Mailvelope

mailvelope.com
Mailvelope

Mailvelope is an addon for email applications, that makes using PGP very easy for beginners. You can use the hosted version for free, or opt to host your own instance. Works with Gmail, Yahoo, Outlook, GMX, Posteo, Web.de, FreeNet.de, Mailbox.org and many others.

Security Audited Open Source

Mailvelope Source Code

Author

mailvelope

Description

Browser extension for OpenPGP encryption with Webmail

Homepage

License

AGPL-3.0

Created

24 Aug 12

Last Updated

08 Jun 26

Latest version

v6.2.1

Primary Language

JavaScript

Size

38,407 KB

Stars

1,824

Forks

222

Watchers

1,824

Language Usage

Language Usage

Star History

Star History

Recent Commits

  • Thomas Oberndörfer (16 Jan 26)

    Release v6.2.1

  • Thomas Oberndörfer (16 Jan 26)

    Fix browser detection for Chrome 144 compatibility

  • Thomas Oberndörfer (18 Oct 25)

    Release v6.2.0

  • Thomas Oberndörfer (10 Oct 25)

    Normalize armored message in decrypt container

  • Thomas Oberndörfer (15 Sept 25)

    Add mail.de to authorized domains for client-API

  • Thomas Oberndörfer (15 Sept 25)

    Remove De-Mail providers from default authorized domain list

  • Thomas Oberndörfer (15 Sept 25)

    Add new mailbox.org subdomain to defaults

  • Thomas Oberndörfer (27 Aug 25)

    Fix content script injection after domain authorization request Bug introduced with v5.2, the authorization popup needs to be closed before script injection otherwise a call to mvelo.tabs.query will target the popup instead of the main browser window.

  • Thomas Oberndörfer (11 Jul 25)

    Add DecryptController test coverage and clean up test infrastructure

  • Thomas Oberndörfer (02 Jul 25)

    Add EditorController test coverage and remove duplicate test coverage

  • Thomas Oberndörfer (02 Jul 25)

    Add providerSpecific test coverage with unit and integration tests

  • Thomas Oberndörfer (02 Jul 25)

    Add ExtractFrame test coverage with unit and integration tests

  • Thomas Oberndörfer (30 Jun 25)

    Add comprehensive EncryptFrame test coverage with unit and integration tests - Add Jest unit tests for EncryptFrame component lifecycle and interactions - Add Puppeteer integration tests for shadow DOM rendering and browser behavior - Create integration-specific mocks for EventHandler and Provider components - Configure Jest to run integration tests sequentially to avoid Puppeteer conflicts - Add module path ignoring to prevent duplicate mock warnings between test suites - Establish test harness with proper mock management and auto-reset functionality

  • Thomas Oberndörfer (27 Jun 25)

    Add integration test infrastructure with Puppeteer support

  • Thomas Oberndörfer (24 Jun 25)

    Refactor test structure to separate unit, integration, and e2e tests

  • Thomas Oberndörfer (23 Jun 25)

    Replace createMockPort factory with proper EventHandler module mock to improve test architecture and fix timing issues.

  • Thomas Oberndörfer (22 Jun 25)

    Restructure browser environment mocking for Jest tests - Create separate DOM environment setup for React component tests (app/, components/) - Create service worker environment setup for background script tests (controller/, lib/, modules/) - Add auto-detection in jest.setup.js to apply appropriate environment by file path - Replace deprecated browser-env.js and chrome.js with targeted mock implementations - Provide complete Chrome extension API mock for service worker context - Include all necessary service worker globals (fetch, crypto, localStorage, etc.) - Maintain compatibility with existing port-factory.js mock system

  • Thomas Oberndörfer (18 Jun 25)

    Migrate test infrastructure from Karma to Jest - Replace Karma test runner with Jest for improved performance and modern testing - Add comprehensive Jest configuration with jsdom environment - Create mock infrastructure for browser APIs, Chrome extension APIs, and port communication - Rewrite all component tests using React Testing Library best practices - Add custom Jest matchers for PGP and port communication testing - Update package.json with new test scripts and dependencies - Remove legacy Karma configuration and test files - Implement proper test cleanup to prevent resource leaks

