Open source, on every device
Your domain. Your inbox. Every device.
Native apps for macOS, Windows, Linux, Android, and iOS. Encrypted storage, IMAP, POP3, CalDAV, and CardDAV, all against your own domain.
Not your device? Pick one
- v0.14.1Latest release
- 5Platformlar
- BUSL-1.1Source available
Masaüstü
Built for the machine you work on.
Every desktop build carries a signed auto updater, so you stay current without coming back here.
macOS
macOS 10.15 or laterYakında gelecekHomebrewMac App Store
Windows
Windows 10 or later- Installers are not code-signed yet, so SmartScreen warns on first run: choose More info, then Run anyway. Check the SHA-256 until the certificate lands.
- No .msi for ARM64; the .exe installer covers it.
Yakında gelecekwingetMicrosoft Store
Linux
GTK with WebKit2GTK 4.1- 64-bitRuns without installingAppImage89.3 MB
- 64-bitDebian, Ubuntu, Mint.deb15.7 MB
- ARM64Debian, Ubuntu, Mint.deb14.8 MB
- 64-bitFedora, RHEL, openSUSE.rpm15.7 MB
- ARM64Fedora, RHEL, openSUSE.rpm14.8 MB
- 64-bitSnap store packageSnap145 MB
- ARM64Snap store packageSnap136 MB
- No AppImage for ARM64. The .deb and .rpm builds update themselves through the in-app updater; the Snap updates through snapd.
Yakında gelecekSnap Store
Mobil
The same mailbox in your pocket.
Installed directly rather than through a store, so you get the build exactly as it left CI.
Android
Android 7.0 or later- Android packageInstalls straight from your browser.apk189 MB
- F-Droid buildReproducible, for the F-Droid clientF-Droid187 MB
- Android asks you to allow installs from your browser the first time.
- ObtainiumPaste as the app source in Obtainium and it tracks every release
https://github.com/forwardemail/mail.forwardemail.net
Yakında gelecekGoogle PlayF-Droid repository
iOS
iOS 15 or later- The iOS build is not signed for direct install. Sideload it with AltStore, Sideloadly, or Xcode.
Yakında gelecekApp Store
Verify before you install
Check what you downloaded.
Every release publishes a checksum for each file. Compare the one you got against the published list, and it either matches or it does not.
shasum -a 256 Forward.Email_0.14.1_aarch64.dmg- Signed updatesDesktop builds carry a minisign signature the auto updater checks against the key below before it applies anything.
- Built in the openEach file here is the artifact a public CI run produced from a public commit, and the run attests to it.
- Read the sourcemail.forwardemail.net
Update signing key
The auto updater applies only updates signed by this minisign key. It is the key in the app's own source, so the two should match.
RWQdtE/QeWn2e5xe8IxDaGxSQrQuCjSGQmrkN0c7errWT1zV8niot6IABuild provenance
Every installer carries SLSA provenance on Sigstore's public transparency log, tying it to the CI run and commit that built it. Check one with the GitHub CLI:
All attestationsgh attestation verify Forward.Email_0.14.1_aarch64.dmg --owner forwardemailF-Droid repository
The repository index is signed with its own key. Its URL and certificate fingerprint appear here when it goes live, so a client can pin it.