FAQ

Common questions about xail.me.

Short answers to the questions people ask before signing up. Anything not covered here goes to /docs or to the support page.

What it is

Is xail.me a normal email service?

Yes. xail.me is a normal email service: send and receive mail through a web client, with folders, search, contacts, attachments, signatures, and per-recipient junk and blocklists. The difference from other email services is that the stored copy on the server is encrypted at rest and decrypted in the browser.

How do I send and receive mail?

Sign in at my.netquirk.com/login, open the /mail inbox, and use the composer for outgoing mail. Inbound mail addressed to your xail.me address is delivered to the same inbox.

Can I use my own email client (Thunderbird, Mail.app)?

xail.me is a web mail service. You read and write your mail in the browser at /mail, and that is where the key which opens your messages is derived from your password. There is no IMAP or JMAP endpoint to point another mail app at, so Thunderbird and Mail.app cannot open an xail.me mailbox.

Sign-in and accounts

Where do I sign in?

Sign-in happens on my.netquirk.com/login. The same my.netquirk.com account signs you in to xail.me and manages your plan.

How is my password used?

Your password is the key to your mailbox. The web client uses it to derive the key that opens your stored mail locally; the password is checked at sign-in and never reused for any other service.

Can I add two-factor authentication?

Yes. The /settings page supports a second factor from any standard authenticator app: enrol, verify, and disable in one place.

How do I close my account?

The close-account control on the /settings page deletes your account and the stored mail after a re-entry of your password.

Storage and encryption

What does the server see?

The server sees the routing metadata every mail system needs to deliver and list mail: which account the mail belongs to, the sender and recipient addresses, when a message arrived, which folder it sits in, and the byte length of the envelope. The server does not see the words in the body, the words in the subject, or the bytes of any attachment. The full list is on the security model page.

Where is the decryption key?

In your browser. The key never leaves the device that derives it. The web client re-derives the key from your password each time you open the mailbox on a new device; the stored copy on the server cannot be read without the key on that device.

What happens if I forget my password?

Because the key is derived from the password and the server does not hold the key, a forgotten password means the stored mail cannot be opened on a new device. If you are already signed in on a device, the open session keeps working until you sign out. Plan for a password manager the same way you would for any other account.

Is mail backed up?

The service runs on managed storage; backups are part of the managed storage posture, not a per-account feature. A failure on the storage layer does not expose your stored mail because the stored copy is ciphertext.

Plans and pricing

What plans are there?

Two plans: Free and Paid. Both give you a working xail.me mailbox with the same at-rest encryption, the same web client and the same sign-in through my.netquirk.com. The Free plan carries 100 MB of attachment storage. The Paid plan is billed monthly or yearly and carries the attachment-storage allowance that comes with the plan you buy. The prices, the signup and the billing history live on my.netquirk.com, and the /pricing page compares the two.

Where do I see the price?

Plan prices live on my.netquirk.com; the /pricing page lists what each plan includes and links to the current prices and signup.

Can I bring my own domain?

Your mailbox is an xail.me mailbox. Mail arrives at the xail.me address on your account, and a domain you own is not attached to it. If you need to receive mail at your own domain, ask on my.netquirk.com what the service supports for your plan.

Support

How do I get help?

Account and billing questions go through my.netquirk.com support. Product questions about the web client are answered on the /docs pages.

Where do I report abuse?

Report abuse from the same page you use for support on my.netquirk.com; include the full message and headers so the abuse team can act on it.

Set a PIN

Lock the app after a period of inactivity. The PIN is held locally only and never leaves this device.