Disroot review
Updated September 28, 2026 · ShieldCue Editorial Team · Facts checked September 26, 2026
We earn a commission when you sign up through links on this site. Partner status can affect where a brand appears in our rankings. Partners with a live offer in your country come first, then every other brand by score.
Our verdict
Disroot suits people who want a free mailbox on their own domain with 2 of cloud alongside it. The trade-off is that email is encrypted in transit only, while Zero-knowledge end-to-end encryption covers the vault, and the free tier is for non-commercial use.
Key facts
- Best for
- A free personal mailbox on a custom domain, with cloud and an encrypted vault in the same account.
- Free plan limits
- 1GB mailbox, 2GB cloud, 500MB Cryptpad, 64MB attachment limit; free of charge, non-commercial use only↗
- End-to-end encryption
- No default end-to-end encryption for email; transport only (SSL/TLS: IMAP 993, STARTTLS 587, SMTPS 465), optional GPG/PGP end-to-end encryption via the Mailvelope browser extension in webmail↗
- Jurisdiction
- NL↗
- Custom domains
- Yes↗
- Open source
- Yes↗
- Legal entity
- Stichting Disroot.org↗
- Headquarters
- Netherlands↗
- Founded
- 2015↗
- Support channels
- Email, Chat, Help-centre, Community↗
- Pricing model
- Free
- Official website
- disroot.org
Privacy tools
Password managers
Encrypted storage
- Free storage
- 2↗
Facts checked September 26, 2026, 10 sources
Apps and profiles
- Elsewhere
- Wikidataf-droid.orgnixnet.social
Pros and cons
Pros
- A free plan that puts a mailbox, cloud storage and Cryptpad into a single account
- Activity logs are cleared after a short window, and several services record nothing at all
- Open source and run by Stichting Disroot.org under NL law
- Support runs on email, chat and help centre and platforms listed are web and android
Cons
- Mail is encrypted in transit only, so end-to-end protection is a manual step through the Mailvelope browser extension in webmail
- The free tier tops out at 2 of cloud storage, with set allowances for the mailbox, Cryptpad and attachments, and covers personal, non-commercial use
- Platforms listed are web and android, so iOS and desktop clients sit outside what is supported
Who it suits
- People who want a free personal mailbox on a custom domain
- Readers who like open source software and short log retention
- Anyone who wants the vault's totp codes and encrypted storage beside their mail
Who should look elsewhere
- Business users, since the free plan limits are for non-commercial use
- Apple Hide My Email readers, whose free plan limits exclude the service because it arrives only with a paid storage tier
- addy.io users who just need forwarding, since unlimited standard aliases fit that narrower job
Audits, logging and jurisdiction
Disroot is run by Stichting Disroot.org and operates under NL law, with its base listed as NL. Activity logs are cleared after a short window, and several services record nothing at all. Email relies on transport security, with end-to-end protection left to you through the Mailvelope browser extension in webmail. The vault is the exception, carrying Zero-knowledge end-to-end encryption.
What you get free
The free plan puts a mailbox, cloud storage and Cryptpad into a single account at no charge, and it is for non-commercial use. Allowances are modest: 2 of cloud storage, a set mailbox size, a Cryptpad allowance and a ceiling on message attachments. The free option is an entry point rather than a trial, so a personal account can stay on it.
How Disroot compares
9.2 vs 9.0
9.2 vs 9.0
9.2 vs 9.1
9.2 vs 8.8
9.2 vs 9.6
Disroot vs Kaspersky Latam9.2 vs 9.4
9.2 vs 9.4
9.2 vs 9.3
9.2 vs 9.4
9.2 vs 8.2
Frequently asked questions
What does the Disroot free plan include?+
There is a free plan, and it covers more than mail: a mailbox, cloud storage and Cryptpad space in a single account. The cloud portion alone is 2, alongside set allowances for the mailbox, for Cryptpad and for message attachments. Paid tiers sit above this for heavier use.
Is Disroot email encrypted end to end?+
Not by default. Email is secured in transit, and message-level encryption is something you turn on yourself with the Mailvelope browser extension in webmail. The vault is the part that carries Zero-knowledge end-to-end encryption, so files stored there are protected without extra setup.
Where is Disroot based and whose law applies?+
Disroot is run by Stichting Disroot.org and operates under NL law, with its base listed as NL. A Dutch foundation sits behind the accounts, and the terms of service set out what that foundation commits to for users.
How much does Disroot keep in its logs, and can I read the code?+
Activity logs are cleared after a short window, and several services record nothing at all. The software is open source, so that logging behaviour can be checked against the running code, and Stichting Disroot.org publishes the code behind the services.
Which devices and apps does Disroot support?+
Platforms listed are web and android, so webmail in a browser and an Android app cover the sign-in. Email, cloud and vault all sit behind the same account, reached the same way. A native iOS or desktop client is not part of the listed platforms.
What is the Disroot vault good for?+
The vault is Disroot's encrypted storage and authenticator service in one place. It uses Zero-knowledge end-to-end encryption and its listed features are totp, so it handles one-time codes alongside files. Unlike email, that protection is applied for you rather than set up manually.
Can a business use the free plan?+
The free allowances are for personal, non-commercial use, so a company address would need a paid plan. Disroot is run by Stichting Disroot.org on a free model, which keeps the baseline services inexpensive for the people who rely on them.
How long has Disroot been running?+
Disroot was founded in 2015, and Stichting Disroot.org is the named entity behind it. Longevity matters for a privacy provider, since it shows the project outlived short-lived launches, and the open source code can be inspected by anyone.
Sources
- disroot.org checked September 26, 2026
Backs: Platforms, Privacy tool type
“You can access all our services through the links below or use the Android Disroot app to help you get started.”
- disroot.org/about checked September 26, 2026
Backs: Founded, Headquarters, Open source
“was founded by Muppeth and Antilopa in 2015”
- disroot.org/contact checked September 26, 2026
Backs: Support channels
“support@disroot.org ... XMPP: disroot@chat.disroot.org ... IRC: #disroot on irc.libera.chat”
- disroot.org/donate checked September 26, 2026
Backs: Pricing model
“Thus we must rely on donations and support from users of the services and the community”
- disroot.org/faq checked September 26, 2026
Backs: Free plan limits
“The mailbox size limit is 1GB and attachment size limit is 64MB. Cloud storage is 2GB.”
- disroot.org/perks checked September 26, 2026
Backs: Free plan
“With your Disroot account, you get FREE storage: 1GB for your emails, 2GB for the cloud, 500MB for Cryptpad.”
- disroot.org/privacy_policy checked September 26, 2026
Backs: Logging policy
“We store logs of your activity for a period no longer than 48 hours (unless specified otherwise per service).”
- disroot.org/services/email checked September 26, 2026
Backs: Custom domains, End-to-end encryption
“It allows you to use your own domain to be able to send and receive emails”
- disroot.org/services/nextcloud checked September 26, 2026
Backs: Free storage, Zero-knowledge encryption
“If the free 2GB is not enough, you can extend your cloud storage”
- disroot.org/services/vault checked September 26, 2026
Backs: Encryption, Features
“Your data is protected with zero-knowledge encryption. Only you can access your information.”
- disroot.org/tos checked September 26, 2026
Backs: Jurisdiction, Legal entity
“Disroot.org is hosted in the Netherlands and therefore is subject to Dutch laws and jurisdiction”
Compiled from 11 source pages, checked September 26, 2026. We did not open an account.
Not confirmed yet: Price from.
Disroot
A free personal mailbox on a custom domain, with cloud and an encrypted vault in the same account.