ghostBox

A tiny, privacy first, one-time payment, free (as in free speech) email service provider.

Privacy first

For your privacy, this server is encrypted, doesn't keep logs and isn't automatically backed up, but this doesn't mean you shouldn't use a VPN and take precautions.

Email E2EE is a myth

Emails, by design, have to be received unencrypted, then encrypted when they're already on the server, but most private email providers make it deliberately hard for you to find that out.

I don't: ghostBox emails aren't encrypted. The server disk is, but that's about it.

Rules and freedom of speech

Spamming, spreading malware or CSAM will get your account deleted immediately, but no account will ever be closed due to "controversial" content or speech.

I will only share data with third parties if forced by a court of law with jurisdiction over the server.

Register a new account

You can check if your desired alias is available by sending an email to postmaster [@] ghostbox.cc. ghostBox also works with custom domains!

If it is available, you can pay a €5 account opening fee. This is to ensure that our IPs stay SPAM-free, and to reserve 256 MiB of storage for you.

ghostBox accepts inbound emails from any server and domain, so you can also use a temporary email to request an account.

Login to an existing account

You can login using Roundcube or any other email client, such as Thunderbird, automatically.

If it doesn't log you it automatically, you can setup POP3, IMAP, SMTP with standard ports and the hostname "mail.ghostbox.cc" manually.

Recover password

I'm sorry, but I can't recover lost passwords.

I can't verify that you're the account owner, except if we agreed on a random password reset token beforehand. If you want to talk about this, contact me.

Delete account

Send me a GDPR removal request from your ghostBox account and I will close down your account ASAP.

Latest news & updates

October 23, 2024 · Transferring domain over to new registrar. Also, added status monitoring from 4 different independent providers (please note: Statuscake's 7 day uptime doesn't reflect real uptime for now).

September 2, 2024 · Now with IPv6!

August 23, 2024 · Now with DNSSEC!

August 22, 2024 · A phishing email claiming to be a password update notification from ghostBox has been circulating. This message is NOT a legitimate notification from ghostBox. Official ghostBox emails are only sent from this server, from the postmaster's address.

August 17, 2024 · First month of ghostBox running on the new server is flying by. Everything's working as expected.

July 19, 2024 · ghostBox encountered a lot of downtime, but it should be fixed now. I changed database.

July 16, 2024 · Users weren't able to receive or send any emails for a few days. Once I noticed, I immediately restored the first (working) backup. Everything works fine now.

July 12, 2024 · The new website is now online! I will use the next few days to bring back 2FA and setup IPv6 connectivity, so there may be some downtime.

July 11, 2024 · The new email server is now online! Now it's hosted with Frantech, but the old server is still online (hosted with Skhron, a fantastic VPS provider that will be my #1 choice for small projects going forward).
I sent many emails in the two months prior to this, but if you didn't backup your emails yet, you have time until July 28th, 2024. To do so, please visit the old Roundcube installation.

February 24, 2024 · ghostBox is experiencing an increase in website traffic. The EUR to XMR conversion is currently unavailable due to rate limiting. Email deliverability is not affected.

February 16, 2024 · Spamhaus has added ghostbox.cc to their database, again. Our provider, Skhron, has already experienced this and told me that listings expire automatically, and to just wait.
Update: Issue resolved.

December 28, 2023 · It looks like ghostBox can't be accessed via Mullvad when trying to connect to our IPv4. I'm trying to work this out with their NOC team. IPv6 works fine. Also, happy new year!
Update: Issue resolved.

November 27, 2023 · 2FA is now available. Please secure your accounts by going into Roundcube > Settings > 2-Factor Authentication.

November 26, 2023 · Spamhaus flagged our domain due to a "bad neighborhood". Despite changing DNS servers multiple times, Spamhaus didn't whitelist the domain. In the end, hosting with AEZA in Finland was the reason they blacklisted the domain for, not a "bad neighborhood", though their current status is clean.
Update: Spamhaus is known to unofficially blacklist ISPs they dislike. Following this I contacted Skhron, a small VPS provider that stepped in to host ghostBox in Poland, and this resolved the issue.