Hushmail

Overview

Founded in 1999 and headquartered in Vancouver, Canada, Hushmail is one of the earliest encrypted email providers to serve the general public. It offers built-in OpenPGP end-to-end encryption that works transparently—no manual key management required. Hushmail's product line covers personal encrypted email, custom domain business email, and HIPAA-compliant plans that include a Business Associate Agreement (BAA). It maintains a loyal user base among privacy-conscious individuals and small-to-medium healthcare practices in North America.

Key Strengths

• Built-in OpenPGP Encryption: Emails are automatically encrypted with the recipient's public key before sending. Recipients decrypt messages through Hushmail's web interface or mobile apps—no certificates or plugins required.
• HIPAA-Compliant Plans: Hushmail offers signed BAAs and audit-log features specifically designed for healthcare providers handling electronic protected health information (ePHI). This is a key differentiator from ProtonMail and other consumer-focused encrypted email services.
• Custom Domain Support: Both personal and business plans allow users to bring their own domain ([email protected]), suitable for freelancers, law firms, and small medical practices.
• Cross-Platform Access: Webmail, iOS, and Android apps, plus standard IMAP support for integration with third-party email clients.

Product Ecosystem

• Encrypted Email Delivery: Emails sent within the Hushmail system are automatically encrypted. Messages to non-Hushmail recipients are delivered as secure web links accessible via a password.
• Custom Domain Email: Bring your own domain, create branded mailbox accounts with forwarding, aliases, and auto-responders.
• HIPAA Compliance Tools: Audit logs, access controls, mandatory encryption, and BAA support for regulatory compliance.
• Spam Filtering: Built-in SpamAssassin engine with customizable whitelist/blacklist rules.
• Secure Web Forms: Create encrypted contact forms—submissions are encrypted and forwarded to your mailbox. Ideal for client intake on law firm or clinic websites.

Limitations

• Slow Innovation: Feature updates lag significantly behind ProtonMail and Tutanota. The interface has aged, and modern collaboration features (calendar, cloud storage) are missing.
• Limited Storage: The base personal plan offers only 10GB. Business plans max out at 25GB—insufficient for heavy archival or attachment-heavy workflows.
• Single Data Center: All servers are in Canada. Users outside North America experience higher latency, and data is subject to Canadian jurisdiction.
• Restricted Free Trial: The free trial is heavily limited. A full feature evaluation effectively requires a paid subscription.

Use Cases

• Privacy-Sensitive Personal Communication (★★★★☆): End-to-end encrypted email for journalists, lawyers, and activists who require secure correspondence.
• North American Small Healthcare Practices (★★★★★): HIPAA-compliant plans with BAA make Hushmail a cost-effective choice for small clinics and solo practitioners.
• Branded Encrypted Business Email (★★★☆☆): Custom domain plus encryption meets professional image and privacy needs for small businesses.
• High-Volume Team Collaboration (★★☆☆☆): Limited storage and lack of modern collaboration tools make it unsuitable for teams needing large archives or shared workspaces.

Pricing

All plans include Webmail and mobile client access.

FAQ

How does Hushmail encryption work?
Hushmail uses OpenPGP public-key encryption. Messages within Hushmail are automatically encrypted. For external recipients, a secure link notification is sent—the recipient verifies via password to read the encrypted message.

Is Hushmail suitable for users outside North America?
Yes, but servers are Canada-based. International users may experience higher latency, and delivery reliability depends on cross-border network conditions.

How does Hushmail compare to ProtonMail?
Hushmail's advantage is its HIPAA-compliant plans and longer market history. ProtonMail leads in innovation speed, storage capacity, and free-tier capabilities.