How to Use Tuta: The Beginner's Guide (First Mailbox, Recovery Code, Folders, and Encrypted Mail to Anyone)

CodexFuse Team · 2026-10-30T09:00:38.513Z · 12 min read

How to Use Tuta: The Beginner's Guide (First Mailbox, Recovery Code, Folders, and Encrypted Mail to Anyone)

Learning how to use Tuta is the fastest way to leave ad-scanning inboxes behind. Tuta is a German email provider that encrypts your entire mailbox — emails, contacts, and calendar — with post-quantum-safe encryption, and its code is open source for anyone to audit (Tuta's official setup guide). The free plan gives you 1 GB of storage, one address, and an encrypted calendar at no cost, with no phone number required to sign up (Tuta's Google Play listing). This beginner's guide walks you from your first signup through the one rule you must never break — the recovery code — to folders, aliases, and sending encrypted mail to people who don't use Tuta.

What is Tuta Mail?

Tuta Mail is an end-to-end encrypted email service from Germany designed so that nobody — not advertisers, not hackers who breach a server, and not even Tuta itself — can read your emails. Every mailbox, contact list, and calendar is encrypted by default with post-quantum-safe cryptography, the code is open source, and the service runs on renewable energy under strict German GDPR data-protection law (Tuta's official setup guide; Tuta's Google Play listing). Unlike Gmail or Outlook, there is no "forgot password" email that gets you back in — which is exactly why the recovery code rule below matters more than anything else in this guide.

How do you use Tuta Mail for the first time?

You can go from zero to a working encrypted mailbox in about ten minutes: pick a plan, choose your address, set a strong password, and — the step beginners skip — save your recovery code. Here is the exact first-time arc, adapted from Tuta's own step-by-step guide:

1. Choose your plan at tuta.com. Start free (1 GB, one address, one calendar) or pick Revolutionary (€3/month) or Legend (€8/month) if you already know you'll want aliases or a custom domain (plan details below).
2. Pick your email address. Choose something professional if this will become your main address — you can add aliases later, but your primary address is your identity.
3. Set a strong, unique password. This password encrypts your mailbox, so it must be long and unique — see how long should a password be for the current guidance.
4. Save your recovery code immediately. Tuta shows you a recovery code during signup. Write it down somewhere safe — a password manager is ideal, and our KeePass beginner guide shows you how to set one up. Lose both the password and this code, and the mailbox is gone forever.
5. Complete the CAPTCHA and wait for approval. New free accounts pass through Tuta's approval check before they can send mail — community reports show this can take a little while, so don't panic if sending isn't instant (Privacy Guides community discussion).
6. Use it anywhere. Tuta works in any modern browser and through free official apps for Windows, macOS, Linux, Android, and iOS (Tuta's Google Play listing).

Why is the recovery code the most important thing in Tuta?

Because Tuta cannot reset your password for you — the recovery code is the only way back into your account, and losing both together means the mailbox is unrecoverable. Tuta's zero-knowledge design means your password is never stored in a recoverable form, so unlike Gmail or Outlook there is no support agent who can restore your access (HackMD's Tutanota recovery guide; PrivacySavvy's Tuta guide). Treat the code like a house key: store it in your password manager the day you sign up, keep one offline copy somewhere safe, and never share it with anyone.

What does the Tuta free plan include — and when should you pay?

The free plan is a complete private mailbox — 1 GB of storage, one address, one encrypted calendar, and the same encryption as the paid plans — and it is enough until you need more space, aliases, or a custom domain. Prices below were checked on October 30, 2026, from Tuta's own guide and independent pricing roundups; confirm them on tuta.com before you buy, because plans move.

Upgrade when you hit one of three walls: you run out of the free 1 GB, you want separate addresses for shopping or newsletters (aliases), or you want your own domain on the mailbox. Businesses get separate Essential, Advanced, and Unlimited tiers (Unlimited is listed at €12/month on G2's Tuta pricing page). Sources: Tuta's official setup guide, GetMailBird's Tutanota pricing breakdown (checked October 27, 2026), G2's Tuta pricing page.

How do you send your first encrypted email in Tuta?

