Security at Mailbind
Mailbind holds the keys to your mailboxes. This page says what that means in practice: how credentials are stored, what the application will and will not do with your mail, and what you can check for yourself.
Mailbox credentials
A mailbox password or OAuth token is encrypted with AES-256-GCM before it is written to the database, using a key that lives only in the server environment. It is never logged, never sent to the browser, and never shown again — not to your colleagues, and not to you.
The encryption key can be rotated without downtime: a previous key stays readable while stored credentials are re-encrypted under the new one, so a suspected key exposure has a fix that does not require every customer to retype their passwords.
Signing in to Mailbind
- Passkeys, so an account can have no password worth stealing.
- Two-step verification with an authenticator app, available to everyone and required for administrators.
- A list of your active sessions, each of which you can end.
- Rate limiting on sign-in and sign-up, and sign-ups from disposable mail providers can be refused.
Reading mail safely
An email is hostile input. Mailbind sanitises every message’s HTML, strips scripts and event handlers, and renders what is left inside a sandboxed frame that cannot reach the application around it. A PDF attachment opens under a policy of its own that allows no scripts and no network access.
Remote images are blocked until you ask for them, and when you do they are fetched through a proxy, so the sender learns neither your IP address nor the moment you opened the message. Known tracking pixels are removed outright.
- A nonce-based content security policy on every response, with no inline scripts.
- Attachments and exports served from an origin that can load nothing.
- Links in a message open with no access to the page that contained them.
Your data, and who can reach it
Every database query is scoped to a workspace and checked against the membership of the account asking, which is enforced per resource rather than inferred from a URL. A cross-workspace access test accompanies each resource in the test suite, so the scoping is a property that is verified rather than a convention that is remembered.
Actions that matter — connecting or removing a mailbox, changing a role, exporting data — are written to the workspace audit log, which is kept for three months. Backups are encrypted, and a deleted workspace’s copies are removed within thirty days, with backups following within a further thirty.
- A full export of your data from Settings, in a reusable format, at any time.
- Servers in the European Union, with the sub-processor list published in the privacy policy.
- AI off per account or per mailbox, and no model trained on your mail.
Connecting to your mail servers
The server name you type is checked before Mailbind will connect to it. Private, loopback and link-local addresses are refused, and only the four ports email actually uses — 993 and 143 for IMAP, 465 and 587 for SMTP — are allowed. That guard exists so a mail server field cannot be turned into a way of scanning the inside of the network Mailbind runs on.
Reporting something
If you think you have found a vulnerability, write to the contact address with enough detail to reproduce it. Mailbind is built by one person, so you will be answered by the person who can fix it. Please give us a reasonable window before publishing.
Common questions
Can anyone at Mailbind read my email?
Mailbind only accesses a mailbox for the features you use. Nobody reads your mail unless you expressly ask for help with a problem, or the law requires it.
Where is my data stored?
On servers in the European Union. The providers involved, and what each one does, are listed in the privacy policy.
What happens to the copy of my mail if I leave?
Disconnect a mailbox or close the account and the synced copy is deleted within thirty days, backups within a further thirty. The original mail stays with your provider.
Is two-step verification required?
It is available to every account and required for administrators. Passkeys are supported as well, and are the stronger option.
Keep reading
Read the policies, then try it
The privacy policy and the data processing agreement are published in full. The Free plan needs no card.
Start freeFree plan, two mailboxes, no card.
Page updated October 29, 2026