PRIVACY FRIENDLY EMAIL SERVICE PROVIDERS

These tables show a lot of email service providers that some measure respect for privacy of their users. THIS IS NOT AT ALL COMPLETE. For now, you should probably visit one of these lists instead:

    Prxbx.com's Privacy-Conscious Email Services
    SSL-Tools.net SSL checked providers
    PrivacyTools.io Email Providers List
    The Hidden Wiki's Email Service Providers Page & clearnet version

Legend

Org. = Organization
TOS = Terms of Service
Loc. = Location - denoted by A2 (ISO) country codes, see: www.worldatlas.com/aatlas/ctycodes.htm
Inc. = Incorporation / Company
Min. = Minimum
BTC = Bitcoin - see: https://bitcoin.org
IP = Internet Protocol Address - see: https://en.wikipedia.org/wiki/IP_address
Strips sender IP? = Do they take the email sender's IP address data out of the email header? Yes = good. No = bad.
Logs login IP = Do they keep logs of the IP address from which a customer logs in to an email account?
Encrypts data? = Do they encrypt customer account data? Yes = good.
Can decrypt? = Can they decrypt customer data and read it if they want to? Yes = probably not good.
EPT = https://EmailPrivacyTester.com
Responds openly? = Did they respond openly to questions?
JS req. = JavaScript required. JavaScript is undesirable.
LE = Law Enforcement
LEO = Law Enforcement Officer
LEA = Law Enforcement Agency

Here are the email providers which offer webmail access via tor hidden services. They are roughly organized in order of most appealing to least appealing for general use in my opinion although they are not precisely organized. This list is an updated & adapted version of the original .Onion Email Providers topic. Basically organized by the most free, the most reliable uptime and the most anonymity allowing services. JavaScript being required to use email moves the provider toward the bottom of the list though other variables are kept in mind. Ranking is mostly about ease of secure and anonymous usability.

Hidden Webmail Services

    Mail2Tor.com / http://mail2tor2zyjdctd.onion | Unreliable service sometimes. Was unable to connect April - May 2016. Offers free webmail with SMTP, POP & IMAP access. Jan 2017: new front-end servers up after their front-end servers in Sweden were seized by police.
    BitMessage.ch / http://bitmailendavkbec.onion | /u/AyrA_ch | Bitmessage support build-in. Forces clearnet HTTPS with Google scripts @ signup & requires a non-disposable email adddres to email your password to you; otherwise good. Onion site was under DoS attack and down Jan-June 2016.
    Cock.li / http://wwwcocklicdexedh.onion/ | Free email with SMTP, POP & IMAP access as well as (JavaScript required) RoundCube webmail | Many alt-domains! Under certain conditions, "Registration is limited to 5 accounts per 24 hours".
    secMail.pro [NO SSL!] / http://secmailw453j7piv.onion | /u/secMail_pro | 25MB Free .onion SquirrelMail webmail
    danwin1210.me / http://tt3j2x4k5ycaa5zt.onion | Free 25MB of email space, Squirrelmail Webmail, IMAP, POP & SMTP, and XMPP via clearnet & onion.
    RiseUp.net / http://nzh3fv6jc6jskki3.onion | For horizontal collectivists only. "We have your back so long as you are not pursuing exploitative, misogynist, racist, or bigoted agendas." Some servers seized in 2012 and 2016. Riseup's statement about 2016 FBI server seizures
    BitMai.la / http://oxicsiwet42jw4h4.onion | Very low-cost, paid accounts. /u/bitmaila
    ProtonMail.com / https://protonirockerxow.onion/ | /r/protonmail - Fully encrypted email hosted in Switzerland offering free accounts and ability to add custom domains and extra features/space for BTC. Requires clearnet HTTPS signup & JavaScript! Must pay or verify via previously existing email or SMS to get an account now!
    AnonInbox.net / http://ncikv3i4qfzwy2qy.onion | Paid accounts only, responsive support. Clearnet website down since at least March 2016. - Website down but clearnet emails works.
    AnonyMail.tech [NO SSL!] / http://fuacantanj2vhfpw.onion/landing.html | /u/syst3k | Paid .onion & clearnet Webmail, IMAP & SMTP
    RayServers.com / https://nmf6cg7tiyqlhsg3.onion | Paid accounts only, responsive, agorist-friendly, competent support. Somewhat difficult to pay.
    Lelantos.org / http://lelantoss7bcnwbv.onion | paid accounts only, lacking support, bad service
    SCRYPTMail.com / http://scryptmaildniwm6.onion | JavaScript required.
    VFEMail.net / https://344c6kbnjnljjzlz.onion | Free signup(w/ads) for Webmail/IMAP/POP/SMTP or low-cost paid (in BTC) plans w/ custom domains. Multiple free domains @ https-JS-required signup (for Google CAPTCHA) but not technically required for the Horde webmail offered. .Onion access back up as of April 2017.
    Autistici.org / http://wi7qkxyrdpu5cmvr.onion | For anti-capitalist activists only.
    Systemli.org / http://h2qkxasmmqdmyiov.onion | Onion access was not working for many months, but working now. Invite code or contacting them with "good reasons" required for signup.
    TorBox / http://torbox3uiot6wchz.onion | 100% tor, no clearnet
    GuerrillaMail.com / http://grrmailb3fxpjbwm.onion | Receiving addresses only (no sending) disposable email. JavaScript required.

