🌐 Owlmail.cc - Anonymous Email ' No Logs ' No JavaScript

[SamReomo]

Exactly. We can do it very quickly and easily. Without having to provide a phone number or other details. That is often a hurdle when creating an email account. The bottom line is that it is anonymous, offering better privacy protection.

Yes, if we compare it to other e-mail providing platforms then we can see huge difference. Since it's a fully functional e-mail address it'll work everywhere without any issues whatsoever, and creating this e-mail isn't hard at all, it's even 100x better to create an e-mail at Owlmail than creating a an e-mail account at Hotmail, Gmail, and other platforms. I know with those platforms one could get access to multiple tools but if someone's intention is to get an e-mail that gives them good privacy then it's a better choice.

[Yamane_Keto]

I created a temporary email account and forgot the password. I created another one but didn't set up any backup method not even the 12-word recovery phrase. How long will my account remain active if I don't log in, and what happens if I forget the password?

[SamReomo]

I set up another account today for some work and I was able to create the account in short time once again. But, during account creation I noticed that password's minimum characters need to be at least 10 and I found a weak point as well. I was able to use my e-mail username as a password for the account and it worked.

[Rengga Jati]

Yes, if we compare it to other e-mail providing platforms then we can see huge difference. Since it's a fully functional e-mail address it'll work everywhere without any issues whatsoever, and creating this e-mail isn't hard at all, it's even 100x better to create an e-mail at Owlmail than creating a an e-mail account at Hotmail, Gmail, and other platforms. I know with those platforms one could get access to multiple tools but if someone's intention is to get an e-mail that gives them good privacy then it's a better choice.

Yes, that's it.
If there are any issues with certain features, it’s likely due to the limitations explained :

This seems to be a limitation of their web-based mail client.

However, you can use your email account through IMAP/SMTP with any mail client, which won't have this limitation. For example, through Thunderbird

Code:

IMAP Server
owlmail.cc:993 (TLS)

SMTP Server
owlmail.cc:465 (TLS)

So, we can implement the tips that were suggested. This really works very well. 

[Yamane_Keto]

Is this normal? I tried to access my account and got this error, and the browser is giving warnings that it is not secure.

[TryNinja]

-img-
Is this normal? I tried to access my account and got this error, and the browser is giving warnings that it is not secure.

It seems like the SSL certificate expired. I'll try to ping someone to let them know it needs to be renewed.

[Yamane_Keto]

-img-
Is this normal? I tried to access my account and got this error, and the browser is giving warnings that it is not secure.

It seems like the SSL certificate expired. I'll try to ping someone to let them know it needs to be renewed.

It is working well again now. Yesterday, .cc link was working with many random errors, and the Tor version was not functioning.

[TryNinja]

It is working well again now. Yesterday, .cc link was working with many random errors, and the Tor version was not functioning.

Yep, I can confirm it's working fine.

SSL certificate renewed until January 2027.

I have no idea why Let's Encrypt only lets you create certificates that last 90 days. But I have a solution for BitList for it to keep renewing automatically.

[joker_josue]

I have no idea why Let's Encrypt only lets you create certificates that last 90 days. But I have a solution for BitList for it to keep renewing automatically.

It's usually possible to schedule the renewal. But it depends on the software used for management.

The 90-day limit is due to security reasons, ensuring that a stolen key or incorrectly assigned certificate is not used for too long. Many certification companies already impose short time limits for the same reasons.

[SamReomo]

I have created multiple accounts at Owlmail.cc using Tor and faced no issue at all. It is my main choice these days when I need an e-mail address to register at platforms where I don't want to share my original e-mail address. It has helped me save hours and because of it I was able to register my accounts at various sites without any issues.

In past I used to create such accounts with disposable mail addresses but these days those disposable mail addresses are mostly banned at most platforms and only Owlmail.cc is the platform where one can create a new e-mail account within a minute and that e-mail address does the job very well.

[icopress]

Yep, I can confirm it's working fine.

SSL certificate renewed until January 2027.

I have no idea why Let's Encrypt only lets you create certificates that last 90 days. But I have a solution for BitList for it to keep renewing automatically.

Yes, when you messaged me on Telegram about the problem, I contacted them right away, and they sorted it out quickly.

I might speak to them again and mention that I have a very clever and resourceful acquaintance who could help them with automatic certificate renewals. 

[examplens]

Yep, I can confirm it's working fine.

SSL certificate renewed until January 2027.

I have no idea why Let's Encrypt only lets you create certificates that last 90 days. But I have a solution for BitList for it to keep renewing automatically.

