Security for your business email.
Control for your organization.
Protect account access, review message risks, authenticate your domain, and choose optional email encryption. Oneemail gives users and administrators controls for their different responsibilities.
Protection across your mail system.
Account protection, message checks, and organization controls each play a different part.
Protect the way people sign in.
Two-factor authentication adds a time-based verification code to account sign-in. Dedicated app passwords connect compatible mail clients without sharing your main password.
- TOTP two-factor authentication
- Dedicated app passwords
- Session and device management
- Account recovery and sign-in alerts
What you can do
Enable two-factor authentication, keep recovery material safe, and remove sessions you no longer use.
What you can manage
Give administrative members roles that fit their responsibilities. Keep daily mailbox use separate from administration.
Encryption, with the details made clear.
Transport protection and end-to-end encryption solve different problems. Oneemail supports optional user-key encryption so you can choose an additional layer for compatible email.
OpenPGP and S/MIME key support allows encryption with user keys. End-to-end sending needs compatible recipient keys. Private-key backup accepts passphrase-protected keys, and key discovery helps find recipients’ published keys.
Turning encryption on doesn’t retroactively encrypt older messages or make every future conversation end-to-end encrypted. Keep your passphrase and recovery material safe: losing keys can make encrypted content inaccessible.
Read the security guideChoose the layer
your conversation needs.
- TLS for supported mail transport connections
- Optional user-key encryption for stored mail
- End-to-end sending with compatible recipient keys
- Separate end-to-end encrypted team chat
Encryption availability and behavior depend on your keys, client, organization settings, and the recipient’s setup.
Keep protection close to the way your team works.
Encrypted Chat, conversation-member calls, and permission-based file sharing serve different parts of your working day. Manage devices, check membership, and choose the access each document needs.
Review conversation and call guidanceReview activity. Manage access.
Review sign-in activity, delivery outcomes, and security notifications. Administrators can inspect mail health and audit activity within their permissions.
Security notifications and sign-in signals help you spot activity that deserves attention.
Organization management and everyday mailbox access are separate. Additional encryption is a user-controlled option.
Discuss data handling, retention, backup and recovery requirements, and service terms with the team before choosing your setup.
How does email encryption work?
Oneemail supports optional OpenPGP and S/MIME user-key encryption. End-to-end email sending requires compatible recipient keys and setup; it does not apply automatically to every message or existing mail. Team chat has its own end-to-end encryption, and Drive documents are stored encrypted.
How are my documents and Drive files protected?
Documents stored in Oneemail are protected with end-to-end encryption keys and bank-grade security. Behind the scenes, files are kept on AWS S3 with encryption keys managed in AWS KMS, and strict security enforcement applies to every request. Files are protected in transit and at rest.
Where is my email data hosted?
The Oneemail mail system hosts your mailbox data on servers in Nepal. Your mail data resides within national boundaries, and being close to your team means lower latency and faster speeds when you open, search, and send mail.
Does authentication guarantee that a message is safe?
No. SPF, DKIM, and DMARC help establish how a message relates to its claimed domain. They don’t guarantee that its content, links, or attachments are safe. Use message security information alongside your own judgment.
Can an administrator see everything in my mailbox?
Administrative views are designed to exclude message bodies. Depending on permissions, administrators may access operational message metadata and the attachment library; sensitive access is audited. Optional key-based mail encryption provides separate protection for compatible encrypted content.
Ready to bring your team to Oneemail?
Set up your domain, bring your team, and manage it all from one dashboard. Start free, with no card needed.
- D-U-N-S® verified
- Mail hosted in Nepal
- Encrypted Drive