Leaving Gmail for Mailbox.org

(giuliomagnifico.blog)

49 points | by giuliomagnifico 3 hours ago ago

81 comments

  • TranquilMarmot 2 hours ago ago

    I spent the past month "de-Googling" my life after I saw a notice in my Gmail inbox that it was 20 years old. I took a step back and realized just how invested into the Google ecosystem I was. Gmail, Calendar, Docs, Drive, Maps, Keep, Photos, YouTube, FitBit, Android. Basically my entire digital life. My goal was more diversifying than security/privacy, but security/privacy is a really nice bonus.

    I ended up going with Proton because they had a good solution for mail, calendar, and drive which I was looking to replace. I set up my custom domain to point to it and have my Gmail forwarding to it - any time I get an email to the old Gmail address I go change it on the website or delete the account altogether.

    For Google Docs / Keep, I switched over to Obsidian and pay for the sync there. It's a great replacement for my main use case of Docs / Keep which is just a dumping ground for ideas.

    For Google Photos, I now self-host Immich in Hetzner on a VPS with a 1TB storage box mounted via SSHFS. I use Tailscale to connect to it. It took a few days to use Google Takeout + immich-go to upload all the photos (~300GB of data) but it's working really well now. Only costs $10/mo for the VPS and 1TB of storage.

    Android I think I'll be stuck on - I have a Pixel 8 Pro that technically supports Graphene but there are too many trade-offs there. Next time I need a new phone I'll take a serious look at Fairphone but I think the Pixel 8 Pro should last a few more years.

    My FitBit Versa is really old and starting to die - I ordered one of the new Pebble watches and am patiently waiting for it to ship!

    YouTube I'm stuck on because that's where the content is. I have yet to find a suitable replacement for Google Maps - OpenStreetMap is still really hard to use and gives bad directions.

    • habi an hour ago ago

      > OpenStreetMap is still really hard to use and gives bad directions.

      https://www.magicearth.com/ works well for car navigation with OSM data, and https://cycle.travel/ is the best way to navigate on a bike, also with OSM data.

      In which country do you live, if I might ask?

    • bsoles an hour ago ago

      I am also in the process of doing the same with Gmail to Proton. The process isn't really that painful and kind of fun, actually. Anything I get an email on Gmail, I go and update it to point to my Proton email.

    • floren an hour ago ago

      I've taken steps to degoogle too, but like you I've rather stuck on Android because over the years I've ossified a set of tools I like (KeepassDX and Syncthing are really important, and Firefox on Android is actually damn good).

  • raffraffraff 2 hours ago ago

    I moved myself and my wife's business away from Google, but that hasn't been without it's issues. Even though we're using a globally recognised mail provider and have DKIM, SPF etc all set up perfectly, we get bounced or delayed by certain mail admins. There are also occasional delays and issues. One thing I'll say about Gmail is that it's extremely reliable.

    • RandomBacon 2 hours ago ago

      What provider?

      Running an online forum, I've encountered people using Atomic Mail, and that service has terrible reliability.

  • dsissitka 2 hours ago ago

    Something to be aware of if you're considering mailbox.org:

    https://userforum-en.mailbox.org/topic/anti-spoofing-for-cus...

    • sandreas 2 hours ago ago

      Oh, thank you. I recently considered moving from posteo.de to mailbox.org, but I think I won't anymore regarding such an issue took so long to even be considered as a problem and as I understand is still not solved.

    • giuliomagnifico 2 hours ago ago

      Oh, thank you. I didn't know that. Anyway, I'm not using a custom domain on mailbox, I use my custom mail domain with another service.

  • indigodaddy 2 hours ago ago

    Anyone considering a move should also look at NameCrane/CraneMail by the crew behind BuyVM. Solid service, incredibly reasonable prices, great community/discord. They are always looking to improve, extremely proactive and reactive to customer feedback and issues. No builtin PGP, but I believe that is out of their control as they use SmarterMail on the backend.

