Is mail.tutanota.com legit or a scam?
Official legacy login domain for Tuta Mail, a secure German email service with a 14-year history and verified business registration.
Analysis Summary
No threats detected
All checks passed. This site appears legitimate — but always stay alert for phishing even on trusted domains.
Website Preview
Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site.
MT Intelligence
The domain has been registered since 2009 and is the original home of Tutanota, which recently rebranded to Tuta. Our analysis confirms it is owned and operated by Tutao GmbH, a legitimate German company with verifiable registration in Hanover. The site is clean across 92 antivirus engines and major browser blocklists. Independent security experts and major tech publications consistently rate this service highly for its privacy and encryption standards. There are no signs of phishing or malicious intent; it is a well-maintained part of a global security infrastructure.
Web Research Findings
Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for mail.tutanota.com, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.
- mail.tutanota.com is the official legacy webmail/login domain operated by Tutao GmbH (Tuta, formerly Tutanota), a German secure email provider founded in 2011 with over 10 million users.
- Company is properly registered as Tutao GmbH (HRB 208014, Amtsgericht Hannover), located at Deisterstr. 17a, 30449 Hanover, Germany; managed by Arne Möhle, Hanna Bozakov, and Matthias Pfau.
- Service is open-source (github.com/tutao/tutanota), end-to-end encrypted (including subjects), audited, with positive expert reviews from PCMag (4/5), TechRadar, and Cybernews; available on Google Play and Apple App Store.
- Rebranded from Tutanota to Tuta in 2023; tutanota.com redirects to tuta.com, but mail.tutanota.com remains a valid official login page with no security warnings.
- No scam reports or significant complaints found for the domain itself; company actively educates on phishing and uses strict DKIM/DMARC. Some user complaints relate to account approval delays or spam filtering of Tuta addresses by other ser
- Hosted in Germany (EU provider, Tutao GmbH ASN); Wikipedia notes minor controversies (court-ordered monitoring of one account in 2020, unproven 2023 honeypot allegation) but overall positive reputation as privacy-focused service.
- Wikipediaopen
"Tuta, formerly Tutanota, is an end-to-end encrypted email and calendar app and a freemium secure email service run by Tutao GmbH, a German company established in 2011."
- PCMagopen
"Tuta Mail encrypts every aspect of your email communications with powerful open-source algorithms, and its free edition allows you to send unlimited messages. 4.0 Excellent"
- TechRadaropen
"Fantastic security from a practical, focused and affordable product."
- Trustpilotopen
"Tuta (formerly Tutanota) is the company that respects your privacy. We develop the most secure email, calendar and contact service with quantum-safe encryption. 4-star rating from 375+ reviews."
- Redditopen
"You are okay. For the foreseeable future it should work. ... Both domains belong to them. Nothing is wrong or dangerous."
Tutao GmbH, registered HRB 208014 at District Court (Amtsgericht) Hanover since 2011/2012. Address: Deisterstr. 17a, 30449 Hanover. Managing directors: Arne Möhle, Hanna Bozakov, Matthias Pfau. VAT: DE280903265.
Antivirus Engines
Security Scans
Checked against the major public blocklists used by browsers and security tools — no hits.
Contact Verification
We fetched the page and looked for real-world contact details. Legitimate businesses almost always publish an email on their own domain, a phone number, and a postal address. Scam shops usually don't.
- No contact email found anywhere on the page.
- No phone number listed on the page.
- No postal address visible on the page.
Domain & Encryption
Redirect Chain
- 1301http://mail.tutanota.com/
- 2200https://mail.tutanota.com/
Server Reputation
Still, stay alert
No major threat indicators — but a clean scan does not guarantee every page is safe, and phishing emails routinely spoof real domains.
- Double-check the exact URL in your address bar
Confirm you are actually on mail.tutanota.com and not a lookalike like m-ail.tutanota.com.com or an IDN homoglyph.
- Use a password manager
Password managers only auto-fill on the exact domain they were saved for — they refuse to fill lookalike domains, which is the single best phishing defence.
- OpenDiscuss this site on the forum
If you have first-hand experience with this site — good or bad — share it with the MalwareTips community.
Reputation Sources
How this domain rates across independent threat-intelligence and blocklist providers.
Referenced Domains
Outbound domains this page links to or loads resources from. Each links to its own security scan.
Safety FAQ
Common questions about this site, answered directly from the scan data above — so the answers always reflect the latest verdict on this page.
- Our automated security review found no threat indicators on mail.tutanota.com. The site appears legitimate based on the signals we checked, but always stay alert for phishing emails that spoof real domains.
- mail.tutanota.com passed our automated security checks with a trust score of 93/100. No antivirus engines or major blacklists flagged the site at the time of the last scan.
- Yes. mail.tutanota.com presents a valid TLSv1.3 certificate issued by Let's Encrypt · E8, expiring in 18 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.
- mail.tutanota.com is 14.6 years old, registered on 11/30/2011 through INWX GmbH. Scam domains are often freshly registered — a site under 6 months old warrants extra caution.
- No. All 92 antivirus engines in our malware network report mail.tutanota.com as clean.
- No. mail.tutanota.com is not currently listed on the major browser blocklist feeds that modern browsers use.
- mail.tutanota.com resolves to an IP operated by Tutao GmbH in DE (usage type: Commercial). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.
- This is a permanent record of the scan run on June 30, 2026. The verdict and evidence above reflect that scan and do not change on their own. If circumstances around mail.tutanota.com have changed, MalwareTips staff can run a fresh scan, which re-runs every check from scratch and publishes an updated report.
User reviews & comments(0)
Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.