A ghost.

ghostBox

A tiny, privacy first, one-time payment, free (as in free speech) email service provider.

Privacy first

This server is encrypted, doesn't keep logs and isn't automatically backed up, but this doesn't mean you shouldn't use a VPN and take precautions.

Email E2EE is a myth

Emails, by design, have to be received unencrypted, then encrypted when they're already on the server, but most private email providers make it deliberately hard for you to find that out.

I don't: ghostBox emails aren't encrypted. The server disk is, but that's about it.

Rules and freedom of speech

Spamming, spreading malware or CSAM will get your account deleted immediately, but no account will ever be closed due to "controversial" speech.

I will only share data if forced by a court of law with jurisdiction over the server.

Debian 12 powered. Monero accepted here. Litecoin accepted here.

Register a new account

You can check if your desired alias is available by sending an email to postmaster [@] ghostbox.cc. ghostBox also works with custom domains!

If it is available, you can pay a €5 one-time fee. This is to ensure that our IP stays SPAM-free, and to reserve 256 MiB of storage for you, for the rest of eternity.

ghostBox accepts inbound emails from any server and domain, so you can also use a temporary email to request an account.

Login to an existing account

You can login using Roundcube or any other email client, such as Thunderbird, automatically.

If it doesn't log you it automatically, you can setup POP3, IMAP, SMTP with standard ports and the hostname "mail.ghostbox.cc" manually.

Recover password

I can't recover lost passwords as I can't verify that you're the account owner, except if we agreed on a password reset token beforehand.

Delete account

If you send me any removal request from your account mentioning it, I will treat it as a GDPR request and close down your account immediately.

Latest news & updates

January 14, 2025 · BuyVM has recently been acquired by Cloudzy. No policy changes, no IP changes, no reboot required, so I don't think ghostBox is going to move away, for now. Updates here but I think we're going to CH/NL!

December 30, 2024 · All is working as intended here. Nothing to report. Hope you've had a wonderful Christmas, and will have a happy new year!

November 13, 2024 · cock.li is "on red alert". Until more info surfaces, REFUGEES are WELCOME here.

October 23, 2024 · Transferring domain over to new registrar. Added status monitoring from 4 independent providers.

September 2, 2024 · Now with IPv6!

August 23, 2024 · Now with DNSSEC!

August 22, 2024 · A phishing email claiming to be a password update notification from ghostBox has been circulating. This message is NOT a legitimate notification from ghostBox. Official ghostBox emails are only sent from this server, from the postmaster's address.

August 17, 2024 · First month of ghostBox running on the new server and everything's working as expected.

July 16, 2024 · Users weren't able to receive or send any emails for a few days. Once I noticed, I immediately restored the first (working) backup. Everything works fine now.

July 12, 2024 · The new website is now online!

July 11, 2024 · The new email server is now online! Now hosted with Frantech. The old server was hosted with Skhron, a fantastic VPS provider that will be my #1 choice for small projects going forward.

February 24, 2024 · Removed the EUR to XMR conversion due to rate limiting from our provider.

February 16, 2024 · Spamhaus has added ghostbox.cc to their database, again. The provider ghostBox is hosted with, Skhron, has already experienced this and told me to just wait. Fixed.

December 28, 2023 · It looks like ghostBox can't be accessed via Mullvad when trying to connect to our IPv4. I'm trying to work this out with their NOC team. IPv6 works fine. Also, happy new year! Fixed.

November 27, 2023 · 2FA is now available. Please secure your accounts by going into Roundcube > Settings > 2-Factor Authentication.

November 26, 2023 · Spamhaus flagged our domain due to a "bad neighborhood". After changing DNS servers multiple times, I found out that hosting with AEZA in Finland was the reason they blacklisted the domain for, not a "bad neighborhood", though their current status is clean.
Update: Spamhaus is known to unofficially blacklist ISPs they dislike. Following this I contacted Skhron, a VPS provider that stepped in to host ghostBox in Poland, and this resolved the issue.