Librem Mail

Install

Android

1. Download and install the Librem Mail application.

2. Download and install the OpenKeychain application. It must also be installed for encrypted messaging to function.

PureOS desktop

1. Download Thunderbird

2. Download Enigmail

Configuration

Username: username@librem.one

Password: Librem One password

	Server	Port	Security
Incoming	imap.librem.one	143	STARTTLS
		993	SSL/TLS
Outgoing	smtp.librem.one	587	STARTTLS
		465	SSL/TLS

Note

The password length limit for SMTP is 127 characters.

Android

1. Launch Librem Mail and enter your info:

   

2. Tap Next and wait until the server info is configured.

3. Enter the name of your account (in our example here: L1) and your name (your name will be displayed to people whom you send emails to):

   

4. Tap on Done. That’s basically everything you need to do! You have configured Librem One email:

   

5. To read your emails, proceed to your inbox (tap on the name of your account which is L1 in our example):

   

iOS

Note

You can use the default Mail app for Librem Mail, but there is no support for PGP encrypted e-mail and temporary e-mails expire after 30 days. With enough support, we will make an iOS client that anyone can use. See the stretch goals on our Librem One crowdfunding page!

1. Open Mail and select Other at the bottom of the screen.

   

2. Fill out the following:

   • Name The name you want people to see when they receive your email

   • Email username@librem.one

   • Password Your Librem One account passphrase

   • Description Default is Librem. This helps differentiate if you have multiple e-mail address setup in Mail

3. Press Next:

   

4. Scroll down a bit; enter in the following for INCOMING MAIL SERVER:

   • Host Name imap.librem.one

   • User Name username@librem.one

   • Password Your Librem One account passphrase

5. Then proceed to fill out the next section.

   

6. Under OUTGOING MAIL SERVER, enter in the following:

   • Host Name smtp.librem.one

   • User Name username@librem.one

   • Password Your Librem One account passphrase

7. Press Next:

   

8. You should now arrive at your new Inbox. Feel free to send a test e-mail to a friend or family member.

   

Librem Mail is now set up and ready to go on your iPhone!

PureOS desktop

Access your Librem Mail account in PureOS using an email client such as Thunderbird.

1. Open Thunderbird by opening the activities window, searching for Thunderbird and clicking the search result:

   

2. Fill in the following information. Leave the option “Remember Password” checked so that Thunderbird does not ask for a password everytime it is launched.

   • Your Name: The name you want people to see when they receive your email

   • Email Address: your_username@librem.one

   • Password: Librem One account password

3. Click “Continue”.

   

4. Next you will be asked to:

   • Fill your the username of your Librem One account

   • Select if you prefer IMAP or POP3

   IMAP stores the original emails remain stored in the server. You can access them from different email clients (Desktop, Phone, Tablet).

   POP3 downloads the email to your local Thunderbird instance and deletes them from the server. Your emails can only be accessed from your local machine. It frees storage space in your email account in the server, but you cannot properly use multiple email clients (Desktop, Phone, Tablet) to access your email.

5. Click “Done” after you fill your username and select your options.

   

6. Librem Mail is now configured in Thunderbird!

Encryption

Android

Note

This guide assumes you that encryption keys have not yet been configured.

1. From the inbox, tap Menu -> Global Settings:

   

2. Open End-to-end encryption category.

3. Enable showing unencrypted signatures:

   

4. Tap on OpenPGP support to enable OpenKeychain:

   

5. Return back to the inbox.

6. Tap Menu -> Account Settings:

   

7. Open the End-to-end encryption category.

8. Enable autocrypt mutual mode:

   

9. Tap to configure end-to-end encryption key:

   

10. To configure enryption keys, tap on This is a new address and a key will be automatically configured:

    

    Your key is now configured.

    Note

    It is highly recommended to add password to the key. For this and more options during key creation please refer to the OpenKeychain manual.

PureOS desktop

Thunderbird will show you first the Enigmail panel which will allow you to setup encryption keys, to be able to use encrypted emails.

• If you do not want to this at this moment ,you can just select “Configure enigmail later”, press “Next” and do it later anytime, by selecting: menu > addons > Enigmail

• If you wish to set it up immediately, select “Start setup now”, press “Next” and you can follow the EFF PGP guide.

After that you can start using Thunderbird with your Librem Mail account in Thunderbird.

Sending email

Android

1. Tap on the compose icon:

   

2. Enter the destination email address, subject, and email body:

   

3. Add attachments as necessary by tapping the paperclip icon.

4. If you have configured your key, it would be a good idea to sign your email.

5. Tap Menu -> Sign-Only to sign this outgoing email with your key:

   

   A popup will explain to you what this actually means. Blue checkmark will show up to inform you that this email will be signed:

   

   If you wish to add CC or BCC field, tap the arrow icon (circled in blue).

6. Tap the send icon (circled in red) when you are ready to send your email:

   

Send encrypted mail

Sharing your public key

Android

For encryption to work, the recipient needs your public GPG key.

1. Launch OpenKeychain and open your key:

   

2. Tap the menu icon:

   

3. Select Advanced:

   

   If you are certain you wish everyone to be able to use your public key, you can publish it a webserver (tap the option in light blue). Otherwise, share it to the recipient via email:

   

4. When you select Librem Mail to share your public key, it will automatically be added to a new email. Insert the recipient’s email address and tap Send:

   

Send and receive encrypted email

Android

In this example, the recipient received our email with our key attached and imported it to their keychain. Now they are able to send us encrypted email:

1. The green padlock icon informs us that this email is indeed encrypted, and only we can read it. Tap the padlock to check this:

   

2. Let’s reply back. First we need to import Haruto’s key to our keychain:

   

3. Compose a response:

   

4. Again, the green padlock icon informs us that this email will be encrypted for Haruto, and only they will be able to decrypt it with their key:

   

5. Tap send (icon circled in blue) when you finish composing the email.

See also

Proceed to Librem Mail and OpenKeychain manuals to see how to fine-tune those apps.

Tips

Android

Cleaner display

If you have only one Librem One account, you can hide unified inbox.

1. Tap Menu -> Settings:

   

2. Check the Hide special accounts option:

   

   It looks much cleaner now:

   

Usage limits

Feature	Limit
Outgoing emails per minute	5
Outgoing emails per day	100
Recipients per email	50
Total upload size per email	50 MB