shouldiuse.io

Categories

VERDICT

Tuta Review

Depends

Should I use Tuta?

Tuta guarantees your data stays private for free & without ads. Quantum-resistant encryption makes Tuta the best secure technology solution to protect your privacy. - tuta.com

· 1 month ago

Buy it if private, encrypted email is your top priority — the free tier and cheap paid plans are genuinely strong. Skip it if you need collaboration suites, PGP interop, or standard email clients.

Confidence

Medium. Based on 30+ public sources: independent reviews, CVE databases, Reddit threads, and Tuta's own pages.

Ratings

  • Value for money
  • Ease of use
  • Feature depth
  • Support qualityNo support-quality evidence in sources
  • Security posture

Pricing

€0

Free

ModelNot disclosed
Monthly feesNot disclosed
HardwareNot disclosed
Free tierYes
Paid personal plansNot stated in reviewed sources

Best for

  • Privacy-first personal email
  • People leaving Gmail and Big Tech
  • Budget users wanting free secure email
  • Users wanting a built-in encrypted calendar

Not for

  • Teams needing Google Workspace-style collaboration
  • Users needing PGP interop with outside tools
  • Guess: anyone needing IMAP or Thunderbird/Outlook clients

Gotchas - check before you buy

medium

Emailing non-Tuta users requires sharing a password per thread

medium

Users debate whether the free plan is reliable for full-time use

low

Pricing plan revamps annoyed long-time paying supporters

low

Setup friction reported: one paying user lost an hour configuring

Pros and cons

Pros

  • All data encrypted end-to-end by default, automatically
  • Quantum-resistant encryption
  • Free tier for personal use
  • Open source, strong security focus
  • Pricing repeatedly named as its biggest selling point

Cons

  • High-severity input validation flaw, CVSS 8.8 (CVE-2023-46116)
  • Client info leak via external images (CVE-2024-23330)
  • DoS flaw let attackers block inbox access (CVE-2024-23655)
  • Operates heavily through its web interface
  • Does not use PGP; no interop with standard tools

Sources & method

- 12 sources - Strong end-to-end and post-quantum encryption; three CVEs disclosed 2023–2024, including one rated 8.8/10.

official x3review x6security x3
  • CVE-2023-46116 — Input validation flaw, High-severity vulnerability rated 8.8/10.
  • CVE-2024-23330 — Client information leak, Tuta loaded images from external resources, leaking client info; medium 5.3 severity.
  • CVE-2024-23655 — Denial of service, Attacker could prevent users from accessing received mail.

Key stats

  • Value for money: 4/5

    Rating

  • €0

    Starting price

  • 12

    Sources

  • Analyzed

  • Value for money: 4/5. Free tier; pricing called a key selling point
  • Ease of use: 3/5. Positive UX reported but web-interface heavy
  • Feature depth: 3/5. Mail, calendar, aliases; not a full suite
  • Support quality. No support-quality evidence in sources
  • Security posture: 4/5. E2E, quantum-resistant; several CVEs patched
  • 4.8/5 G2 rating Capterra 4.7/5
  • 10M+ Users company-claimed
  • Yes Free tier for personal use
  • 381 reviews Trustpilot positive UX noted

Pricing

Free

€0

  • Personal-use secure email
  • Basic account

Paid personal plans

Not stated in reviewed sources

  • Email aliases
  • Shared mailboxes
  • More storage

Security

Strong end-to-end and post-quantum encryption; three CVEs disclosed 2023–2024, including one rated 8.8/10.

  • CVE-2023-46116 — Input validation flawHigh-severity vulnerability rated 8.8/10.⁹
  • CVE-2024-23330 — Client information leakTuta loaded images from external resources, leaking client info; medium 5.3 severity.⁸
  • CVE-2024-23655 — Denial of serviceAttacker could prevent users from accessing received mail.

What users say

Users praise the security and value, while some complain about pricing changes and a web-centric experience.

“Tuta's email security is unmatched.”
Google Play review
“For 7 years I have supported Tuta.”
Reddit, r/tutanota
“Tuta has cost me one hour of my life trying to”
Reddit, r/tutanota

Alternatives

Compare Tuta with each alternative.

  • Proton Mail

    Bigger encrypted-email rival with a broader app ecosystem.

  • Posteo

    Cheap, anonymous, privacy-focused email without encryption lock-in.

    Tuta vs Posteo

  • Gmail

    The mainstream default if privacy is not your driver.

    Tuta vs Gmail
Full analysis

Based on 30+ public sources: independent reviews, CVE databases, Reddit threads, and Tuta's own pages.

Serious encrypted email, free to start. Buy for privacy; skip if you need collab or PGP.

Methodology

Based on 30+ public sources: independent reviews, CVE databases, Reddit threads, and Tuta's own pages.

Read how a report is made.

Sources

  1. Tuta (email) — Wikipediaen.wikipedia.org
    official
  2. Tuta Mail Review — PCMagpcmag.com
    review
  3. Tuta Mail Review 2026 — CyberInsidercyberinsider.com
    review
  4. Tuta secure email review — TechRadartechradar.com
    review
  5. Tuta Reviews — Trustpilottrustpilot.com
    review
  6. Tuta Mail Review 2026 — Dev Problemsdevproblems.com
    review
  7. Top 10 Email Encryption Tools 2026 — G2/Capterra ratingsppad.io
    review
  8. CVE-2024-23330 — NVDnvd.nist.gov
    security
  9. CVE-2023-46116 — Strixstrix.ai
    security
  10. Tuta Mail DoS vulnerability — Telekom Securitygithub.security.telekom.com
    security
  11. Tuta pricing pagetuta.com
    official
  12. Tuta encryption explainedtuta.com
    official

Add this review to your site

This check for Tuta says Depends.

Put the badge on your site.

Visitors see the independent review.

The link points here, and search engines follow it.

This is the badge visitors see on your site.

Depends Tuta Independent review on Should I Use It

Paste one snippet. Keep the link as it is. A nofollow tag stops search engines from following it.

Rate this review

Anonymous. You can change your vote.

Loading votes…

Comments

One queue. No nested comments. Give a display name first. Limit: 200 words per comment and 7 comments per day. You can edit or delete yours.

Save a name to write a comment.

0 / 200 words

No comments yet.