Features

A confidential, encrypted, private, multiplatform workspace.

Confidesk is mail, files, notes, a password vault and private chat in one place — all encrypted and accessible only by you.

Encrypted on your device
No tracking pixels
No back door, no reset
Hosted in Switzerland

Confidesk — All Inboxesend-to-end encrypted

Confidesk All Inboxes view listing unread mail grouped by mailbox

Files

On this page

Mail
Chat
Files & preview
Notes
Documents
Password vault
Secure send
Contact form
Keys
Trusted devices & blocking
Domains & mailboxes
Desktop app
iPhone app
Plans

Encrypted mailbox

Mail that arrives sealed — and stays that way.

Every message is encrypted to your key the moment it lands. Mail between Confidesk users never leaves the encrypted store; mail to the outside world is delivered normally. Organise it into your own folders, flag it in five colours, and see what's new across every inbox from one page.

All Inboxes — unread mail from every mailbox in one list; open a message or clear it without opening.
Folders, flags and drafts — your own folders, five coloured flags with a Flagged view and a one-click colour filter in every list's header, and drafts that save automatically and stay in sync across your devices.
Work in batches — hold Cmd or Ctrl and click to select several messages, Shift-click for a range, then move or delete them together.
Sender verified — signatures from other Confidesk users and PGP contacts are checked and shown on the message.
Junk and Blocked folders — automatic spam filtering plus your own encrypted block list.

Inbox

Reading mail

Safe and secure, no tracking, no remote code.

Messages open formatted inside a sealed sandbox, so no hidden code can run — and remote images stay blocked until you say otherwise, so a tracking pixel can't tell the sender whether or when you read it. A "Plain text" button strips any message down on demand, and Pro and Advanced accounts can choose to open everything as plain text instead.

Download .eml — the complete original message is always yours to take elsewhere. No lock-in.
Block sender right from the message — one address or the whole domain.

MessageSender verified

An open message in Confidesk showing the Sender verified badge, Block sender button, plain-text body and Download .eml link

Writing mail

Attach straight from your encrypted storage.

Attach from Files — pick anything from your encrypted storage, including your Notes; it's decrypted on your device and protected like any attachment.

Attach from Files

Chat

Private chats with the same guarantee as your mail.

Chat is conversation between Confidesk users. Every message is sealed separately for each person in the conversation — no shared key, nothing readable on our side. Start a one-to-one chat with a contact, or a named group.

Groups without shared secrets — someone added later sees only what's sent after they join.
Files work like everywhere else — attach from your device or from Files, open received files in the safe viewer, forward messages between chats.
You control your copies — deleting a chat removes yours only; unknown senders can be blocked within 24 hours.

Chat — Project handover

Chat view: a chat list on the left and a conversation with verified messages and read ticks on the right

Files & storage

Encrypted storage with a viewer that never touches your disk.

Upload anything. Files are encrypted on your device before they leave it and decrypted only when you open them, in your browser. Organise them into folders, rename, move, download — and preview most things in place: text and code, images, PDFs, audio, video, spreadsheets, Word documents, EPUB e-books and ZIP archives.

Safe preview — documents are cleaned and shown in a sealed, no-network frame, so a booby-trapped file can't run code, load a tracker or reach your key.
Edit in place — .md, .txt and .rtf files carry a pencil icon and open in the built-in editor.
Sorted your way — click the Filename or Size header to order the whole folder, in either direction.

Files

Preview — services-agreement.pdf

A PDF opened in Confidesk's in-app preview, decrypted in memory

Notes Pro & Advanced

Encrypted notes in Markdown, plain text or rich text.

A simple home for the things you'd otherwise keep in a notes app you don't trust. Pick a type when you create a note: Markdown with a live preview, plain text, or a visual rich-text editor. Rich notes are stored as real .rtf files, so a download opens formatted in Word, Pages, TextEdit or LibreOffice — no Confidesk needed.

Folders, exactly like Files — and under the hood a note is stored like an encrypted file: the server can't even tell which files are notes.
Write / Preview — a Markdown toolbar for bold, headings, lists, quotes, code and links.
Attach a note to a mail, a chat or a Secure send.

Notes — Thursday call — prep

A rendered Markdown note in Confidesk with headings and bullet lists, and Download and Edit buttons

Edit noteWrite · Preview

The Markdown editor for a note showing the formatting toolbar, Write/Preview toggle and Save button

Documents Pro & Advanced

Document editor

A full editor — headings, fonts, colours, lists and task lists, images with captions, page breaks, a table of contents that updates itself, find & replace with a live word count.
Export to PDF, DOCX or EPUB.

Documents

The document editor with its formatting toolbar and a formatted document

Password vault

A password manager in the open KeePass format.

Your vault is a standard .kdbx file kept in your encrypted Files — protected twice, by its own master password and by your Confidesk key on top.

Entries with title, username, password, URL, notes and custom fields — add, edit, delete, then Save.
Password generator and strength meter, with an option to skip look-alike characters.
Copy buttons that clear your clipboard automatically after about 30 seconds; filter across entries.
Auto-lock — after a few idle minutes, or when you switch away, the vault locks and drops everything from memory.

Open and edit vaults on the web; create new ones in the desktop app or any KeePass tool.