    • AnonC 2 hours ago ago

      I hadn’t heard of this and looked for it. How is Cranemail so cheap? I’m really surprised but also concerned that one can get 100 GB of space with unlimited mailboxes and aliases (with just a sending limit) for $10 a year (which gets even cheaper when paying for multiple years or lifetime).

      • indigodaddy an hour ago ago

        Not sure, but you could ask @Francisco here [1]. He might respond. He’s been around a very long time— certainly not fly by night, as I can understand thinking that at the price value.

        [1] https://discord.gg/E8myb2AD

  • GTP 41 minutes ago ago

    The problem with changing email provider due to privacy concerns, is that most of your emails will still end up inside Google's or Microsoft's servers.

    I considered self-hosting my own email, as I already have a domain name. But this has always put me off. The reason I would still consider self-hosting is to have readily available email address for side projects, like if I want to receive email notifications from services.

    But for privacy, you unfortunately don't gain much, as most of the people/entities you're exchanging emails with are using Google or Microsoft emails.

    • selkin 31 minutes ago ago

      Even when they don't, it doesn't matter. Email wasn't designed for privacy or security, and can't accommodate those. Lucky for us, we now have much better tools for those use cases, so we don't need to clumsily try and fail to ducktape those use cases to email.

  • smarx007 2 hours ago ago

    Gotta put in a plug for Migadu: https://www.migadu.com/pricing/

    Happy customer over a couple of years.

    • packetlost 2 hours ago ago

      I've been using Migadu for a low-moderate throughput inbox (within their micro tier limits) in the US and the IMAP4 performance is kinda awful sometimes. I'm not sure why :(

  • NoboruWataya 2 hours ago ago

    I have been using mailbox.org for a few years and no complaints. I don't think the web UI is amazing but I use it via Thunderbird so it doesn't affect me.

    If you use your own email client and your own domain name, you don't really need to worry about UI with email providers at all (as long as your provider supports those features). And your own domain name makes it easy to move around in future if you need to.

    I don't really have any plans to move away from mailbox.org, though I just saw the post about Thunderbird offering an email service in the future. That might actually prompt me to move as I'd like to support the makers of a FOSS email client I've been happily using for years.

    • guerrilla 2 hours ago ago

      It doesn't sound like they do on-disk encryption like ProtonMail. Is that right?

      • gruez 2 hours ago ago

        You mean e2e? on-disk encryption (ie. "encryption at rest") is basically used by everyone, including gmail and outlook.

        • guerrilla an hour ago ago

          You can tell how well I've researched this ;) but yes.

      • giuliomagnifico 2 hours ago ago

        Mailbox doesn’t support it, but on mailbox you can use your IMAP app with Proton not.

        And on mailbox you can easily send and receive PGP encrypted mail on mailbox.org. They provide a page for key import, allowing you to send encrypted emails like regular mail when needed.

        It’s your choice, if you always want to use proton mail app everywhere you can use proton.

        • guerrilla an hour ago ago

          I use IMAP with Proton. Thunderbird is my main mail client. You just need to install the bridge.

          • giuliomagnifico 21 minutes ago ago

            Yes but only if you install the bridge as I wrote in my blog post, and on iOS iPadOS? You can’t use Apple Mail app.

  • AnonC 2 hours ago ago

    > The last two providers offered true end-to-end encryption

    ProtonMail and Tutanota offer end-to-end encryption only when both the sender and recipient are using the same (i.e., ProtonMail->ProtonMail or Tutanota->Tutanota). If you’re emailing someone outside those or if you’re receiving emails from someone outside those, and you want encryption, you’d have to go to PGP (with its own complexities).

  • mantra2 2 hours ago ago

    I started the get itchy about so much of my life sitting on Google about 5 years ago, so I decided to take the leap to Fastmail and haven’t looked back.

    Didn’t need to do anything special for the migration. The in house importer they offer pulled over 80GB in a day and I was set from there.

    Fastmail isn’t going to give you end to end encryption - but - I think just shedding a major Google service is a massive win privacy-wise.

