How-To Guides

How to Switch to Private Email

Take control of your inbox with ProtonMail or Tutanota. End-to-end encryption, no ad scanning, and no data selling -- this guide walks you through a smooth migration.

Why Private Email?

Mainstream free email providers scan your messages to build an advertising profile. They read receipts, track purchases, and infer details about your life -- all to serve more relevant ads. Private email providers are different.

  • •End-to-end encryption. Your messages are encrypted at rest and in transit. Only you and your intended recipient can read them.
  • •No ad scanning. Your inbox content is never scanned for advertising purposes. There is no hidden clause allowing automated analysis.
  • •No data selling. Private providers operate on a subscription model, not a data-broker model. You are the customer, not the product.
  • •Jurisdiction matters. Swiss and German privacy laws offer stronger protections than many larger jurisdictions.

If you care about digital privacy, the inbox is one of the most revealing records of your life. Migrating it is worth the effort.

Step 1. Choose a Provider

Two providers dominate the conversation for accessible, encrypted personal email: ProtonMail and Tutanota. Both are excellent; each has distinct strengths.

ProtonMail

  • •Based in Switzerland (strong Swiss privacy law).
  • •Free tier: 500MB storage, 150 messages per day.
  • •Paid tiers required for custom domain support.
  • •Supports PGP-compatible encrypted email to external users.
  • •ProtonMail Bridge enables Thunderbird / desktop client integration.

Tutanota

  • •Based in Germany (strict EU data protection law).
  • •Free tier: 1GB storage (larger than ProtonMail free).
  • •Encrypts contacts and calendar natively, not just email.
  • •Custom domain available only on paid plan.
  • •Open-source clients, full encryption by default for all Tutanota-to-Tutanota mail.

If you want more free storage and encrypted calendar/contacts, Tutanota wins. If you want solid desktop client integration and a more mature ecosystem, ProtonMail is the better pick. Both offer paid upgrades when you outgrow the free tier.

Step 2. Sign Up

Once you have chosen, head to the provider's site and create your account. Treat your recovery information like a safe deposit key -- lose it and you may permanently lose access.

  1. 1.For ProtonMail visit proton.me and click "Create account". Choose a free or paid plan.
  2. 2.For Tutanota visit tutanota.com, click "Sign up", and select a free or paid tier.
  3. 3.Choose a username that will become your permanent email address. Do not include personal details if you want privacy.
  4. 4.Set a strong, unique password. Use a password manager to generate and store it.
  5. 5.Save the recovery code / recovery phrase in at least two safe locations -- encrypted password vault and a printed copy in a secure drawer. If you forget your password, even the provider cannot decrypt your mailbox.

Key point: With true end-to-end encryption there is no "forgot password" reset by support. Your recovery code is the only fallback. Treat it like gold.

Step 3. Import Contacts

Migrating contacts is a one-time job. Export from your old provider, clean up the CSV, then import into the new provider.

  1. 1.Open Gmail (or your old provider) and navigate to Contacts.
  2. 2.Click Export and choose Google CSV or vCard format.
  3. 3.Open the CSV in a spreadsheet and remove duplicates, outdated entries, and any sensitive personal data you do not want stored in the new inbox.
  4. 4.Log in to ProtonMail or Tutanota, open Contacts, and use Import to upload the cleaned CSV.
  5. 5.Verify a few contacts imported correctly -- check that emails and names line up.

Tutanota offers encrypted contacts by default. ProtonMail Contacts encryption can be enabled during import. Take the extra second to encrypt them.

Step 4. Forward Your Old Email

While you transition, set up automatic forwarding so nothing important gets missed. Keep the old account alive for at least 60 days as a fallback.

  1. 1.Open Gmail and click the gear icon, then See all settings.
  2. 2.Navigate to the Forwarding and POP/IMAP tab.
  3. 3.Click Add a forwarding address, enter your new ProtonMail or Tutanota address, and confirm the verification email.
  4. 4.Choose "Forward a copy of incoming mail to" and select keep Gmail's copy in the inbox so nothing is irreversibly lost.
  5. 5.Send a test message to your old address and verify it shows up in the new inbox within a minute.

Heads up: Forwarded mail between providers is generally unencrypted in transit unless both ends support TLS. That is fine -- the important thing is that your inbox at rest is now encrypted.

Step 5. Update Accounts One at a Time

Do not attempt to update everything in one day. Slow migration prevents lockouts and lets you confirm each cutover works. Prioritize in this order:

  1. 1.Banking and financial services. Update your email, confirm receipt of verification messages at the new address, and verify two-factor messages still arrive.
  2. 2.Password manager recovery email. This is the safety net for every other account -- fix it first.
  3. 3.Social media. Facebook, Instagram, X, LinkedIn -- update email and confirm.
  4. 4.Shopping accounts. Amazon, eBay, Etsy -- update email to keep order history accessible.
  5. 5.Subscription services. Netflix, Spotify, utility bills -- work through one category per day.
  6. 6.Newsletters and low-priority signups. Subscribe from the new address going forward; let old subscriptions quietly expire.

Keep a written checklist. Tick off each account once you confirm the new email is verified and login works. Within two to three weeks the migration is effectively complete.

Step 6. Use Encryption Features

Messages between two ProtonMail users -- or between two Tutanota users -- are automatically end-to-end encrypted. Messages to Gmail and other providers travel in plain TLS unless you take an extra step.

  • •User-to-user encryption. Mail between ProtonMail accounts (or between Tutanota accounts) is encrypted end-to-end automatically. No extra setup required.
  • •Password-protected email to Gmail users. In the compose window, enable the "Encrypt to outside" option and set a password. The recipient receives a link and must enter the password (which you share via a different channel) to read the message.
  • •Expiration time. Password-protected external emails can be set to expire after hours or days.
  • •PGP with ProtonMail. ProtonMail supports PGP. You can import an external user's public key to send them fully PGP-encrypted mail.

Best practice: When you send a password-protected external email, share the password verbally or via a separate messaging channel (Signal). Never send the password in the same email.

Quick Tips

  • •Migrate gradually over weeks, not in one frantic day. Rushed migrations cause lockouts.
  • •Use a custom domain once you upgrade. If you ever leave a provider you can re-point it elsewhere and keep your address.
  • •Install ProtonMail Bridge to use ProtonMail with Thunderbird or Apple Mail desktop clients.
  • •Keep the old Gmail account read-only for 60-90 days as a safety net before fully deleting it.
  • •Periodically re-verify your recovery code/phrase is still safely stored -- it is your only lifeline.

Need More Help?

Switching email providers can feel daunting. We can walk you through every step, help you pick the right provider, and ensure nothing gets lost in the move. Book a free setup call with StarCaller Academy.