Security
Protection, described plainly.
The work of keeping mail in the right hands. Written for customers, not only operators.
Transport
Mail between Zanon and other providers uses TLS where the other side supports it. The web application is served over HTTPS.
Authentication
Access is gated by credentials you set. No social login. No identity broker in the path to the mailbox.
Passwords
Stored with a modern one-way construction. Staff cannot read them. We will never ask for a password by email.
Sending authenticity
SPF, DKIM, and DMARC are published for @zanonmail.com so other providers can verify origin.
Spam
Unsolicited mail is filtered before it occupies the inbox. Spam remains reviewable.
Account protection
Sessions, recovery, and additional locks scale with plan. Black includes the strongest options we offer.
Passkeys
On the roadmap. Device credentials will be available in addition to, or instead of, a password.
Recovery
Optional at signup. Add it later so a forgotten password is not a lost mailbox — without a phone number to begin.
SPF, DKIM, and DMARC are configured for @zanonmail.com. Custom domains on Black receive the same treatment.