    I remember briefly looking into Proton but the search was awful.

    • pndy 2 hours ago ago

      > I started the get itchy about so much of my life sitting on Google

      For me and my partner was enough when Google started collecting info about purchases/delivery orders on gmail and dumping it in some separated page without any consent nor notification.

      We moved to Proton but once they changed branding and starting introducing additional services beside mailbox we knew they enter milking-out path. Their newest AI plaything was reason to leave.

    • ryandrake 2 hours ago ago

      This solves the "dependence on Gmail" problem (which is definitely a worthy problem to solve) but not the general "dependence on a particular mail provider" problem. The next step in this walk-down-the-risk-chain is self-hosting on a VPS, where you're now just dependent on your VPS provider, and the next step could be self-hosting on your own metal, where you're now just dependent on your ISP. Happy trails!

      • mantra2 2 hours ago ago

        What bothered me about Gmail was that it was central to my life and if something were to happen and they locked my account they have zero support.

        With that out of the way I feel perfectly happy with FM — no need to go further down the paranoia hole.

      • TranquilMarmot 2 hours ago ago

        > self-hosting on your own metal, where you're now just dependent on your ISP

        Your ISP, the hardware not failing, needing to do routine maintenance and (expensive!) upgrades, having room in your house, having consistent power to your servers, possible theft, natural disasters causing you to lose your home, etc.

        There's a reason I use a VPS for hosting a lot of things haha. Mostly because I live in a small apartment and don't have room for a server rack.

      • 42lux 2 hours ago ago

        It's more about diversifying at least that was my intention when I moved mail to a new provider.

      • ectospheno 2 hours ago ago

        Backup your data. Email is data. It is easy enough to do and frees you from many problems. You restore from backup and go on with life.

      • woodson 2 hours ago ago

        Unfortunately, most big mail providers won’t accept email from your self-hosted mail server, even with DKIM, SPF, etc. So, diversifying is as good as it gets.

      • lawn 2 hours ago ago

        Which is why you should buy your own domain so you can easily move to another provider.

        And backup your emails of course.

        • tsimionescu 2 hours ago ago

          I wonder how many more people have lost access to their DNS than to their email account. When you lease a domain (you can't buy domains), you have to periodically renew your lease - this is much more likely to be a problem than typical mail accounts. And if you lose your domain, and someone buys it, they now get all of your email - a much worse situation than Google locking out of your account. And there is no chance to appeal - again much worse than even Google's terrible user help.

        • TranquilMarmot 2 hours ago ago

          I own a domain that I use as my primary email address, but it's a "premium" domain that costs quite a bit to lease every year. To me the main concern here is that my payment fails, I don't notice, the domain goes up for sale and somebody grabs it. Then they have access to everything.

          So, I use my personal domain for all mail except anything that's "vital" like government websites, banking, paying rent, etc. for which I use my email provider's domain. And of course I'm registered with my domain registrar with a different email domain.

          • AnonC 2 hours ago ago

            If you can afford it, renew the domain for 10 years into the future (which means having it paid for till 2035, for example). Every year, renew the domain for one more year so that it’s always paid for 10 years into the future. If payment fails or you’re busy with something else, you’d still have several years of no worrying (some caveats and risks may still apply depending on the TLD and registrar).

            • TranquilMarmot 2 hours ago ago

              That's a good idea, I might see if I can do it. It was registered with Google Domains but got transferred over to Squarespace, idk if they offer long-term renewals.

        • mantra2 2 hours ago ago

          Yeah, I was using my own (used Pobox for SMTP in Gmail) — admittedly that made the transition easier.

      • carlosjobim an hour ago ago

        There's no reason to self-host your e-mail server. As long as you own your domain, you can simply point the DNS to a different provider when you want to switch.

    • mips_avatar 2 hours ago ago

      I'm thinking of leaving Google workspace for fastmail, but worried a bit about giving future employees email addresses/access. I hate being tied to Google but it provides a decent suite of things, and unlike M365 they actually work.