Defunct Hidden Webmail Services

    Sigaint.org / http://sigaintevyh2rzvw.onion | /u/sigaint / Why was Sigaint top-of-the-list for so long? Down & silent since February 6th, 2017.
    RuggedInbox.com / https://s4bysmmsnraf7eut.onion | /u/ruggedinbox & support thread - Service discontinued 18 March 2016.
    Innocence.se / http://inocncymyac2mufx.onion | Under DoS attack since Dec 2015. Unable to connect since then.
    MailTor.net / http://mailtoralnhyol5v.onion unable to connect since at least 10 Aug 2015
    Toremail.net / http://jmcz7xp2kszu6vba.onion web server down since at least 8 Aug 2015
    t0rmail.com / http://epjhlyfgxenf2q4o.onion unable to connect / account suspended since May? 2015
    OnionMail.in / http://iir4yomndw2dec7x.onion/ down since late December 2014?
    URSSMail / http://f3ljvgyyujmnfhvi.onion down since 2014?
    tormail.net / tormail.org / http://jhiwjjlqpyawmpjx.onion | Down since August 2013. Info snapshot from July 2013.

History Lesson

    The first free .onion accessible email service that was widely used was tormail.net / tormail.org during 2011-2013. Tormail was taken down by the FBI because it happened to be hosted at FreedomHosting (a free .onion web host) whose server(s) the FBI seized because FH was allowing other things that were horrible & illegal (CP) to be hosted. The FBI now has full access to all the non-PGP encrypted information that was on the tormail server when they seized it, and they have used their access to that information in multiple investigations. Since January 2016, they've been sharing that data with the DEA. Remember this when using such email services.

More?

All known services are listed. If you know of any others that should be included in this list, submit a new post about them or new link to their site. We will try to keep this list updated as we can.
Disposable Email Address Services
No Pre-Registration Required

    Discard.email / many alt domains | SSL! No JavaScript required! Some password protected accounts. Emails deleted after 30 days.
    FlashBox.5July.org | SSL! No JavaScript required! No pre-reg required! Emails "cleared" after 30 days.
    MailSac.com | SSL! JavaScript required. You can make inboxes private.
    Mailinator.com / DevNullMail.com / 100's of alt domains | SSL! JavaScript required.
    Harakirimail.com | SSL! JavaScript required. Logs kept for "a short time."
    Dispostable.com | NO SSL. No JavaScript required! Emails deleted after 72 hours.
    TempInbox.com / DingBone.com / FudgeRub.com / LookUgly.com / SmellFear.com | No SSL. No JavaScript required! No pre-reg. Emails kept for how long?
    MailGutter.com | No SSL. No JS required.
    Suggest another by messaging the moderators! Those which have no HTTPS and require JavaScript will not be listed.

Pre-Registration Required

    Moakt.com / bareed.ws / tmail.ws | SSL! No JavaScript Required! Pre-reg. required. Account deleted in 1hr but can be extended.
    GuerrillaMail.com / SharkLasers.com / GuerrillaMailBlock.com / http://grrmailb3fxpjbwm.onion | SSL. No JavaScript required! Pre-reg. required (1 click), emails deleted in 1 hour!
    GetAirMail.com / abyssmail.com / tafmail.com / pwrby.com / other alt domains | NO SSL. No JavaScript required! Pre-reg. required. "we delete our logs and messages every 24 hours."
    Suggest another by messaging the moderators! Those which have no HTTPS and require JavaScript will not be listed.

