Keys are generated in your browser. Your password is never transmitted. Messages between Noctmail accounts are end-to-end encrypted with X25519 + ML-KEM-768 and XChaCha20-Poly1305.
End-to-end between Noctmail
Subject, body, and attachments — ciphertext only.
Post-quantum hybrid wrap
Classical X25519 paired with ML-KEM-768 for forward security.