  • selkin 2 hours ago ago

    > The problem with email is that everything is transmitted in plain text.

    That's not a Gmail problem, and no reason to migrate. Some use cases just don't fit email, and for those, we have other, more fitting platforms.

    > So, I went with mailbox.org that still offers integrated PGP encryption, and if you want, you can always use external PGP too (which I was already doing with Gmail).

    Ok, so now you have two problems.

    • partomniscient 2 hours ago ago

      But we haven't started using regular expressions yet...!?

      I was fortunate enough that my solution was to host my own mail server 20+ years ago and create a separate email address per relationship with a company, so I can tell the moment some 3rd party has been comprimised when I receive spam on a specific address. My personal spam has been minimal over time.

      If for example moc.elgoog@mydomain.com gets spam - I know they're compromised or have sold me out.

      Yes gmail has had something similar using the + character, but most people don't know about/make use of this and still abdicate spam filtering to things they don't understand like bayesian algorithms which suffer from false positives. (Have you checked your spam folder for our very important message...?)

      Email has never been secure and despite modern updates, I still don't consider it as such. Then again I don't have much to worry about, so I'm ambivalent most of the time. That said, special 'fuck you' shoutouts to Ticketek for being compromised and their general ineptitude and shitfuckery in so many ways... It took them 2 months to respond to an issue I raised with them only to ask whether it was still an issue... (yes, it still is).

      Unfortunately I don't know if you could easily manage to convince majority email providers you're legitimite with a new domain in this day and age - I suspect its now a major hurdle to overcome as I've read often enough of mail bouncing because "we've never heard of you until now, so we don't trust you" - which makes communicating with the majority of the world via email almost impossible to build up the trust level you're considered legitimite and that's despite all this extra DMARC, DKIM, and SPF and SSL/TLS supposed safeguards which have appeared over time and I've had to comply with.

      Security as an afterthought means its still probably never going to be secure. I've always considered email the equivalent of transmitting plaintext and have always treated it as such. This has led to some pretty difficult situations where I don't email important stuff to a 3rd party just because they expect it and everyone else does it.

      • selkin 34 minutes ago ago

        It can be summarized that the romanticized ideal of Email is long gone, if it ever existed. Today email is a way for others, mostly automations, to send you notifications.

        Once you realize this, the "just keep whatever I have right now" is often the best solution.

  • roscas 2 hours ago ago

    Congrats for the move. "Away from Gmail" is by itself a happy title.

    The report is also very good and that should be a service every other mail service could provide to people who want to move away from G'rab'mail.

    Another curiosity is that you use the same password I use for everything: xxx

    Simple to remember and nobody will ever figure that out! Wink! :)

  • mrbluecoat 2 hours ago ago
  • an hour ago ago
    [deleted]
  • ellisd 2 hours ago ago

    Anyone using a half-Gmail / half-personal IMAP server to handle the reality that keeping 20+ years or email in Gmail will bump into the storage quota? I'm around 99.5% usage and just slowly deleting ancient emails with large attachments to make it another month.

    Dovecot in my homelab seem doable to have an IMAP server to transfer the Gmail based emails to and maintain them indefinitely but would this be a maintenance headache? I've never operated it before and am curious.

    • mbirth 2 hours ago ago

      I’ve got Dovecot running in a Docker container on my Raspberry Pi. Moved everything over using Thunderbird. If you use mbox format, once done, you can turn the files read-only and Dovecot will still work. And you can throw a Solr server into the mix to get fast mail searches.

    • TranquilMarmot 2 hours ago ago

      I also ran into the Google storage quota after 20+ years of gmail + drive + photos. I ended up paying for Google One at $4/mo just to make it long enough to move all of data somewhere else.

  • maksimur an hour ago ago

    How do you deal with emails bouncing or going to spam? I have been looking to move away from Gmail but last I read it was the only reliable option out there.