Free Email Forwarding Services

Normal Email Forwarding

    https://NotSharingMy.info | SSL. Unlimited free forwarding, custom usernames possible.
    http://www.MaskedMail.com | Site disabled. Reason: DDoS. Works with TorBox! No SSL. :(
    http://www.Jetable.org/en | No SSL. 1 hr - 1 month forwarding
    http://www.ShitMail.org / CrapMail.org | No SSL. 1 hr - 3 months forwarding.
    https://SecureMail.HideMyAss.com | SSL. Requires google.com JavaScript. 1 day - 1 year forwarding.
    http://Despammed.com | No SSL. Requires JavaScript to work?
    Suggest another by messaging the moderators!

Advanced Email Forwarding

    https://MailNull.com | SSL! USA. No JavaScript required! Unlimited free forwarding, custom usernames possible.
    https://www.33mail.com | SSL! USA. Requires JavaScript to signup.
    https://www.SpamGourmet.com | SSL! USA. Some limited advanced features.
    https://www.volto.io | SSL! UK. JavaScript required. Some advanced features.
    https://e4ward.com | SSL! USA. Not easy to get an account here.
    Suggest another by messaging the moderators!


OTHER MESSAGING SYSTEMS

There are other good (even better!) messaging systems than email which can be used for secure & private communications. For a quick overview of software that facilitates this, see EFF.org's Secure Messaging Scorecard.
Pidgin & XMPP w/ OTR Setup Guide


Using XMPP via Pidgin with OTR for free, encrypted instant messaging with open source software.
How to Install Pidgin & OTR Plugin

Pidgin is an open source instant message (IM) program that lets you log in to all of your IM accounts at once and allows their management in one program. Your friends list from ICQ, AIM, MSN, Y!M, GoogleTalk and XMPP ("Jabber") and any others can all be displayed in Pidgin. IM windows are all handled by Pidgin as well.

1. Go to https://www.pidgin.im and download the version required for your operating system. Install it. Many Linux distros will have Pidgin in the official repos.

2. Go to https://otr.cypherpunks.ca and download the Off-the-Record (OTR) encryption plugin for Pidgin. Install it. This plugin encrypts your conversations if both parties have it installed, and it ensures the messages cannot be recovered by a third party because it uses Perfect Forward Secrecy (PFS). Pidgin-otr can be found in some Linux repos.

If you are security conscious, get a plugin so that Pidgin does not store your IM account passwords in plaintext. The only two available:

    Windows Plugin: https://github.com/aebrahim/pidgin-wincred
    Linux (Gnome) Plugin: https://github.com/aebrahim/pidgin-gnome-keyring

3. Run Pidgin, and configure the OTR plugin.

In Pidgin, go to Tools > Plugins

Find the Off-the-Record Messaging plugin on the list and check the box next to it. Select this plugin and click the button at the bottom of this box that says "Configure Plugin". Make sure your Default OTR Settings have checked the box which says "Don't log OTR conversations" otherwise basically the point of having this OTR plugin with "perfect forward secrecy" is voided. Also make sure these two boxes are checked:

    [❌] Enable private messaging
    [❌] Automatically initiate private messaging

4. If you don't use a proxy, ignore this step (Step 4). If you wish to use a proxy for any of your accounts' connections, go to:

Tools > Preferences > Proxy

You want to use remote DNS if you are using a proxy, otherwise you could have DNS leaks. So check the box which does that:

    [❌] Use remote DNS with SOCKS4 proxies

For tor, these should be the settings:

    Proxy type: tor/privacy SOCKS 5
    Host: 127.0.0.1
    Port: 9150 (or 9050 if you are still using Vidalia, which you should probably not be doing)

5. You can now add your IM accounts! Go to:

Accounts > Manage Accounts

Click the "Add..." button.

Put in the account login details that you have and make sure your proxy settings are right for each account (it's the 3rd tab in this "Add Account" window). If you Use Global Proxy Settings, it will use whatever you put in under Step 4.

6. Now log in and you can instantly message and talk with anyone that's in your buddy list. You can also add new friends to talk to by going to:

Buddies > Add Buddy...
How do I get an IM account to talk with people?

That depends on which IM service you want to use. Many people use YahooIM, MSN, ICQ (in Russia), AIM (in USA) and now XMPP (a.k.a. "Jabber") is quite popular. XMPP is probably the best because there is no central server that can spy on everyone across the whole network like the others have. Contrast this with the other major IM networks.

    Yahoo spies: http://www.wired.com/threatlevel/2009/12/yahoo-spy-prices/
    AOL spies: http://cryptome.org/isp-spy/aol-spy.pdf & http://cryptome.org/isp-spy/aol-spy2.pdf & http://cryptome.org/isp-spy/aol-spy3.pdf
    MSN spies: http://cryptome.org/isp-spy/msn-spy.pdf
    ICQ is owned by AOL and they spy on their userbase like most IM companies. They all also record connecting IP addresses which is not privacy friendly.
    Some XMPP servers do not log connecting IPs or greatly limit what they log. Policies are decided entirely by each individual XMPP server administrator.

