Back to Compass
Path consoleCommunicatemedium risk

Secure email and files

Keep email, documents, and notes encrypted so providers and sync services see less by default.

45–60 minutesAnyone moving sensitive email, docs, and notes off mainstream cloud suites 1 starting tool

Target outcome

Sensitive email and files live in an encrypted workspace separate from mainstream suites

Do this first · quick win

If you only do one thing today: create a Skiff account, enable 2FA, and move one sensitive document there.

Setup queue

Start with verified tools

Compare the fit, keep the ones you want in My Stack, then open the verified setup guidance.

Skiff

applications

Choose Skiff for encrypted email, docs, and notes in one workspace with modern collaboration features.

applicationsSunset
Visit project
More compatible tools (5)

Vector Privacy

applications

Vector Privacy is an open-source ecosystem that is focused on ensuring the human right to privacy through encrypted communication tools. Vector Messenger is a decentralized communication platform built on the Nostr Protocol, offering no-compromise encryption with zero metadata leakage and plausible deniability for all content, including texts, media, voice notes, and files, adhering to the NIP-17 standard. It natively integrates BIP-39, allowing every Vector account to function as a crypto wallet and vice versa, streamlining tasks like address sharing and payments through compatibility with native wallets like MPW. Vector leverages local, private, device-powered AI to provide practical features such as voice message transcription, language translation, and meme gif search via a decentralized relay-based index. Its resilience is ensured by community-run Nostr relays, eliminating downtime, and its fully open-source codebase—from infrastructure to protocol specs—avoids proprietary lock-in, making it unkillable and transparent. Open-source technology developed by Formless Labs.

applicationsOpen sourcePrivacy by default
Visit project

WireMin

social-and-communications

WireMin is a decentralized social network that puts power back in the hands of the people, not a central authority. Built for total freedom and privacy, there are no central servers or metadata collection. All messages are end-to-end encrypted and stored on users’ devices, ensuring that no data can be collected or breached. The network is powered by peers with equal rights, meaning no one can monitor, censor, or sell ads on the network. Features: 1. Anonymity: No Email/Phone number needed 2. Private chat: All messages are end-to-end encrypted, with optional self-disappearance 3. Rich Media: Send files of any size, or long videos 4. Global Connection: Chat/Feed Spaces, Voice/Video Calls, Large File/Video Sharing 5. In-app Crypto Wallet: Instant, fee-free crypto transfers with self-custodial ID

social-and-communicationsOpen sourcePrivacy by default
Visit project

Anytype

infrastructure

local-first, E2E encrypted software designed as a secure place to create and store digital assets. You can use Anytype to create and connect your tasks, notes, ideas, documents, workflows, and more

infrastructureEvidence pending
Visit project

Belnet

infrastructure

BelNet is an encrypted connection to the device and network through the internet.

Decentralized privacy network protocolOpen sourcePrivacy by default
Visit project

solDM

social-and-communications

solDM — a serverless, E2E-encrypted private chat with zk compression & quantum resistance on Solana (powered by Light Protocol)

social-and-communicationsOpen sourcePrivacy by default
Visit project

Understand · act · verify

Your path

Nothing is detected automatically. You decide when a step is done or needs another review.

  1. 1

    Create a Skiff account on a device you trust — use a strong password and enable two-factor authentication.

    Step 1 · Not started

    • Skiff account created: You can log in to Skiff web and mobile with 2FA enabled.
  2. 2

    Import or forward one mailbox you use for sensitive threads; avoid mixing personal marketing signups in the same inbox.

    Step 2 · Not started

    • Sensitive mail routed: At least one sensitive thread arrives in Skiff instead of your old provider.
  3. 3

    Move a small set of sensitive documents into Skiff Drive and confirm encryption works on mobile and web.

    Step 3 · Not started

    • Files migrated: A sensitive document opens encrypted in Skiff on two devices.
  4. 4

    Share one folder with a collaborator using Skiff permissions instead of public links or mainstream cloud shares.

    Step 4 · Not started

  5. 5

    Revoke old sharing links from Gmail Drive, Dropbox, or Notion for the files you migrated.

    Step 5 · Not started

  6. 6

    Document recovery steps — backup codes, recovery email policy, and who holds admin access.

    Step 6 · Not started

How you know it worked

  • Sensitive email and files live in an encrypted workspace separate from mainstream suites
  • Sharing uses permissioned links instead of public cloud URLs
  • Old provider links are revoked for migrated content

Watch out

Verify Skiff's current availability and roadmap before a full migration — privacy tools sunset.

Autofill and synced contacts can leak recipient lists to your OS cloud account.

Forwarding all mail indefinitely duplicates metadata at both providers.

Key terms
E2EE email
Email encrypted so the provider cannot read message bodies at rest — Skiff encrypts client-side before sync.
Recovery email
A backup address used to reset passwords — using your personal Gmail here can link personas.