welcome to haku.cx
Haku.cx is a simple privacy focused email provider and is run by a small team of developers in Netherlands on a VPS. There is no big company in the middle. We chose the name haku because it stands for white/pure in Japanese which also matches the theme of our site.
Haku.cx is available on Tor. Tor uses layered encryption across three relays to anonymize connections, so nobody can see where you are connecting from. Support for the I2P network is coming soon.
Haku.cx is completely open source. That means our site is completely public, so anyone can inspect the code for themselves. You dont have to take our word for it, you can go trough every line and verify how everything works. This also proves that the encryption we use is actually real and that we dont steal or collect your data.
encryption
Haku.cx encrypts your email with cryptography, a mathematical process that turns readable text into unreadable data that can only be unlocked with the right key. Your keys are created in your browser and locked with your password. The server never sees them, so we cannot read your stored mail. If someone would get access to the database, they would find only encrypted data. Your mail and your account stay locked, because the key that unlocks them is locked with your password, and your password never reaches the server. The only way in is to guess and crack a password.
Mail between Haku users is fully end to end encrypted. It is encrypted in the sender's browser and only ever decrypted in the recipient's browser. Mail arriving from outside providers (like Gmail) reaches our server unencrypted.
Each account has an RSA 2048 keypair generated in your browser. Your private key is encrypted with your password (PBKDF2 SHA 256, 310,000 iterations, AES 256 GCM) before it is stored, so the server never sees it. Every message is sealed with a fresh AES 256 GCM key, which is then wrapped to your RSA public key. A new key is made for every single message, so even two identical emails are encrypted differently and nothing can be matched by looking at the encrypted data.
We do not only encrypt the content of your mail. The sender address of every message is also locked to your key, so the database holds no record of who talks to whom. To still filter spam and blocked senders, the server keeps only a one way fingerprint of an address, never the address itself. Your contacts are handled the same way. Your whole address book is locked to your key, and the server stores nothing but encrypted data.
No third party sits between you and our server. There is no content delivery network and no proxy in front of the site, so no outside company ever sees your traffic, your password, your login or your encrypted keys on the way to us. Every page, including this one, is served straight from our own machine. The only outside service involved is DNS, the public address book that turns haku.cx into a server address, and it only ever sees a lookup, never you or your data.
We keep no logs. The server does not record your IP address, there is no login history and no record of when or from where you connect. Nothing about your activity is written down.
Haku.cx also runs on Tor. On that network there is no certificate authority and no exposed server address. Payments work the same way, upgrades are paid in Bitcoin through CryptAPI with no KYC, and once a payment is done the link between your account and the payment address is erased.
pricing
Free
$0
150 mb storage
send 10 emails per day
receive unlimited
no email aliases
free forever
Paid
$10
- 10 gb storage
- send unlimited
- receive unlimited
10 email aliases
pay with bitcoin
The free plan includes 150 MB of storage and allows you to send up to 10 emails per day. You can receive unlimited emails, and both free and paid accounts include the same level of encryption and security. Your free account never expires. If you run out of storage, simply delete old emails to free up space.
The paid plan includes 10 GB of storage with unlimited sending and receiving of emails, and up to 10 aliases. An alias is an extra address that lands in the same inbox, so you can give a different address to every site you sign up to. If one of them ever starts getting spam you delete just that address and your real one stays private. Once you purchase a paid email address, it is yours forever. There are no recurring subscription fees.
Haku.cx uses CryptAPI to process payments, allowing you to pay without KYC. We currently accept Bitcoin (BTC) as our only payment method.
login
create account
© 2026 haku.cx