How to Get a Free XMPP Account

1. In Pidgin, go to: Accounts > Manage Accounts > Add...

2. Use these settings:

    Protocol: XMPP
    Username: YourDesiredName
    Domain: null.pm [or whatever jabber server you want to use, see list below]
    Resource: [Type anything you want or nothing at all. It indicates which device you are using. Not important.]
    Password: [make your password unique]
    Use this buddy icon for this account: [choose an avatar image from your computer if you want one]
    Check this box at the bottom: [❌] "Create this new account on the server"

3. If you use a proxy to connect to this XMPP account, set it under the Proxy tab. You can choose "Use Global Proxy Settings" if you want to use the proxy which you set in Step 4 under "HOW TO INSTALL PIDGIN & OTR PLUGIN".

4. Click the "Add" button. A box should pop up asking for your username and password once more, this is for XMPP account registration.

5. After your new XMPP account is registered, make sure it is enabled in the Account Manager (check the box next to your XMPP account). Now you can add other XMPP users to your buddy list by going to: Buddies > Add Buddy...

Each new buddy you add must be authorized by them before their presence information will show up on your buddy list.
Alternative XMPP Servers

Some jabber servers you can try:

    null.pm (Netherlands)
    securejabber.me / giyvshdnojeivkom.onion (Germany)
    [https://jabber.ccc.de](jabber.ccc.de) (Germany)
    jabber.5july.org (Sweden)
    jabber.calyxinstitute.org (USA)
    jabber.otr.im
    swissjabber.ch (Switzerland)
    swissjabber.li (Liechtenstein)
    DuckGo.com (USA, DuckDuckGo's jabber server)
    jabb3r.net (Austria)
    jabber.cryptoparty.is (Romania, register @ https://jabber.cryptoparty.is:5288/register/)
    xmpp.rows.io
    jabber.no-sense.net
    crypt.am (hosted in France, register @ http://crypt.am)
    cock.li (or many diff domains with onion access @ https://cock.li/xmpp)
    xmpp.is (Iceland, register @ https://xmpp.is/register/)
    jabber.at (Austria, register @ https://register.jabber.at)
    jabber.no (Norway, register @ https://www.jabber.no)
    jabber.cz (Czech Republic, register @ https://secure.jabbim.com/reg/)
    jabber.se (Sweden)
    jabber.to
    jabber.ovpn.to (France net facing servers / German op'd?) |
    wallstreetjabber.biz / wallstreetjabber.com / securetalks.biz / methamphetamine.ru / wsjabberhzuots2e.onion

And many more can be found on these lists:

    https://www.cryptoparty.in/connect/contact/jabber#need_an_account
    https://xmpp.net/directory.php
    https://list.jabber.at
    https://www.jabberes.org/servers

Some of the above require registering your account through their website (should be indicated) and cannot be registered through Pidgin. Registration is usually quick and easy in any event.
Misc. XMPP topics:

    List of XMPP servers running as hidden services too?
    I want to use Jabber(XMMP) through tor, How do I do it? whats a trustworthy, privacy perserving server to use?
    [OPSEC/Computer] What's the best XMPP server to use for your Jabber account?

Tor Messenger

    https://blog.torproject.org/blog/tor-messenger-beta-chat-over-tor-easily

Self Destructing Message Services

    https://OneTimeSecret.com - SSL, no JavaScript, encrypted, password optional. Deleted after 1st read or 7 days.
    https://Temp.pm - SSL, no JavaScript, encrypted, open source, password optional. Deleted on a timer (15 mins - 2 months) or @ first read, whichever comes first.
    https://www.ThisMessageWillSelfDestruct.com / https://TMWSD.sd / https://xn--uih.ws - SSL, no JavaScript, encrypted, password optional. Deleted after 1st read.
    https://NoPaste.me - SSL, no JavaScript. Timer to delete or "Burn on reading" option.
    https://QuickForget.com
    https://www.LockBin.com
    https://Privnote.com - SSL, JavaScript required.
    https://ReadThenBurn.com - SSL, JavaScript required, operated by BlackVPN.com
    https://NordVPN.com/es/secret-notes/ - SSL, JavaScript required.
    https://CloakMy.org - SSL, JavaScript required. Password, auto-destruct, timed destruct, & never expire options.