We may earn affiliate commissions for the recommended products. Learn more.

SCRYPTmail review

SCRYPTmail review

Of all the web-based tools people use every day, email is possibly the least secure. Tech giants such as Google and Yahoo have been actively compromising their users’ privacy for years by selling data to third-party companies, and Google, in particular, has helped the NSA to spy on US citizens for years.

As such, people are now turning to more secure email services to prevent their data from being blindly surrendered to every Tom, Dick, and Harry. SCRYPTmail is one of those services that promise greater security for email users, so we’re going to take a look at it in our SCRYPTmail review.

What is SCRYPTmail?

SCRYPTmail is advertised as an ultra-private email service that offers end-to-end encryption. It is developed by Sergei Krutov, a data protection consultant based in Spokane, Washington.

Prior to launching SCRYPTmail in November 2014, Krutov developed or co-developed a number of programs, including Minapsys, an online group collaboration tool, and EASYWEB, a remote computer troubleshooting tool.

While Minapsys is now used by some Big Pharma companies, it is difficult to gain an accurate picture of Krutov’s industry experience. This, of course, is fairly important seeing as he seems to develop SCRYPTmail completely without any input from others.

Then there is the issue of the service’s development history. According to its website, there have been no updates since January 15, 2015—little over two months after it launched. SCRYPTmail’s latest tweet, furthermore, was posted almost two years later (December 2016).

These factors make it slightly difficult to properly trust SCRYPTmail as the privacy-friendly email service it presents itself as. Realistically, it’s unlikely one developer, working alone, can stand up to attacks from hackers, especially when he doesn’t seem to update it, ever.

Nevertheless, the aim of our SCRYPTmail review is to give the service a fair trial, so let’s take a closer look at some of its features to see how it holds up.

SCRYPTmail features

All emails sent through SCRYPTmail are protected with end-to-end encryption. This extends to attachments, which can also be encrypted. As with Gmail, these attachments can be up to 50 GB in size.

As well as this, SCRYPTmail uses two-factor authentication, which creates an extra layer of security at the access point. Users can choose to enable PIN-locks on their incoming mail, too.

One of the best features is disposable email addresses. You can have up to three of these at once, and you can keep them for as long as you wish.

This is great for avoiding spam, and especially for navigating websites that require your contact information but haven’t yet earned your trust.

Lastly, SCRYPTmail uses KeePass, a password manager that allows you to not only keep track of strong, non-reusable passwords but also to encrypt your password storage to ensure it remains totally secure.

Unfortunately, SCRYPTmail does not provide certain features that come standard in other email services. This includes custom apps for Android and iOS, even though millions of people now send emails via their mobile device.

Then there is the inability for users to switch between languages—it is only available in English. This seems like an enormous oversight, especially seeing as SCRYPTmail’s developer is not himself a native English speaker.

The most controversial feature is that SCRYPTmail is free. While everyone loves getting good things without having to pay for them, the reality is that the best software usually needs to be funded by paying customers.

How does SCRYPTmail work?

In mainstream email services, data is indeed encrypted, but it is then passed through servers—usually third-party ones—that have the ability to decrypt the contents of the email.

SCRYPTmail, on the other hand, offers end-to-end encryption in the classic sense: using a secret phrase that is then shared between the sender and the recipient only.

This secret phrase (or key) should be communicated with the other user outside of SCRYPTmail, as they will be unable to decrypt the email without it.

This negates the possibility of ‘middle-men’ attacks, such as interception, monitoring, and hacking. Users also have the ability to change their secret phrases whenever they please.

SCRYPTmail then encrypts your metadata and protects your personal inbox through AES-256-bit encryption. As a result of not having access to your shared key, even SCRYPTmail cannot view the contents of your emails.

Is SCRYPTmail secure?

AES-256-bit encryption is very secure. This cipher creates a “keychain” for your inbox that is practically impenetrable, and simply cannot be accessed through brute-force attacks. It’s so secure, in fact, that it’s used by government and financial institutions.

Even if someone physically gets hold of your device, the two-factor authentication at the login point should be enough to throw them off.

As such, we have confidence in SCRYPTmail’s ability to keep user data secure and untouchable.

Is SCRYPTmail anonymous?

SCRYPTmail allows its users to pay through Bitcoin, which makes for a more anonymous sign-up process. Users are also able to sign-up through Tor, and SCRYPTmail itself can also run on the Tor network itself.

The big worry, though, is that SCRYPTmail is based in the US, a 14 Eyes country. This means increased surveillance and the possibility of data about you traveling across borders.

This could certainly make users paranoid about using SCRYPTmail, and taking a look at the company’s warrant canary makes those fears more grounded. Right after stating, “We have had contact with law enforcement agency, but we have never released user data,” the canary states that all 8 law enforcement requests for IP and access times had been granted.

Worse yet, the word on warrant canaries is that, if one hasn’t been updated, then users should assume that the company has been served with a subpoena and its data has been compromised. The SCRYPTmail warrant canary hasn’t been updated since May 2017.

With SCRYPTmail’s encryption credentials, it is difficult to imagine precisely what information could have been claimed by the authorities. However, it doesn’t look good.


Our SCRYPTmail review finds the service in need of an update and more stringent privacy practices. The fact that there isn’t much new information about SCRYPTmail is also a bad sign. In short, we advise users to go for some of the more well-regarded names in the secure email sphere.

Leave a Reply

Your email address will not be published. Required fields are marked *

  1. name October 31, 2023 at 3:28 am

    Funny enough, I watched the video made in 2022 with top secured email servers and SCRYPTmail was one of the two that I went to search for. Oddly when I searched for it, there were no website to sign up for this email host, only this article. And now I see the comment made by Gigoachef that makes sense. Such a weird story overall.

    P.S. Big thanks to Mikaela Bray, this article has made me want to stay and explore other reading on the website, excited to read more

  2. Gigoachef December 15, 2020 at 1:09 am

    Sorry but this article has been written / updated on the 20th December 2019, when SCRYPT mail had announced it was discontinuing its service two months earlier!

    The announcement on their website, dated 26/10/2019, states:
    “No new registration could be made, due immediately
    All active trial accounts will be extended free of charge. (Logged in within last month)
    Dec 1,2019 email attachments will be discontinued. No file could be uploaded or downloaded after that date
    Jan 31,2020 Email service will be shut down.
    March 31, 2020 all databases will be deleted.”

  3. Georges Baril April 27, 2019 at 3:25 pm

    I was excited about this email service but the more I read in your review, the less excited I got. I can’t see spending money for a “secure” email account that has more holes in it than Swiss cheese. Anyone have any good alternatives they’ve used? If so, please share them.

  4. Royden Benoit April 26, 2019 at 5:37 pm

    I love SCRYPTmail because it is not only a privacy tool, but an ultimate email service that gives you exclusive features such as disposable emails, session expiration, and email tagging. Their level of encryption and user protection is unmatched. Your identity, privacy and online communication is protected from the start to finish

  5. nysakamal76 April 25, 2019 at 5:13 am

    Well, may be I will just wait and see if this company progresses further with a better security. Looking at the security system in place, I think it has pretty good ideas with regard to security. I agree that it needs more stringent privacy practices. But who knows, if it gets better, why not give it a try?

    I use hotmail and Gmail at the moment

  6. Planet9 April 18, 2019 at 8:54 pm

    Never heard of them and now I will make sure to stay away from them. No updates in such a long time on any platform is a clear sign that this is abandoned or that their owners don’t care about the service anymore.

Thanks for your opinion!
Your comment will be checked for spam and approved as soon as possible.