A name worth having
Every good handle on the free providers went in 2008. On inbox.my the short, clean names are still here — [email protected], not ray.mitchell.1987@…. The domain reads as an inbox, which is the point.
Addresses available now
Your name.
Your name.
Not your name47.
A short, premium email address on @inbox.my — encrypted end to end, scrubbed of spam, and delivered from monitored sending infrastructure so your mail lands in the inbox*. No phone number. No ID. No KYC.
Claim your @inbox.my address
Type the name you want. We check format, reserved words and price tier instantly.
Try one:
atlas
nova
ray
jordan.wells
2–30 characters · a–z 0–9 . _ -
Final availability confirmed at checkout
AES-256-GCM envelope encryption
SPF · DKIM · DMARC aligned
50 GB encrypted storage
IMAP · SMTP · Webmail
Why a premium address
Four things a free mailbox will never give you
Free email costs nothing and shows it — in the name you get, in what is scanned, and in where your mail lands.
Encrypted so we can't read it
Your passphrase derives a key that never leaves your device. Bodies, attachments and files are sealed before upload — the server holds ciphertext and verifiers, nothing else. Not a policy. An architecture.
Spam stopped at the door
Inbound mail is scored by Rspamd at the gateway — before it is encrypted at rest — so junk never reaches your mailbox. No newsletter you didn't ask for, no scanning of what survives.
Mail that actually arrives
Dedicated, reputation-monitored sending ranges with aligned SPF, DKIM and DMARC, plus an outbound abuse gate that suspends spammers automatically. Shared free-tier IPs give you none of that.
50 GBEncrypted mail & file storage
0Plaintext bytes stored server-side
<10 minFrom payment to first message
$599Once — then never again
Zero-knowledge architecture
The server never sees a readable byte
Most "secure email" means the provider encrypts your mail with a key the provider also holds. That protects you from a stolen hard disk and from nothing else. inbox.my derives your master key from your passphrase in your browser, wraps a unique data key for every message and file, and ships only the sealed envelope.
- Argon2id key derivation — passphrase to master key, on your device, never transmitted.
- Per-object data keys — every message and file gets its own AES-256-GCM key, wrapped by yours.
- Crypto-shredding delete — destroying the wrapped key makes the ciphertext permanently unreadable.
- PGP for outsiders — import a contact's public key and mail to them is end-to-end too.
// captured from the browser, verbatim
{
"to": "8f2c…a91d", // hashed recipient
"subject": "kR9x2Lm…Qz7", // ciphertext
"body": "7Hn4pWc…dV2", // ciphertext
"wrapped_key": "Ae1…8Kd",
"alg": "AES-256-GCM",
"kdf": "argon2id"
}
✓ stored ciphertext, verifiers, size, timestamp
✕ absent subject, body, attachments, passphrase
✕ absent any key that could decrypt the above
Deliverability
Sent from infrastructure that receivers trust
Whether your mail is filed under Primary or Spam is decided by the receiving server, using signals you mostly cannot see. We control the ones that can be controlled, and we control them tightly — because a domain is only as good as the worst sender on it.
- Aligned SPF, DKIM and DMARC with a
p=rejectpolicy on the domain. - Dedicated sending ranges, checked against major blocklists on a schedule.
- Automatic outbound abuse gate — a mailbox that starts spamming is suspended, not just rate-limited.
- Strict no-bulk policy — inbox.my is a personal mailbox, never a marketing cannon. That is why it stays clean.
* The honest version of the inbox promise
No email provider can guarantee inbox placement, and any that claims to is selling you something. Placement is decided by the receiving mail server based on our sending reputation and on your content, your sending volume and whether recipients engage. We are responsible for the first. Read exactly what we do and don't control →
Authentication-Results: mx.receiver.example;
spf=pass (domain of inbox.my designates
sender IP as permitted sender)
dkim=pass [email protected]
header.s=mail header.b=Jd8Kx2…
dmarc=pass (p=REJECT sp=REJECT)
header.from=inbox.my
X-Spam-Score: -2.1 (threshold 5.0)
TLS: TLSv1.3 / TLS_AES_256_GCM_SHA384
MTA-STS: enforce DANE: verified
→ filed: Inbox
Premium names
Short names are finite. That's the whole business.
There are only 17,576 three-letter combinations in the Latin alphabet and exactly one of each. Pricing follows scarcity.
Standard
$99/yr · $599 life
Five characters and up, first-name.last-name, anything not on the short lists.
jordan.wells
halcyon
mkravitz
Premium
Quoted
Four-character names and single dictionary words — the ones people can say out loud once and remember.
nova
atlas
ember
Signature
Private sale
Three characters and shorter. Released individually, never in bulk. Enquire and we will quote.
ray
oak
ion
How it works
Four steps, roughly ten minutes
No sales call, no onboarding sequence, no "book a demo".
