Complete feature reference

Complete Email Features

Everything you need for secure, private communication — and so much more.

Email Features

  • Masked Aliases: Create normal-looking custom email addresses, each with their own subdomain catch-all address, at will with a choice of 30+ domains.
  • Auto-expiring Aliases: Create date-based aliases (YYYYMMDD@alias.domain.com) that automatically stop accepting mail after the specified date.
  • Account Aliases: Use your account name across all available domains (turn on or off domains and catch-alls at will).
  • Random Aliases: Machine-generated throwaway addresses on their own dedicated domains, with nothing in the address tying back to you. Include a private note to remind you where you used each one; deleted random aliases are retired forever and never reissued.
  • Hosted Domains: Host your own domains with full feature integration easily from within our webmail, at no extra charge (most plans allow unlimited domains). Share addresses or entire subdomains of your domain with other CodaMail accounts, ideal for families and groups.
  • Catch-all Addressing: Receive mail to any address at your domains, with nothing to set up. Invent addresses on the fly, hand them out, and they simply work: a unique address for every company so you always know who leaked.
  • Full Catch-All Control: Block or allow individual aliases and addresses, and run each domain as a blocklist (allow all but listed) or a goldlist (only allow listed), all per-domain.
  • SMTP-level Mail Control: Block addresses, domains, or TLDs (including countries) with User Unknown rejection at the connection. Blocked senders receive a “user does not exist” error and are removed from mailing lists automatically.
  • Wildcard Pattern Blocking: Block senders or servers using wildcard patterns (* and ?) for flexible, pattern-based filtering.
  • Server Hostname Blocking: Block mail by sending server hostname or domain, in addition to sender address blocking.
  • Block by Language: We also offer the ability to block by language or select only those languages you will accept. However, this has to be done after the connection and so can only be deleted or filtered, whereas all other blocking is at the SMTP transaction level.
  • Whitelist: The ability to bypass every single filter (spam filtering, block lists, and your own mail filters) for a From address/domain or a To address/domain, with wildcard support, delivered straight to the folder you choose.
  • Spoof Protection: Mail forging your own address as the sender is rejected before it ever reaches your inbox. No more spam that looks like it comes from you.
  • Undo Send: Configurable 5-30 second delay with hover options to undo send or send immediately, preventing email mistakes.
  • Scheduled Send: Schedule anything that can be sent in a mail to be sent in the future; automatically detects custom SMTP servers.
  • Snooze: Clear a message out of your inbox and have it return as new activity at the time you choose, optionally marked unread. Snoozed mail waits in its own folder where you can wake it early at any time.
  • Deadman Switch: Set messages to send and actions to take if you haven’t logged in for N days. Multiple messages with attachments, separate recipients per message. Subject, messages, and attachments are AES-256-GCM encrypted prior to storage.
  • Secure Link: Automatically password-encrypt attachments client-side with AES-256-GCM using WebCrypto API. We never see anything but the encrypted file, passwords are not stored by us, you receive download notifications, and files auto-delete after 24 hours.
  • Fetch Mail: Automatically retrieve email via POP or IMAP from other services with filtering options. Optionally encrypt retrieved mail automatically upon retrieval so it is protected at rest immediately.
  • Send via External Accounts: Send mail that appears to come from your other addresses, routed through the correct mail server for proper authentication. Replies land in the right inbox, not spam, and your IP address is never exposed.
  • Advanced Sieve Filters: Comprehensive server-side mail filtering that runs even when you’re not logged in: sort, copy, flag, label, auto-reply, or PGP-encrypt with custom rules and full raw-script editing for advanced users.
  • Auto-forwarding: Forward your mail to other addresses (on plans that include mail forwarding).
  • Out of Office: Easily create and schedule Out of Office replies, with control over which of your addresses trigger a reply and how often the same sender gets one.
  • Filter-Based Auto-Reply: Create conditional auto-replies triggered by specific senders, subjects, or recipients, independent of a global vacation message.
  • Archive: Organize and archive important mail by year, month, sender, or folder.
  • Attachment Management: Remove, download, or view individual email attachments.