Yes, when you messaged me on Telegram about the problem, I contacted them right away, and they sorted it out quickly.

I might speak to them again and mention that I have a very clever and resourceful acquaintance who could help them with automatic certificate renewals. 

The hosting service where I have a server has automatic certificate renewal, after the first setup I can forget about it.  I am always surprised when I see that someone's certificate has expired due to non-renewal, even if it is free.

[nobswebdev]

Do you support e2e encryption and zero knowledge architecture for user data?

[TryNinja]

Do you support e2e encryption and zero knowledge architecture for user data?

Check their FAQ on the main page, point "How can you trust us?"

The honest limit

No email host can hand you a mathematical proof that staff never read your messages. We don’t process mail for ad targeting, profiling, or “AI” training, but the architecture is the same almost everywhere: messages typically arrive in plaintext, get filtered for spam, and are stored. A provider that “encrypts your mailbox on disk” often still had plaintext at delivery time, unless you used end-to-end encryption or brought your own key model we never see.

We’re also not beyond legal pressure or a serious break-in. A warrant canary and a light operational footprint don’t make a nation-state adversary go away—but they can make the service easier to run honestly and to explain to users. Read ours on the canary page and the privacy policy for what we try not to collect.

[nobswebdev]

No email host can hand you a mathematical proof that staff never read your messages.

That's partially true, because messages typically arrive in plaintext, so someone with access to the server can potentially read them. In Proton mail for example emails between 2 Proton mails are e2e encrypted and there is no way for them to decrypt communication. Emails sent to Proton mail from other providers that don't support e2e encryption e.g. Gmail arrive in plaintext, then are encrypted with my keys. So it is not true zero knowledge e2e encryption, but after message in encrypted on their server there is no way for them to decrypt it. Still there is short window to read message before it is securely encrypted, but that's the real limitation of email. Given service jurisdiction and reputation in privacy community that's usually acceptable. However there are other limitations of email and I think we should slowly forget about e-mail and move our conversations to e2e encrypted messengers like SimpleX.

[Rengga Jati]

Just to show how simple it is to connect to Owlmail through IMAP...

Using thunderbird:



Result:

Successfully set up using this.
All features are available. It is completely different from just using a standard browser.

SSL certificate renewed until January 2027.

Yes, it's working.

I set up another account today for some work and I was able to create the account in short time once again. But, during account creation I noticed that password's minimum characters need to be at least 10 and I found a weak point as well. I was able to use my e-mail username as a password for the account and it worked.

Exactly. This really helps in creating many more email addresses quickly. Plus, there's no need to provide a phone number or a home base location. I'm going to try it out on my phone to see what the user experience is like.

[TryNinja]

No email host can hand you a mathematical proof that staff never read your messages.

That's partially true, because messages typically arrive in plaintext, so someone with access to the server can potentially read them. In Proton mail for example emails between 2 Proton mails are e2e encrypted and there is no way for them to decrypt communication. Emails sent to Proton mail from other providers that don't support e2e encryption e.g. Gmail arrive in plaintext, then are encrypted with my keys. So it is not true zero knowledge e2e encryption, but after message in encrypted on their server there is no way for them to decrypt it. Still there is short window to read message before it is securely encrypted, but that's the real limitation of email. Given service jurisdiction and reputation in privacy community that's usually acceptable. However there are other limitations of email and I think we should slowly forget about e-mail and move our conversations to e2e encrypted messengers like SimpleX.

Right.

At the end of the day, you should encrypt your mail. The problem is nobody elses does that, for the most part. Good luck registering in 99% of the internet and preventing your mail provider from being able to *technically* read everything.

[UserU]

Seems that only the owlmail.cc domain is now available during registering, I wonder what happened to the rest?

[Yamane_Keto]

That's partially true, because messages typically arrive in plaintext, so someone with access to the server can potentially read them. In Proton mail for example emails between 2 Proton mails are e2e encrypted and there is no way for them to decrypt communication. Emails sent to Proton mail from other providers that don't support e2e encryption e.g. Gmail arrive in plaintext, then are encrypted with my keys.

implement end-to-end encryption by yourself is better. do not trust any service, regardless of what they claim. Owlmail is fine for obtaining a temporary email address but it is not suitable for high-level privacy.

Seems that only the owlmail.cc domain is now available during registering, I wonder what happened to the rest?

They only have one domain and Tor.

[UserU]

They only have one domain and Tor.

Oh, I was referring to this one

Interesting to see how many domains are available after the @. Could get somewhat creative with the emails