Vault — Business3 entries · decrypted only on this device

An unlocked vault listing entries with username, masked password, URL and notes, plus Show and Copy buttons

Edit entryGenerate · Very strong

Editing a vault entry: title, username, generated password with strength meter, URL, notes and custom fields

Secure send

Send something sensitive to someone who isn't on Confidesk.

Read once, then destroyed — and it expires after a time you pick, from a day up to a month, opened or not.
You share the passphrase in person, by phone or text. We never see it, so we can never read or recover the message.
Optional hint shown to the recipient; too many wrong guesses and the message locks itself.

Secure sendthe link opens once

Secure send passphrase, confirmation, optional hint and link expiry fields with the Encrypt & send button

Public contact form

Let anyone write to you encrypted — even without an account.

Turn on your contact form and you get a permanent link for your website, your social profiles, your email signature. Whoever uses it writes in their browser; the message is encrypted to your key right there and lands in your inbox marked "Via form". It never travels as ordinary email, and nobody but you can read it.

Spam protection built in — senders confirm their email with a short code before delivery, plus an anti-bot check and rate limiting.
Your intro text at the top of the form; switch it off any time.

Settings — Contact form

Settings page for the public contact form: enable toggle, require sender verification, and intro text

Keys

Key management

Your own keypair is generated in your browser at registration (Curve25519), or you bring your own; you can download it at any time and use it in standard GPG tools, independent of Confidesk.

Bring your own key — upload an existing v4 Curve25519 keypair at registration and keep your PGP identity.
Download public / private key from Settings → Keys; your private key is exported encrypted with your passphrase.
Stop storing your key on the server if you'd rather hold the only copy yourself.

Contacts

Settings — Keys

You stay in control

Trusted devices, blocked senders, and settings.

Because your key only ever lives in your browser's memory, Confidesk asks for your passphrase again after a reload. On a device that's yours and stays locked, mark it trusted and it signs you straight in — trust expires automatically after about a month, and you can revoke any device from Settings.

Blocked senders — block an address or a whole domain; blocked mail goes to a Blocked folder and is deleted after 7 days. The list itself is end-to-end encrypted.
Signature and out-of-office auto-replies Pro & Advanced; authenticator-app sign-in and a sign-in activity log under Account → Security.

Settings — Trusted devices

Trusted devices settings page explaining the trade-off, with a Trust this device button

Settings — Blocked senders

Blocked senders settings page with an address/domain selector and Block button

Advanced Advanced plan

Your own domain, several mailboxes, one key.

Run mail at you@yourcompany.com under the same account and encryption. Add a domain, publish the DNS records we generate for you — MX, SPF, DKIM and a verification record — and watch each one turn green. Once active, create mailboxes on it.

Up to 5 mailboxes per domain, each with its own sender name, signature and out-of-office — every one can send and receive.
Up to 10 aliases per domain — receive-only addresses on your own domain that land in a mailbox of your choice.
Up to 3 domains, with a "Check now" button if you don't want to wait for the daily DNS check.

Settings — Domains

Settings — Mailboxes & aliases

Settings Mailboxes page with Add a mailbox form and Aliases section

Confidesk for desktop Pro & Advanced

The same encryption, plus the things a browser can't do.

Sign in the same way and see the same mail, files, contacts and vaults. Your key is unlocked only inside the app, in your computer's memory — never written to disk, never sent to us. Available now for Apple Silicon Macs, Linux and Windows.

Mail that works offline

An encrypted copy of your mailbox lives on your computer. Read, reply and delete without a connection — it syncs the moment you're back online.

Search — where it's safe

The web app has no search, because an index would mean a decrypted copy on a borrowed machine. The desktop app already holds your mail encrypted locally, so it searches instantly.

Bring in your other mailboxes

Add Gmail, Outlook or any IMAP/POP account and read it beside your Confidesk mail — with full PGP support for signing, encrypting and verifying.

Create password vaults

A dedicated Vault section lets you create new KeePass vaults by name. They appear in your Files and open on the web too.

Quick return

Signing out keeps the local encrypted store, so signing back in is just your passphrase. "Remove this account from this device" wipes it completely.

A real file manager

The Files window: folders left, files right, list or icon view, sorted by name, size, date or type. Drag in files or whole folders — the folder tree is recreated — and open anything without the browser's preview size limits.

Documents

Your documents on the left, tabs for the open ones, the editor in the middle — and everything you had open is restored when you relaunch.

Mail

Download

Confidesk for iPhone Free, Pro & Advanced

The same Confidesk, in your pocket.

The iPhone app from the App Store carries the same encryption as everywhere else: your key is unlocked on the phone, everything is stored encrypted, and the server remains the master copy. Mail, Files, Notes, Documents, Chat, Contacts, the vault and Secure send are all there — on every plan from Free up.

Works offline

An encrypted copy of your mailbox and files lives on the phone. Read anywhere; anything you send while offline waits in a visible outbox and goes the moment you're back online.

Search your mail

Your mail is stored on the phone, so it can be searched — instantly, and without the server ever seeing a readable word.

Face ID unlock

Opt in and the app unlocks with Face ID or your passcode instead of the passphrase. It's the same trusted-device model as the browser: it expires, and you can revoke the phone remotely at any time.

Push notifications

New mail and new chat messages can notify you — and the notification carries no content, not the sender, not the subject, because the phone can't decrypt anything while locked. It's only a nudge to look.

Mail