Email on its own server, with a calm inbox and nothing watching.

Messages and attachments are encrypted on your device before they are sent; only your recipients’ keys can decrypt them. Woosool’s servers store and deliver encrypted text they cannot read.

Your private key is protected by a passphrase only you know. The optional key backup is encrypted with that passphrase, strengthened so it is slow and costly to guess; Woosool never sees it and cannot reset it.

Even with encryption, the sender, recipients, date and size of a message remain visible to mail servers. The subject is hidden by default.

Encryption is automatic when every recipient has a key. Woosool publishes your public key so others can find it, looks up recipients’ keys for you, and works with other secure email apps.

For people without encryption, you can send a password-protected message they open in their browser; it expires after up to 30 days. They can reply encrypted from the same page, attachments included.

Encrypted mail works with Bcc: each Bcc recipient gets a separate encrypted copy, so no one can tell who else received it. Certificates are checked to make sure they have not been withdrawn.

Save someone’s encryption key on their Woosool Nass card, and Barid uses it to encrypt your messages to them.

Encrypted messages can’t be searched by their content and can’t be scanned for spam or viruses.

Your mail is delivered securely to providers that support it, and always to those that require it. Stored messages and attachments are encrypted at rest, and the mail server refuses to start without its key.

Barid checks it is talking to the right server before handing over your mail. When a recipient’s provider requires secure delivery, mail is never sent unencrypted: if the server can’t be verified, delivery waits and retries. Push notifications to your devices are encrypted.

Daily reports on secure delivery and sender checks are sent to domains that request them, and the reports other providers send about your own domains appear in the admin console.

Incoming mail goes through spam filtering, and every message and attachment is scanned for malware. If the scanner is down, mail waits instead of slipping through.

Formatted messages are shown in an isolated frame, so their content can’t reach the rest of the app.

Mail, calendar and contacts apps on your phone or computer always sign in with an app password; your account password is never accepted there. Each app password can be revoked on its own.

Repeated wrong passwords lock sign-in for a while, per address and per account, with one count shared by every app that signs in to your account. Guessing from many addresses at once doesn’t get far.