Everything worth knowing before you pay.

A mailbox at the address you choose on the inbox.my domain — [email protected]. It includes zero-knowledge encrypted storage, 50 GB shared between mail and files, unlimited aliases, IMAP and SMTP access and webmail. You are buying the mailbox and the exclusive right to that address for the term you pay for.

Standard addresses are $99 per year or $599 once for a lifetime licence with no renewals. Four-character names and single dictionary words are Premium tier; three characters and shorter are Signature tier. Both are quoted individually and always before you pay anything. Full pricing →

Because a card number is an identity document — it carries your legal name, your billing address and a bank's permanent record of the transaction. Accepting cards would quietly undo the one thing this product is for. We take Bitcoin, Monero, Ethereum, Litecoin and major USD stablecoins through portal.owrbit.com.

No. All sales are final, with no window and no partial credit. An email address is a one-of-a-kind item: the moment it is assigned to you it is withdrawn from sale for every other buyer and cannot be returned to stock. Confirm the spelling in the checker and ask anything you are unsure about first. Full policy →

It breaks even in the seventh year — six years of annual is $594 against $599 once. Past that, lifetime is cheaper every year and immune to any future price rise. Under six years, annual is the better deal. If you are unsure, take annual; you can convert later and we credit the unused remainder.

The invoice locks a rate for a fixed window, normally 15 minutes. Pay inside it and the amount stands. If it lapses the portal issues a fresh invoice at the current rate. An underpaid invoice is held rather than lost — you can top it up.

No, and for the same reason there are no refunds: the item is a unique address that has to leave the market the instant it is issued. What we offer instead is the technical detail published in full on the security and deliverability pages, an honest list of cases where a competitor is the better buy, and an answer to any question you send before you pay.

Two to thirty characters: a–z, 0–9, and the separators . - _. It must start and end with a letter or number and cannot contain two separators in a row. jordan.wells and j_wells are valid; .jordan and jordan..wells are not.

Not on these plans. The value here is the @inbox.my domain — short, unmistakably an inbox, and carrying sending reputation we manage centrally. Custom-domain hosting is a different product with a different deliverability story and different economics.

Ask us anyway. Some short names are held back rather than sold and can be released on request. If it is genuinely in use we will say so plainly and suggest close alternatives that are still clean — no waiting list, no auction, no artificial scarcity theatre. Name tiers →

Lifetime licences include one free change in the first 30 days, provided the new name is the same tier or lower and available. After that — and on annual plans — a change is a new purchase at the new name's tier price.

A lifetime licence may be transferred once to a person you nominate, and we re-issue the mailbox to them. Annual plans are not transferable. We do not run a resale marketplace and do not broker private sales between customers.

Yes. Each is a separate mailbox with its own price and its own passphrase — they are not aliases of one another. For a set of related names reserved together, tell us which ones and we will quote the group.

No. Bodies, attachments and files are encrypted in your browser with a key derived from your passphrase using Argon2id. The server stores ciphertext and verifiers only — never anything that could decrypt them. The unavoidable consequence is that we cannot reset a forgotten passphrase. The full architecture →

No. No phone verification, no government ID, no KYC, no selfie. You provide one contact address to receive your credentials and recovery notice, and that can be any mailbox you already control. Nothing else about you is collected or verified.

The mail becomes permanently unreadable, including to us. There is no master key and no escrow — either would mean we could decrypt your mailbox and therefore could be compelled to. Recovery wipes the mailbox and provisions a fresh keyspace so you keep the address. Write the passphrase down and store it somewhere physical, today.

Only if you have imported that person's PGP public key. Without one it is TLS-encrypted in transit and then sits readable on their provider's servers, because their provider holds their keys. No email service can change this. Any provider implying otherwise is describing a link to a web page on its own servers, which is a different thing entirely.

What we hold, because that is what the law requires. What we hold is ciphertext, key wrappers nobody can unwrap without your passphrase, and metadata such as timestamps and message sizes. The architecture is the protection — not a promise about how we would behave under pressure, which would be worth nothing.

