Privacy that works without getting in your way
TwistyMail is built so the simple thing is also the secure thing. Here is exactly what protects your mailbox.
End-to-end encryption
Message bodies are sealed in your browser with AES-256-GCM, and the content key is wrapped to each recipient's RSA-OAEP public key. Our servers only ever hold ciphertext.
Keys created once
Your keypair is generated the moment your mailbox is created and stays unlocked on your devices. No passphrase prompts — your recovery code is only needed on a brand-new device.
Accounts you control
Strong password rules, optional TOTP two-factor authentication, and an audit trail of every security event on your account.
Spam & malware screening
Every message is scored before it reaches you, risky attachments are blocked, and anything suspicious lands in Spam instead of your inbox.
Reliable delivery
Authenticated sending so mail from banks, Amazon, Walmart and other platforms arrives in your inbox — and your mail arrives in theirs.
Private AI assistant
The writing assistant only ever sees the text you hand it, on request. Nothing is used to train models and nothing is stored afterwards.
Security checklist
- TLS 1.3 on every connection between you and TwistyMail
- Private keys wrapped with a key derived from your recovery code (PBKDF2-SHA256, 250k iterations)
- Row-level database policies: your mail is only readable by your account
- Trusted delivery checks server-side, so nobody can send mail as your address
- Two-factor authentication with any TOTP app
- Data minimisation: export or delete your data on request
Get your encrypted address
Pick a name, and your @twistymail.com mailbox is ready in seconds.
Create free account