  • Thomas Oberndörfer (12 Jun 25)

    Rewrite editor and recipient-input component tests

  • Thomas Oberndörfer (09 Jun 25)

    Enhance test infrastructure and rewrite component tests - Rewrite KeyServer tests with comprehensive RTL coverage (24 tests) - Rewrite ActionMenuWrapper tests with comprehensive RTL coverage (29 tests) - Enhance createMockPort utility with error simulation capabilities - Add user-event dependency and update test configuration Both test files now follow proper RTL patterns with unit tests, integration tests, error states, and authentic user interactions using userEvent.

  • Thomas Oberndörfer (05 Jun 25)

    Update .gitignore. Remove old Travis CI files.

  • Thomas Oberndörfer (05 Jun 25)

    Fix client-API integration tests

  • Thomas Oberndörfer (04 Jun 25)

    Centralize mockPort function into configurable utility

  • Thomas Oberndörfer (04 Jun 25)

    Migrate from Enzyme to RTL

  • Igor (04 Jun 25)

    Create private key backup (#889)

  • Thomas Oberndörfer (20 May 25)

    Release v6.1.0

  • Thomas Oberndörfer (05 Apr 25)

    Migrate Firefox to manifest v3

  • Thomas Oberndörfer (24 Mar 25)

    Deactivate demo site in default authorized domain list

  • Thomas Oberndörfer (24 Mar 25)

    Improve key type validation during key import

  • Thomas Oberndörfer (19 Mar 25)

    Fix weak validation of WKD blocklist

Mailvelope Security

2.9/10

Repo Security Summary

Updated 01 Jun 26

  • Code-Review 1/10
  • Maintained 2/10
  • Token-Permissions N/A
  • Dangerous-Workflow N/A
  • Packaging N/A
  • CII-Best-Practices 0/10
  • Binary-Artifacts 10/10
  • Pinned-Dependencies N/A
  • Security-Policy 0/10
  • License 10/10
  • Fuzzing 0/10
  • Branch-Protection 0/10
  • Signed-Releases 6/10
  • SAST 0/10

Mailvelope Website

Website

Mailvelope: PGP for Gmail & Webmail

Browser extension that allows to exchange encrypted emails following the OpenPGP encryption standard

Redirects

Redirects to https://mailvelope.com/en

Security Checks

All 65 security checks passed

Server Details

  • IP Address 185.26.156.95
  • Hostname giclas.uberspace.de
  • Location Wieseck, Hessen, Germany, EU
  • ISP uvensys GmbH
  • ASN AS58010

Associated Countries

  • DE DE
  • AT AT
  • US US

Safety Score

Website marked as safe

100%

Blacklist Check

mailvelope.com was found on 0 blacklists

  • AntiSocial Blacklist
  • Artists Against 419
  • Badbitcoin
  • Bambenek Consulting
  • CERT Polska
  • CoinBlockerLists
  • CRDF
  • CryptoScamDB
  • EtherAddressLookup
  • EtherScamDB
  • Fake Website Buster
  • MetaMask EthPhishing
  • NABP Not Recommended Sites
  • OpenPhish
  • PetScams
  • PhishFeed
  • PhishFort
  • Phishing.Database
  • PhishStats
  • PhishTank
  • Phishunt
  • RPiList Not Serious
  • Scam.Directory
  • SecureReload Phishing List
  • Spam404
  • StopGunScams
  • Suspicious Hosting IP
  • ThreatFox
  • ThreatLog
  • TweetFeed
  • URLhaus
  • ViriBack C2 Tracker

Website Preview

Website preview

Mailvelope Reviews

More PGP Managers

About the Data: Mailvelope

API

You can access Mailvelope's data programmatically via our API. Simply make a GET request to:

https://api.awesome-privacy.xyz/v1/services/mailvelope

The REST API is free, no-auth and CORS-enabled. To learn more, view the API Docs or read the API Usage Guide.

Share Mailvelope

Help your friends compare PGP Managers, and pick privacy-respecting software and services.
Share Mailvelope and Awesome Privacy with your network!

View PGP Managers (8)