01
Check the name
Type it into the checker above. You get format validation and the price tier immediately.
02
Pay in crypto
Checkout hands you to our portal at portal.owrbit.com. BTC, XMR, ETH, LTC and stablecoins. No card, no name required.
03
Set your passphrase
Your vault is created in the browser. The passphrase never reaches us — which is precisely why nobody can hand your mail over.
04
Connect and send
Use the webmail, or point Apple Mail, Thunderbird, Outlook or your phone at our IMAP and SMTP servers.
Pricing
Two ways to pay. One of them is final.
Same mailbox, same encryption, same infrastructure. The only question is whether you want a renewal date.
Annual
For people who like an exit.
$99/ year
Renews yearly at the same price. Cancel by simply not renewing.
- One custom @inbox.my address
- 50 GB encrypted mail & file storage
- Unlimited aliases & catch-all rules
- IMAP, SMTP, webmail, PGP import
- Gateway spam filtering, no ad scanning
- No phone number, no ID, no KYC
- Address released 30 days after expiry
Best value · breaks even in year 7
Lifetime
For people who are done with renewal emails.
$599once
One payment. No renewals, no price rises, no expiry on the address.
- Everything in Annual, permanently
- Address never expires or returns to the pool
- Locked out of all future price increases
- Priority support queue
- Storage upgrades included as they ship
- One free address change in the first 30 days
- No phone number, no ID, no KYC
Cryptocurrency onlyBTC, XMR, ETH, LTC and major stablecoins. No cards, no PayPal, no bank transfer — at any price.
✕ No refunds, everAn address is unique. Once it is assigned it leaves the market for everyone else, so it cannot go back on the shelf.
→ Paid at portal.owrbit.comCheckout, invoices and renewals are handled in our billing portal. Prices are in USD, settled at the rate shown on the invoice.
Compare
inbox.my next to the usual options
Free mail, mainstream private mail, and a name you actually own.
| inbox.my | Free webmail | Mainstream private mail | |
|---|---|---|---|
| Short, premium address available | Yes — 3–5 characters in stock | Gone since ~2008 | Long names only |
| Provider can read your mail | No — ciphertext only | Yes, and it is scanned | At-rest only on some tiers |
| Phone number at signup | Never | Almost always | Often for paid tiers |
| Payment without identity | Crypto only | Card on file | Card, crypto sometimes |
| Ads or profiling from mail content | Impossible by design | Core business model | No |
| Lifetime option | $599 once | n/a | Subscription only |
| Dedicated monitored sending IPs | Yes | Shared, enormous pools | Shared |
| Deletion is cryptographic | Key destroyed | Flagged, retained | Varies |
| Refunds | None — all sales final | n/a | Usually 14–30 days |
Comparison reflects the common configuration of each category at the time of writing, not any single named vendor's current plan. Verify current terms with any provider before you buy — including ours. Full side-by-side comparison →
Questions
The things people ask before paying
Including the awkward ones.
What exactly am I buying?
A mailbox at the address you choose on the inbox.my domain — [email protected]. It includes zero-knowledge encrypted storage, unlimited aliases, IMAP and SMTP access and webmail. You are buying the mailbox and the exclusive right to that address for the term you pay for.
Why is it crypto only?
Because a card number is an identity document. The entire product is "we do not know who you are and cannot be made to tell" — accepting cards would put a name, a billing address and a bank's records behind every mailbox and quietly undo that. Bitcoin, Monero, Ethereum, Litecoin and major stablecoins are accepted through portal.owrbit.com.
Really no refunds?
Really. An email address is a one-of-a-kind item: the moment it is assigned to you it is withdrawn from sale for everyone else and cannot be returned to stock. That is also why the checker exists — confirm the exact spelling before you pay, and ask us anything you are unsure about first. Read the full policy →
What happens if I forget my passphrase?
You lose the mail. This is not a limitation we plan to fix — it is what "we cannot read your mailbox" actually means when you follow it to its conclusion. Recovery wipes the mailbox and reprovisions a fresh keyspace so you keep the address. Write your passphrase down and store it somewhere physical.
Can I use my own domain instead?
Not on these plans. The value here is the @inbox.my domain itself — short, clean, unmistakably an inbox, and with sending reputation we manage centrally. Custom-domain hosting is a different product with a different deliverability story.
Is this legal, and what won't you allow?
Entirely legal, and deliberately boring about it. inbox.my is a personal mailbox service. Bulk marketing, cold outreach campaigns, phishing, malware distribution and anything targeting others is grounds for immediate suspension with no refund — the outbound abuse gate enforces this automatically. Protecting the domain's reputation is the product.
Last call
The name you want is either available right now, or it isn't.
Check it, pay in crypto, and be sending encrypted mail from a name you're happy to say out loud in under ten minutes.
$99 / year or $599 for life · Crypto only · All sales final · No phone number, no KYC