Email sent to another Tuta address is end-to-end encrypted automatically — no setup, no keys to exchange. To email someone who doesn't use Tuta, you set a password on the message: the recipient gets a link, enters the password you agreed on, and reads your message in a secure browser session, with no Tuta account needed (PrivacySavvy's Tuta guide). You can also make such messages temporary. One honest caveat from the same guide: Tuta's default delivery setting is "Not Confidential," which sends external mail unencrypted — so for a truly private message to an outsider, always set the password deliberately rather than assuming encryption happened.

How do you organize Tuta: folders, rules, and labels?

Unlimited folders and subfolders, inbox rules that sort mail automatically, and colored labels give you the same organization Gmail offers — without the scanning. Create a folder with the + under your folders list, and a subfolder from the three-dot menu on its parent (Tuta's official setup guide). Then automate: go to Settings → Email → Show inbox rules and add rules by sender, recipient, or even regular expressions, with a target folder for each match — for example, everything from your bank straight into a "Bank" folder. Labels work like Gmail's: custom names, custom colors, multiple labels per email. For spam, Tuta's rules let you mark senders as "Not spam," "Always spam," or "Discard," and its newer client-side spam filter learns from how you classify mail. Finally, Trash and Spam empty themselves automatically after 30 days, so storage never rots on junk.

How do Tuta aliases and a custom domain work?

Aliases are extra addresses that land in the same mailbox — use one per purpose — and a custom domain (a paid feature) needs a few DNS records to go live. Add an alias under Settings → Email → Email addresses → +: give it a name, pick the domain, and you're done; Tuta's own guide suggests reserving your primary address for people you know and using aliases for social accounts, banking, shopping, and newsletters. You can promote any alias to your primary address from its three-dot menu. For a custom domain, go to Global Settings → Custom email domains and follow the setup wizard, which asks you to add a TXT record proving ownership, an MX record, an SPF record, DKIM CNAME records, and a DMARC record at your domain provider — Tuta checks each one and tells you what's wrong, though DNS changes can take a few hours to be visible everywhere (Tuta's official setup guide).

What about the Tuta Calendar and contacts?

Every Tuta account includes the encrypted Tuta Calendar and contacts — no separate signup needed. The calendar is end-to-end encrypted and quantum-resistant like the mail, and Tuta's calendar guide walks through the full setup: sign up, install the mobile app or use the desktop client, create separate calendars for different parts of your life, subscribe to public holiday calendars, import old events via .ics files, and share calendars with others (paid plans get unlimited calendars). Contacts live in the same encrypted space. And on the horizon: Tuta Drive, a quantum-secure encrypted storage product currently in closed beta, per Tuta's own guide.

Tuta vs Proton Mail: which encrypted email should you choose?

Both are excellent; pick Tuta if you want the cheapest paid plan and post-quantum encryption by default, pick Proton Mail if you want a full privacy suite (VPN, drive, password manager) around your inbox. The honest comparison, from sources checked this week:

The one-line version reviewers keep landing on: Tuta wins on price, Proton Mail wins on ecosystem (RigorousThemes' Tuta vs ProtonMail comparison; Canary Mail's 2026 alternatives roundup). Either one is a genuine upgrade over an ad-scanning inbox.

The honest limitations of Tuta

Tuta does not speak IMAP, so you can't read it in Outlook or Thunderbird — and new free accounts pass through an approval check before they can send. The no-IMAP rule is deliberate: the protocol would force emails to sit in clear text on the device, breaking the encryption model, so Tuta only works through its own web, desktop, and mobile clients (PrivacySavvy's Tuta guide). If you keep a Gmail or Outlook account next to Tuta, a desktop client is still useful for those — our Thunderbird beginner guide covers that side. Other honest notes: free accounts get a single label color, and the account-approval wait on new free signups is real — upgrade to a paid plan if you need sending to work instantly (SourceForge's Tutanota comparison notes; Privacy Guides community discussion).