    • floren an hour ago ago

      You should be fine on the big providers. There's a weird horseshoe situation where anti-Google doomposting looks a lot like pro-Google FUD that I think leads people to believe only Google and maybe Microsoft are capable of sending mail any more.

      Something like mailbox.org should be fine. Even a carefully-chosen VPS running your own email server should be fine (works for me, no delivery problems in ~2 years)

      • selkin 26 minutes ago ago

        Tell me you haven't run a large email server without telling me.

        There's a reason even large corporates that can easily afford the resources to run email their email themselves decide against it.

        There are a handful of good providers, not just Google and Microsoft, but the two hyperscalers do have very good offerings, so of course they have a lot of the market.

  • stkai 2 hours ago ago

    One thing I'd recommend is getting your own domain for email (looks like mailbox.org allows custom domains with some plans). You never know what will happen to your email provider in the future, so having the freedom to move your domain to a different provider is valuable.

    • AshLeece 2 hours ago ago

      This. This 100%. I hosted my own email for a good few years and decided to migrate it to icloud using the custom domain. A few mins of copying IMAP over and waiting for the DNS to propagate and it was like nothing happened!

    • giuliomagnifico 2 hours ago ago

      Yes, thanks. I already have my custom email domain, but this mailbox address is for everyday use, while I use my personal domain for private matters.

  • luizfelberti 2 hours ago ago

    For those looking to break free and are considering self-hosting, I can strongly recommend Stalwart. I'm surprised how almost no one seems to have heard of it, but it's amazing (and supports JMAP!)

  • mbirth 2 hours ago ago

    I left a week ago and went for disroot.org . But this is only my backup email address. My main is via my web hoster and a custom domain.

  • samuell 2 hours ago ago

    I thought protonmail was the go-to for de-googling.

  • x0x0 2 hours ago ago

    I'm going to plug fastmail. Rationale:

    (1) tech support that actually reads your messages and replies with a solution demonstrating comprehension of the message that you wrote. Amazing. I've emailed them twice and gotten a great response both times.

    (2) it is the best UI I've seen outside gmail;

    (3) They have continued actively developing their UI, with nice updates released perhaps in the last 6 weeks.

    (4) keyboard shortcuts that work

    (5) Instead of inbox 0, I practice inbox 50k and it handles it fine.

    (6) I just had a decade-anniversary there and I've never regretted it.

    • commandersaki 14 minutes ago ago

      (1) tech support that actually reads your messages and replies with a solution demonstrating comprehension of the message that you wrote. Amazing. I've emailed them twice and gotten a great response both times.

      Tech support forwarded an inquiry I was asking about an IMAP command in my MUA which led to an actual engineer that said my MUA was using an outdated/deprecated part of the IMAP protocol and provided the RFC for the new way of doing things, which then lead to a patch in said MUA. Very few companies offer this calibre of support, the only other one I can think of is Tarsnap.

      (2) it is the best UI I've seen outside gmail

      I think it's a much better UI overall than gmail; at least I found with gmail you had to manually paginate things, I can easily do a search in FM that might have 10000 emails over 20 years and I can usually jump to a specific month/year very quickly via scroll and then from there a specific day.

      (5) Instead of inbox 0, I practice inbox 50k and it handles it fine.

      Similar, 37k in my Inbox, nay issue. I have probably 200k overall across different folders. But I know I'm outsourcing a service, so I do full infrequent backups via IMAP.

      Here's my (7):

      Fastmail has the only web interface I've come across that handles (catch-all) aliases correctly and knows how to respond with the correct one every single time. Maybe roundcube/squirrelmail can do this, but roundcube/squirrelmail overall is not very good.

    • johnplatte 2 hours ago ago

      Came here to say this. I've been with Fastmail a similar length of time and it just keeps getting better.

  • dustinfarris 2 hours ago ago

    how is this different from using PGP with Gmail?

