Keep your emails on your stick, not in someone else’s cloud.
MailStick is a portable email system built around two sticks: a server stick that delivers emails through Tor hidden-service, and a user stick that connects through Tor.
How MailStick works
MailStick keeps the main workflow simple.
1. Download the sticks
Get the server and user MailStick images for free, flash them, and boot them as separate portable systems.
2. Share the onion address
Use Onion Share to pass the server onion address from the server-side setup to the user-side stick safely.
3. Add optional paid services
Paid Services combines relay options and Recovery Vault under one account flow when you want extra online helpers.
MailStick, explained
These are the core ideas behind MailStick and why it exists.
What is MailStick?
MailStick is a portable private email environment that runs from USB media instead of living inside your normal computer environment. The goal is strong separation: your normal PC and your MailStick email environment stay distinct, so your mail setup, stored messages, and keys are not mixed into the host operating system.
In practice, MailStick is designed to give the user direct control over where their mail lives. Instead of trusting a normal webmail provider or a standard cloud mailbox, the core data stays on the user side and server side sticks that the user physically controls.
How does the MailStick system work?
MailStick is built around two separate sticks. The server stick acts as the mailbox server and is exposed through a Tor onion service. The user stick acts as the private client side, connects through Tor, and accesses the mailbox without using a normal public email route.
The website is only a helper surface around that system. It is used for downloads, onion sharing, and optional paid helpers like relay or Recovery Vault. The website is not supposed to become the place where your real mail lives.
What is the biggest privacy problem with normal email?
In most current email systems, your messages live on somebody else’s servers. Even if the provider is well known, your mail storage, metadata, account access, retention rules, and often backups remain under company control rather than your own.
That means normal email is usually private only up to the policies, infrastructure, logging, and legal exposure of that provider. MailStick is built around the opposite idea: the user should physically control the main mail environment, mailbox state, and keys instead of outsourcing all of that to a company mailbox platform.
Why is MailStick different from ordinary webmail?
Ordinary webmail is convenient, but the convenience usually comes from centralization. The provider runs the service, owns the infrastructure, stores the mail, and decides how the whole system behaves. MailStick shifts that control back to the user.
The user stick can also be configured so mail handling is more ephemeral, while archives and recovery material stay where the user chooses. That gives a much stronger control model than a normal always-synced mailbox account tied to a provider.
Does MailStick guarantee 100% security?
No honest system can promise perfect security. What MailStick does is reduce trust in third-party mail providers and give the user much more direct control over storage, access, and recovery. Its security model is based on separation, Tor-only connectivity, and keeping the important pieces on the user’s own hardware.
So the real value is not a magic claim, but a different trust model: your email environment is meant to live under your control, on your sticks, instead of primarily on company mail servers.
Why people would use it
MailStick focuses on portability, separation, and minimal trust.
What this site is for
The website is the helper surface around the sticks, not the sticks themselves.
Free
- Download server and user MailStick images
- Use Onion Share to pass a server onion address
- Read setup guidance and follow the helper flows
Paid
- Relay services for offline delivery paths
- Recovery Vault account and encrypted backup storage
- Shared paid account area for service access and future tools