  • Attachment Reminder: Get warned before sending if your message mentions an attachment you forgot to attach.
  • Quick Responses: Save templates for fast replies.
  • Desktop Notifications: Browser and desktop notifications for new mail, with optional sound.
  • Full-Text Search: Search across message contents, headers, and folders.
  • Right-Click Menus: Context menus on messages, folders, and contacts; long-press on mobile.
  • Collapse Quoted Text: Long quoted sections fold away automatically for easier reading.
  • Folder Size Display: See exactly how much space each folder uses.
  • Full Identity Management: Multiple identities with custom SMTP servers, signatures, and settings per identity.
  • Identity SMTP: Set specific SMTP servers per identity if needed.
  • Drag-&-drop Management: Drag and drop messages between folders.
  • Custom Labels: User-defined colored labels for cross-folder categorization, with automatic labeling via filters. Labels sync to Thunderbird as native tags.
  • Import/Export Mail: Download or restore one message, a selection, or whole folders in eml, mbox, or maildir format, and import mail from files or by fetching your old account directly.
  • Calendar Integration: Multiple color-coded calendars with drag-and-drop event management, invitations, and reminders. Optionally show your due-dated tasks directly on the calendar. Easily import and export iCalendar ics files.
  • Birthday Calendar Auto-Generation: Automatically generate a birthday calendar from your contacts.
  • Holiday Calendar Import: Import national holidays for over 150 countries into your calendar.
  • More Calendars: Subscribe to ready-made calendars in one click: moon phases, named full moons, supermoons, eclipses, solstices and equinoxes; the holidays of the Jewish, Islamic, Christian, Hindu, Buddhist, Sikh, Bahá’í and Chinese traditions, each with the options that match your community’s practice; and the dates of the Hebrew, Hijri, Persian, Chinese, Mayan, Egyptian and Julian calendars. No third-party subscriptions to sign up for. Keep them in their own calendar or add them to one you already sync.
  • Private WebDAV/CalDAV/CardDAV: Our own privacy-focused DAV server for syncing Calendars, Tasklists, Addressbooks, and Notes. Each shared device or person gets separate randomized credentials that reveal nothing about your account. Set per-person permissions, expiration dates, and revoke access instantly. Whitepaper here.
  • Task Management: Full task manager with due dates, priorities, subtasks, tags, and recurring tasks, optionally shown directly on your calendar. Easily import and export ics.
  • Notes: Create and edit Notes in plain text, HTML, or markdown (with a full Markdown editor), organized in nested folders. Store images, PDFs, audio, and video. Sync over WebDAV to apps like Obsidian, 1Writer, and QOwnNotes.
  • Canvas Boards: View and edit Obsidian-compatible Canvas boards right in webmail: cards, arrows, groups, and embedded notes and media on an infinite visual surface, synced two-way with your Obsidian vault.
  • CodaMail Notebook: A full encrypted notebook for long-form writing: nested notebooks, tags, to-dos with due dates, note links, attachments, revision history, and a Trash you can restore from. Markdown renders headings, tables, code, footnotes, mathematics, and diagrams. Encrypted end to end in your own browser with a master password we never receive, so even titles and notebook names are unreadable to us. Syncs with the Joplin app on Windows, macOS, Linux, Android, and iOS.
  • Contact Management: Integrated address book with import/export in vCard or CSV format.
  • vCard Attachments: Add senders to your address book straight from attached vCards, and attach your own contacts to outgoing mail.
  • Email-to-Calendar/Tasks: Convert emails directly to events or tasks.
  • Built-in PDF Viewer: View PDF attachments directly in the browser with annotation tools.
  • App Passwords: Create separate credentials for each device or email client. Restrict by IP address, limit to send-only or receive-only, set expiration dates, and revoke instantly. Protects your account even if a device password is compromised.
  • Full Data Portability: Import/export everything in standard formats.
  • Email Threading: Full conversation threading with visual hierarchy for easy following of complex email discussions.
  • Mobile-Responsive Interface: Works like an app on any device with customizable layout.
  • Multiple Desktop Layouts: Choose widescreen (three-column), desktop (two-pane), or list views to match your workflow.
  • 40+ Themes: Easily customize the look.
  • Interface Density: Per-user list spacing and toolbar sizing, from compact to relaxed, independently adjustable.
  • Localization: Webmail available in 80+ languages.

