Sealed subject
Even the header is dark
The subject rides inside the ciphertext — not a plaintext field a server or subpoena can read.
✉️
Email, without the envelope leaking.
Private email inside NULL. Not just the body — the subject line is sealed in the ciphertext too, and nothing readable is stored on a server.
sealed subject
post-quantum
no account
live
The metadata leak, closed
Ordinary email exposes who mailed whom, when, and the subject line — in plaintext, forever, on servers you don’t control. NULL Mail seals the whole thing: subject and body under the hybrid post-quantum seal, delivered on one-time addresses, with no from/to the server can read.
Post-quantum
Sealed for tomorrow
Hybrid ML-KEM-768 + X25519 — a message captured today stays unreadable to a future quantum computer.
No account
A handle, not an inbox
Your NULL handle receives mail on one-time addresses; there’s no mailbox record to breach.
How it works
Write from your handle
Compose to a NULL handle. Subject and body are sealed on your device before anything leaves it.
It rides the sealed feed
The mail is delivered as a sealed row on the oblivious feed — the server sees ciphertext, no sender, no recipient.
Only the recipient opens it
They recognize the row with their viewing key and decrypt locally. Nobody else — including us — can read a byte.
✉️
Mail that keeps its secrets
One sealed identity for chat, calls and mail — the same handle, nothing readable left behind.
Open Mail →