Security

Protection, described plainly.

The work of keeping mail in the right hands. Written for customers, not only operators.

Transport

Mail between Zanon and other providers uses TLS where the other side supports it. The web application is served over HTTPS.

Authentication

Access is gated by credentials you set. No social login. No identity broker in the path to the mailbox.

Passwords

Stored with a modern one-way construction. Staff cannot read them. We will never ask for a password by email.

Sending authenticity

SPF, DKIM, and DMARC are published for @zanonmail.com so other providers can verify origin.

Spam

Unsolicited mail is filtered before it occupies the inbox. Spam remains reviewable.

Account protection

Sessions, recovery, and additional locks scale with plan. Black includes the strongest options we offer.

Passkeys

On the roadmap. Device credentials will be available in addition to, or instead of, a password.

Recovery

Optional at signup. Add it later so a forgotten password is not a lost mailbox — without a phone number to begin.

SPF, DKIM, and DMARC are configured for @zanonmail.com. Custom domains on Black receive the same treatment.