Security & Encryption

  • At-Rest Encryption: All mail individually encrypted with AES-256-GCM, headers and all.
  • Zero-Access PGP Encryption: Auto-encrypt incoming mail with your choice of public keys, per-address, per-category, or for everything. Keep your private key off our servers entirely and only you can ever decrypt it.
  • End-to-End PGP/GPG: Full PGP support with Mailvelope compatibility for zero trust.
  • Secure Link: Password-encrypt attachments client-side with AES-256-GCM, one-time pad not stored on servers.
  • Client-Side Encrypted Notebook: CodaMail Notebook encrypts your notes in the browser before they ever reach us, using a key derived from a master password that never leaves your device. Note bodies, titles, notebook names, tags, and attachments are all opaque to us, and the same encryption travels with your notes to your phone and desktop apps.
  • Two-Factor Authentication (TOTP): Enhanced login security with one-time recovery codes.
  • Brute-Force Login Protection: Repeated failed login attempts are automatically blocked at the firewall.
  • Login History: Review your recent login activity to spot anything unexpected.
  • Self-Service Password Recovery: Optional security-question recovery you control. Without it, nobody (including us) can reset your password.
  • Aliases Cannot Log In: No alias of any type is a valid login name; only your account name is. Addresses leaked in other sites’ breaches are useless for credential-stuffing attacks against your account.
  • Read Receipt Blocking: Automatically block all read receipts and delivery notice headers for complete privacy.
  • Header Privacy Protection: Remove tracking headers automatically.
  • Custom Header Control: Add, remove, or modify outgoing email headers.
  • IP Address Masking: Hide your IP when fetching/sending through other services.
  • XSS and CSRF Protection: Protection from cross-site scripting and request forgery.
  • Remote Image Protection: Protection from remotely hosted images and tracking pixels.
  • No Remote Resources: Everything is local; fonts, icons, scripts, and CSS. No license calls, telemetry, or analytics.
  • Cryptographic Address Verification: Unique cryptographic signature for each sender to identify forged addresses.
  • Encrypted Connections: Only encrypted connections to mail and web allowed. All domains use DNSSEC, SPF, DKIM, DMARC.
  • Perfect Forward Secrecy: All encrypted connections use PFS.

Anti-Spam & Security

  • Multi-layer Spam Protection: Connection-level bot detection combined with content filtering for comprehensive coverage.
  • Connection-Level Bot Detection: Identifies and blocks spam bots at the SMTP connection stage before any message content is accepted, based on decades of behavioral data.
  • SpamAssassin Control: Full customization of the leading anti-spam solution: thresholds, scores, rules, and whitelists are all yours to tune.
  • Language-based Filtering: Mark mail in unwanted languages as spam.
  • Auto-learning Filters: Bayesian filtering that improves over time as you train it.
  • One-Click Spam Training: Junk and Not-Junk buttons train your personal filter as you go.
  • DNS Blocklists: Community-maintained reputation filtering.
  • Custom Spam Rules: Create your own filtering criteria.
  • SPF/DKIM/DMARC: Full support for authentication standards on all domains.

Additional Services

  • cPanel Web Hosting: Full-featured hosting control panel included with popular plans.
  • SiteBuilder: Point-and-click website builder for creating sites without coding.
  • One-Click WordPress Installer: Install WordPress instantly via cPanel.
  • PHP, Perl & Python Support: Server-side scripting language support for custom web applications.
  • MySQL Databases: Relational database hosting included with web hosting plans.
  • FTP Access: Multiple FTP accounts for file management and deployment.
  • SSH Tunneling: Encrypted connections with multiple proxy options.
  • SOCKS5 Proxy: High-speed proxy with authentication support.
  • VPN Service: OpenVPN-based service across multiple countries.

Experience All These Features

Start your 30-day free trial today. No credit card required.

Start Free Trial