Background and founding

AtomicMail Systems OÜ was established in 2024 in Tallinn, Estonia, by a group of technologists and privacy advocates with backgrounds in cybersecurity and software development.^[2]

The founding team's stated motivation was to create an email platform that combined strong encryption with an intuitive user experience, making privacy accessible to non-technical users. The project began development in 2024, initially as an alpha-stage product available to early testers.

Launch and early development

In 2025 Atomic Mail was publicly launched as a beta product. The launch announcement described it as a next-generation encrypted email platform designed to address concerns over digital privacy and cybersecurity threats.^[3] At launch, the service offered its web-based client with end-to-end encryption, zero-access architecture, email aliases, and the BIP39 seed phrase recovery system.

The launch received coverage from Yahoo Finance, which described the platform as combining encryption technology with user-friendly design, and TrendHunter, which noted its emphasis on making encryption accessible to a broader audience.^[4][5]

In the months following launch, the company released a mobile web version of the service, followed by standalone native applications for iOS, Android, Windows, and macOS. A public product roadmap for Q2–Q3 2025 was published, outlining planned features including dark mode, custom domain support, biometric login, Hide My Email functionality, and premium short aliases.^[6]

Growth and milestones

By December 2025 the company reported 1 million registered accounts and approximately 150,000 monthly active users. In its "2025 Wrapped" retrospective, the company characterized the year as a transition from early alpha to stable beta, citing improvements in reliability, speed, and feature completeness.^[7]

Key milestones in 2025 included the launch of the Atomic Mail Plus paid subscription tier,^[8] the introduction of an AI features suite, and the deployment of native applications across all major platforms. The company also made its first public conference appearance at the function1 Conference in Dubai.

Until September 2025, Atomic Mail was funded by initial investors and stakeholders. As of early 2026, no external venture capital funding rounds have been publicly disclosed.^[9]

Overview

Atomic Mail employs a multi-layered encryption architecture, described in a publicly available security whitepaper (Version 1.0, October 2024). The system uses client-side encryption processes and a zero-knowledge infrastructure for encrypted emails, meaning that encryption and decryption occur exclusively on user devices and Atomic Mail's servers cannot access message content or private keys.^[10]

Data in transit is protected using TLS 1.3. Data at rest on Atomic Mail's servers, including email metadata and attachments, is encrypted using AES-256.

Atomic Encryption protocol

Emails sent between Atomic Mail users are encrypted end-to-end using a proprietary protocol called "Atomic Encryption," based on the Elliptic Curve Integrated Encryption Scheme (ECIES). The process operates as follows:^[10]

When a sender composes an email, a random secret key is generated locally on their device. This key is used to encrypt the email content using AES-256. For each recipient, the secret key is then encrypted using the recipient's public key via ECIES (with public keys generated according to the Ethereum 0x standard). The fully encrypted email, along with the individually encrypted secret keys, is transmitted via SMTP. The recipient uses their private key to decrypt the secret key, which is then used to decrypt the email content.

Password-encrypted emails

For external recipients who do not use Atomic Mail, users can select "Password Encryption." The email content is encrypted locally on the sender's device using AES-256-CBC, with the encryption key derived from a user-set password processed through the scrypt key derivation function. The encrypted content is stored in Atomic Mail's Decryption Service, and the recipient receives a link via SMTP. Upon entering the shared password, the content is decrypted locally on the recipient's device. Senders can also set expiration dates and password hints.^[10]

Zero-access encryption

Atomic Mail operates under a zero-knowledge policy: the service stores only encrypted data and cannot access the contents of user emails, even if compelled by legal process. Decryption keys are not stored on Atomic Mail's servers; they reside exclusively on user devices.^[11]

Key management and account recovery

During registration, the following process occurs: the user sets a password, which is processed using scrypt to generate a cryptographic key. The user's BIP39-compliant seed phrase is encrypted using AES-256-CBC with this derived key. The password itself is hashed using SHA-256 before being stored. Neither the plaintext password nor the unencrypted seed phrase is ever transmitted to or stored on Atomic Mail's servers.

Upon login, the user's password is hashed and verified against the stored hash. If successful, the encrypted seed phrase is sent to the user's device and decrypted locally. The service also supports two-factor authentication (2FA) via one-time codes.

Attachment encryption

File attachments are encrypted using AES-256-CBC before being transmitted to Atomic Mail's servers.

Email aliases

All accounts include up to 10 free email aliases under the atomicmail.io domain. Aliases function as full-featured email addresses that can both send and receive messages with the same encryption capabilities as the primary address. The Atomic Mail Plus plan provides up to 15 aliases.

Premium short aliases (1–4 characters in length) are available as a paid feature, starting at $5/month.

Hide My Email

The Hide My Email feature, available to Atomic Mail Plus subscribers, allows users to generate unique, randomly created email addresses on demand for use with online services. These addresses are receive-only and can be disabled or deleted at any time. Users can create up to 150 Hide My Email addresses.

AI email tools

Atomic Mail Plus includes a suite of AI-powered tools: an email writing assistant and rewriter ("Help Me Write" and "Help Me Answer"), inbox summarization, grammar and tone correction, email translation, text-to-speech for listening to emails, voice-to-text for dictating emails, and an AI security assistant that scans drafts for sensitive content and recommends encryption.

The company states that its AI features cannot access end-to-end encrypted content and that user emails are not used to train AI models.

Spam and phishing protection

The platform includes AI-powered spam and phishing filtering. The company describes its filter as operating without scanning message content for advertising purposes.

Anonymous registration

Account creation requires only a display name and chosen username. No phone number, secondary email address, or other personally identifiable information is collected during sign-up.^[12]

Cross-platform availability

Atomic Mail is accessible via web browser and through standalone native applications for iOS, Android, Windows, and macOS. The apps support biometric login via fingerprint and facial recognition. Synchronization is maintained across all platforms.^[13]

Jurisdiction and data requests

As a company incorporated in Estonia, Atomic Mail operates under Estonian and European Union data protection law. According to its Terms of Service, Atomic Mail will only disclose user data in response to a valid court order issued by Estonian judicial authorities.^[15]

The company states that it does not collect personal data, does not perform user profiling, and will not cooperate with any voluntary surveillance programs. Due to its zero-access encryption model, Atomic Mail maintains that it is technically unable to access the contents of encrypted emails even if compelled by court order.

GDPR compliance

Atomic Mail is GDPR-compliant, allowing users to delete their accounts, export their data, and benefiting from the minimization of personal data collection. The security whitepaper and privacy policy are publicly available on the company's website.^[16]