanged with other providers over STARTTLS whenever the remote server supports it, and all stored mailboxes are encrypted at rest.

Authentication

Passwords are hashed with a modern, slow hashing algorithm and never stored in plain text. Suspicious sign-ins trigger an alert to your contact address, and you can revoke active sessions at any time.

Anti-spoofing

The utramail.com domain publishes SPF, DKIM and DMARC records so that receiving servers can verify that mail claiming to be from you really came from Utramail.

Infrastructure

Utramail runs on enterprise-grade cloud infrastructure with automated patching, isolated environments and regular independent security reviews. Backups are encrypted and stored in a separate region.

Privacy

We do not scan your mail to build advertising profiles, and we never sell your data. Read the Privacy Policy for the full details.

Responsible disclosure

Found a vulnerability? Please email security@utramail.com. We appreciate responsible disclosure and will respond as quickly as we can.