Your first-week Tuta checklist

Do these seven things and your private mailbox is genuinely set up, not just created:

1. Store your recovery code in a password manager (and one offline copy).
2. Turn on two-factor authentication in Settings.
3. Create three folders — e.g. Bank, Receipts, Personal — and one inbox rule to feed one of them.
4. Create one alias for online shopping and use it on your next order.
5. Send one password-protected test email to a friend to learn the external-mail flow.
6. Export your old inbox (.eml/.mbox) and import it if you're on a plan that supports import.
7. Update your most important accounts to the new address, starting with banking.

Sources

• Tuta — "How to use Tuta Mail (step-by-step guide)" — https://tuta.com/blog/how-to-set-up-and-use-tuta-mail (fetched October 30, 2026)
• Tuta — "How to set up & use Tuta Calendar" — https://tuta.com/blog/how-to-use-tuta-calendar (fetched October 30, 2026)
• PrivacySavvy — "What is Tuta Secure Email and How to Use It" — https://privacysavvy.com/email/guides/tutanota-guide/ (fetched October 30, 2026)
• GetMailBird — "Best Tutanota Alternative for macOS 2026: Secure Email" — https://www.getmailbird.com/best-tutanota-alternative-macos-secure-email/ (pricing checked October 27, 2026; fetched October 30, 2026)
• G2 — "Tuta Pricing 2026" — https://www.g2.com/products/tuta/pricing (fetched October 30, 2026)
• Canary Mail — "Best Proton Mail Alternatives in 2026" — https://canarymail.io/blog/protonmail-alternatives (prices checked September 28, 2026; fetched October 30, 2026)
• RigorousThemes — "Tuta vs ProtonMail: Which Encrypted Email Is Better?" — https://rigorousthemes.com/blog/protonmail-vs-tuta/ (fetched October 30, 2026)
• HackMD (@tutanota) — "How to Recover your Tutanota Mail Login Password" — https://hackmd.io/@tutanota/How-to-Recover-your-Tutanota-Mail-Login-Password (fetched October 30, 2026)
• Google Play — "Tuta: Secure & Private Mail" — https://play.google.com/store/apps/details?id=de.tutao.tutanota (fetched October 30, 2026)
• Privacy Guides community — "Tuta Mail should not offer a free tier" (free-account approval reports) — https://discuss.privacyguides.net/t/tuta-mail-should-not-offer-a-free-tier/37543 (fetched October 30, 2026)
• SourceForge — Tutanota comparison notes (password-protected and temporary external mail; free-plan label limit) — https://sourceforge.net/software/compare/Migadu-vs-ProtonMail-vs-Tuta/ (fetched October 30, 2026)
• Ciroapp — "Proton Mail Review 2026: Pricing, Features, Pros & Cons" — https://ciroapp.com/software/proton-mail (fetched October 30, 2026)
• Costbench — "Proton Pricing 2026" — https://costbench.com/software/cybersecurity/proton/ (fetched October 30, 2026)

Frequently asked questions

Is Tuta Mail really free?

Yes. The free plan includes 1 GB of storage, one email address, one encrypted calendar, and the same end-to-end encryption as the paid plans — no credit card and no phone number required. You only pay when you need more storage, aliases, or a custom domain: Revolutionary at €3/month or Legend at €8/month (pricing checked October 30, 2026).

What happens if I lose my Tuta password and my recovery code?

Your mailbox is permanently unrecoverable. Tuta's zero-knowledge encryption means the company never holds a copy of your password and cannot reset it for you — the recovery code shown at signup is the only way back in. Save it in a password manager on day one.

Can I use Tuta with Outlook or Thunderbird?

No. Tuta deliberately supports neither IMAP nor POP3, because those protocols would leave your emails unencrypted on the device. You read Tuta through its web app or its free official desktop and mobile apps.

How do I send an encrypted email to someone who doesn't use Tuta?

When composing, set a password on the message. Your recipient gets a link, enters the password you share with them separately, and reads the message in a secure browser session — no Tuta account needed. You can also make the message temporary.

Is Tuta better than Proton Mail?

It depends on what you value. Tuta's paid plans start cheaper (€3/month vs €3.99/month) and its encryption is post-quantum by default; Proton Mail costs more but bundles a VPN, encrypted drive, and password manager into its Unlimited plan. Both offer genuinely free, encrypted tiers — either beats an ad-scanning inbox.