Security

How your mail is kept safe, in plain words.

Storage

• Mail lives on our own server in the European Union (Spain), not on a public cloud.
• With your OpenPGP key added, every new message is encrypted to that key before it is stored. We cannot read it afterwards.
• Your password is checked by the mail server and stored only as a one-way hash. Our website never keeps it.

Transport

• All connections to Liverado use TLS: the website, webmail and every mail protocol.
• Mail to and from other providers is encrypted in transit whenever the other side supports it.
• Our domain publishes SPF, DKIM and DMARC so others can tell real Liverado mail from forgeries.

Webmail

• Messages are cleaned before display and shown in an isolated frame: no scripts, no forms.
• Remote images are blocked until you choose to load them.
• The website loads nothing from other companies: no analytics, fonts or ad scripts.

Report a vulnerability

Write to security@liverado.com. We answer every report.