    • giuliomagnifico 2 hours ago ago

      As far as I know, Gmail doesn’t allow saving PGP keys or using them to write new emails, whereas mailbox.org integrates the entire PGP service and to send an email, even from iOS where PGP apps are "ugly," you just need to do it from the web interface.

      Anyway I wrote the details in the post.

      Edit: I have to mention that I generated my PGP keys locally and then imported to Mailbox.Org

    • buran77 2 hours ago ago

      You're doing it without Gmail.

    • 2 hours ago ago
      [deleted]
  • colesantiago 2 hours ago ago

    How do I get my family to move off of Gmail?

    I keep telling them that Google spies on you, but they don’t care because it is free and it works.

    How reliable are these providers and what are the chances these providers emails would bounce or go to spam when sending an email?

    • selkin 24 minutes ago ago

      If they don't care, why should you?

      They found a deal that seems to be ok for them. To get them to change providers, you need to suggest one that would be a better value, and to be honest, I don't think you can find one.

    • bsoles an hour ago ago

      I did it by moving to the Proton ecosystem: Proton Mail, Proton Calendar, and Proton Pass, with the added bonus of Proton VPN.

      As much as I don't necessarily like it, I think we have to put a price on our privacy and personal data. And for me, paying for the Proton family plan seems like a good trade-off, at least for now. So far, I haven't got any emails to bounce when using the @pm.me or @proton.me email addresses, except once (I forgot which web site).

    • jeffbee 2 hours ago ago

      Maybe because when normal people hear you say "Google spies on you" they think you are a crank. Perhaps try to reduce it to a statement that conveys valid information.

  • dlachausse 2 hours ago ago

    I wish there was something like cell phone number porting for email addresses. I don’t know how it would work on the technical side or how you could secure something like that, but the idea of switching email providers is too daunting, so I stay with Gmail despite abandoning all my other Google accounts and services.

    • AnonC 2 hours ago ago

      The closest would be having your own domain that’s linked to an email service provider (like mailbox.org or Google Workspace or several others). But to your point of switching email providers being daunting, first buy your own domain and then use that domain with an email provider of your choice. Then start chipping away at the emails you receive in your Gmail account and switch each of those senders to your new domain (and a new email address there). Do it a few at a time, give yourself a whole year to complete it and get going.

      It’s even easier if you list out the most important senders in a checklist and move those first. But give yourself at least a few months time. It’s certainly possible.

      Once you have your own domain, future migrations to another email provider would be a matter of moving the emails and updating DNS.

    • RandomBacon 2 hours ago ago

      It exists: just port your domain name to a new registrar, and/or point your mx records to a new email provider.

      Phone number is just a user number. Email addresses are a user name at a server name. A little harder to do if you're looking for something as ubiquitous as phone number porting.

      The closest thing to a server name when it comes to phone numbers, would be the network it is on. For example, there is the public switched telephone network (PSTN), then there is the Defense Switched Network (DSN)

      • dlachausse 2 hours ago ago

        The problem is that I would still need to "port out" my email address manually to a new domain name. It's not an exaggeration to say that there are probably over a hundred places I would need to make that change.

        • carlosjobim an hour ago ago

          What's the problem? Do it during a slow day when you're bored. Doesn't take a lot of time or effort. Keep the old e-mail around for any strays that you forgot.

    • neogodless 2 hours ago ago

      Not as easy, but could do it in phases:

      - set up new email address, hosted where you like

      - https://support.google.com/mail/answer/10957?hl=en (forward your email)

      - update your email address as many places as you can

    • Semaphor 2 hours ago ago

      You kinda get that with your own domain. I think that's the best you are going to get

      • tsimionescu 2 hours ago ago

        Isn't losing your domain a huge risk for any common user?

        • Semaphor an hour ago ago

          Unless you use some sketchy TLDs, I've not heard of that

          • tsimionescu 35 minutes ago ago

            I've seen plenty of stories of people who forget or are unable for whatever reason to renew their domain names on time.

  • pyed 2 hours ago ago

    [dead]

  • throwzasdf 2 hours ago ago

    [dead]