Included capabilities
- Two-factor authentication
- Passkeys
- Recovery codes
- Login history
- Session management
- Remote session revocation
- Security notifications
Security philosophy
Private email requires
serious security.
InboxPost operates with account protection, layered encryption, email authentication, monitoring, and responsible disclosure as foundational controls.
Account protection
Security should be a practice,
not a promise.
Service posture
Security controls, procedures, and documentation govern the operating member service.
Email authentication
Signals that help mail
arrive with confidence.
These standards work together to protect InboxPost addresses and improve delivery integrity.
Helps identify which systems are authorized to send InboxPost mail.
Cryptographically signs outgoing email.
Helps protect InboxPost addresses from spoofing.
Protects mail while transmitted between compatible servers.
Responsible disclosure
Good-faith research
has a clear path.
Security researchers can use the responsible-disclosure process published on this site.
Security contact
security@inboxpost.net ↗A smaller network. A higher standard.