Not yet, and we will keep saying so until it has. Treat every unaudited security claim — ours included — with appropriate scepticism. What we offer today is a precise, checkable description of the design so you can evaluate it on its merits rather than on our word. If a published audit is a hard requirement for you, buy from someone who has one.

Destroys that object's wrapped data key, then drops the ciphertext. Because every object has its own key, destroying the key makes the remaining bytes unreadable even if a copy survives in a backup or on an unoverwritten disk block. That is crypto-shredding — and it means there is no undelete.

We run aligned SPF, DKIM and DMARC at p=reject on dedicated, reputation-monitored sending ranges with an automatic outbound abuse gate — the signals receiving providers actually score. But no provider can guarantee placement: the receiving server decides, weighing your content, volume and recipient engagement alongside our infrastructure. The full honest version →

Filtering happens before encryption. Inbound mail is scored by Rspamd at the gateway, in memory, at the moment it arrives — blocklists, SPF and DKIM results, Bayesian analysis, URL reputation. Only then is it sealed to your key and written to disk. Nothing scans ciphertext at rest, because nothing can.

No. inbox.my is a personal mailbox. Bulk sending, cold outreach, marketing campaigns and automated blasts are grounds for immediate suspension without refund, enforced automatically. One bulk sender degrades deliverability for every other customer on the domain — the restriction is precisely what makes the domain worth paying for. Acceptable use →

Ask them to check spam and mark it "not spam", then add you to their contacts — that one action changes filtering for every future message. If a specific domain rejects our mail consistently, send us the bounce. Full SMTP responses are how real routing problems get found and fixed.

Yes — standard IMAP and SMTP over TLS, desktop and mobile, no bridge app to install. One caveat: mail decrypted into a desktop client is stored by that client under its own rules. The zero-knowledge guarantee covers what we hold, not what your laptop caches.

Two kinds, both unlimited. Tagged aliases like [email protected] exist the moment you use them. Opaque aliases are random strings revealing nothing about your real address. Both deliver to your one mailbox, both can be disabled individually, and you can send as either. Mail to a disabled alias is rejected with a permanent SMTP failure so the sender knows.

Usually under ten minutes. The slowest step is crypto confirmation, which depends on the network and the confirmation threshold for the coin you used. Once the invoice settles the mailbox is provisioned immediately and you set your passphrase in the browser.

Yes, over IMAP from any provider that supports it. Everything imported is encrypted on arrival, so a decade of archived mail takes real time — a large migration is not a thirty-second operation. Tell support before you start and we will make sure it completes cleanly.

Not a dedicated one today. The webmail works on mobile browsers, and any IMAP client — Apple Mail, Gmail's app, K-9, FairEmail — connects over standard protocols. We would rather ship no app than a bad one that leaks decrypted mail into a cache we do not control.

50 GB, shared between mail and encrypted files. Individual message size follows normal SMTP conventions — in practice most receiving servers reject anything over about 25 MB regardless of what we allow, so large files are better sent as an encrypted link.

An annual mailbox that is not renewed is suspended on the expiry date — mail stops being accepted, but nothing is destroyed. After a 30-day grace period the data is crypto-shredded and the address returns to the available pool. Lifetime licences never expire and are never released for non-payment.

Yes — for bulk sending, phishing, malware distribution, or using the mailbox to target or harass others. Suspension for abuse carries no refund, by design. Everything else on the platform depends on the domain staying clean. Acceptable use policy →

Entirely, and deliberately boring about it. Encrypted email is legal, paying with cryptocurrency is legal, and choosing not to hand a company your phone number is legal. What is prohibited here is what is prohibited anywhere: fraud, phishing, malware and harassment — and those get you suspended faster than at a provider that has to manually review a report first.

inbox.my is operated as an Owrbit property, and billing is handled through portal.owrbit.com. Jurisdiction and the governing-law clause are set out in the terms of service. Worth reading before you buy — for us as for any provider you are trusting with your mail.

Through the client portal once you have an account, or from the contact page before you buy. Pre-sales questions get answered whether or not you end up purchasing — given there are no refunds, we would rather you asked twice.