Mail protection for the mail you already use.

You keep your address, your provider and your mail program. A plugin adds three things ordinary e-mail cannot do.

Who really sent it

Not “the domain checks out” — this person proved they control that mailbox.

Whether it was altered

Catches the invoice fraud where a bank account number is changed in transit.

Mail your provider cannot read

Encrypted end to end, sent through your normal account.

…even to people without it

A secure link they open in their browser with a code sent to their address. No account, no software.
Early software. This works and is in daily use on a test network, but it has not had an independent security audit, there is no mobile version, and the Outlook add-in has not yet been tested on a live Microsoft 365 tenant. Read the honest limits before relying on it for anything that matters.

Get ProtectMyMail

The browser plugin for Gmail and Outlook on the web is on the ProtectMyMail website, together with what is coming next for desktop mail programs.

Go to the download page

Test builds, for ProtectMyMail testers

Direct builds for people testing ProtectMyMail before its public release. If nobody asked you to test, use the download page above.

Desktop application — works with any mail program

Outlook, Thunderbird, Apple Mail, or webmail with no plugin. No installer. It can also protect everything you send automatically.

Neither download is code-signed yet, so both systems ask you to confirm the first time. Windows: More info → Run anyway. macOS: drag ProtectMyMail to Applications, open it, then allow it under System Settings → Privacy & Security → Open Anyway — step by step.

Browser plugin — Gmail and Outlook on the web

Banners appear on your messages by themselves; two buttons appear when you write one.

Outlook add-in

Installed from a manifest rather than downloaded.

  • manifest.xml — add this URL in Outlook under Manage add-ins

Not yet verified on a live Microsoft 365 tenant. See the Outlook guide.

Guides

Short and task-shaped. For the complete picture — how it works, what each warning means, what is stored and what this deliberately does not do — read the documentation.

Getting started

Install it, create your key, and confirm your mailbox. About ten minutes.

Automatic protection

Change one setting and everything you send is protected from then on.

Reading the verdicts

What each banner means — and, more usefully, what it does not mean.

Outlook add-in

Installing it, and what is still unverified.

Honest limits

What this does not protect, and what an attacker can still do.

Full documentation

Everything this does, in plain words — no security background assumed.

How it works, briefly

When you send a message, your plugin signs a fingerprint of it with a key only you hold, and publishes that signature to the AnuuTech network. When your recipient opens it, their plugin fetches the signature, checks it, and compares it against the message actually in front of them.

If the text was altered on the way — a changed account number, a swapped link — the fingerprints differ and they are told so before they act on it.

A separate step ties an address to a key: a challenge is mailed to the mailbox and returned. Only that turns “signed” into “verified sender”. Anyone can claim any address; only someone who can read its mail can prove it.

Your keys are created on your own computer and never leave it. The network stores public records and signatures — never your messages.