Cock.li vs VibeMail
Cock.li
cock.liVibeMail
vibemail.aiSide by side
| Figure | Cock.li | VibeMail |
|---|---|---|
| Price from | Free | $2.99/mo |
| Free plan | Yes | Yes |
| Free trial | — | — |
| Open source | — | — |
| Web | Yes | Yes |
| iOS | Yes | Yes |
| Android | Yes | Yes |
| API | — | Yes |
| Plans published | 2 | 4 |
| Spec score · Private Email Services | 8.2 (#12) | 7.8 (#22) |
| Encryption | The privacy policy says account information is encrypted server-side, while mail may travel without encryption when a TLS connection is unavailable or not attempted by the other mail server. | Message bodies are encrypted at rest and protected in transit, and the maker says it cannot read mail sealed with a password-derived key. |
| Mail protocols | The site lists IMAP and POP for mail.cock.li. | VibeMail supports IMAPS on port 993, submission on port 587, and POP3S on port 995. |
| Password recovery | Cock.li says it does not provide password resets, and losing the password means losing the ability to control the account. | The maker says mail cannot be recovered if a user forgets their password without setting up recovery; it recommends a recovery address and twelve-word recovery phrase. |
Plans
In their own words
Cock.li
Cock.li is a public email host from Cock.li, founded in 2013, offering email accounts and webmail through the web, Android, and iOS. Its services are free, with the Free plan listed at free. Mail access includes IMAP and POP at mail.cock.li, while XMPP is listed at xmpp.cock.li. Registration does not require personally identifiable information. New accounts cannot send mail until the user completes a browser proof-of-work challenge that uses a few minutes of CPU time. Cock-mail is described as an open-source, client-side webmail client connecting directly to the IMAP server over websockets, but its 0.0.1 alpha release lacks major features including SMTP. The privacy policy says registration details, stored mail, XMPP data, and 48–72 hours of IMAP and SMTP logs may be retained. Email is automatically scanned for spam. Account information is encrypted server-side, but mail may travel without encryption when TLS is unavailable or not attempted.
VibeMail
VibeMail provides encrypted private email with multiple addresses, custom domains, and a transactional email API. It runs on Android, iOS, web, and through an API. Message bodies are encrypted at rest and in transit; the maker says it cannot read mail sealed with a password-derived key. Each alias has its own encryption identity. VibeMail says it shows no ads, does not profile users, and does not train models on customer mail. Incoming mail is scanned for spam and malware before encryption. The API supports templates, webhooks, delivery tracking, and suppression handling, with SDKs for TypeScript, Python, Go, and Rust, plus MCP and REST access. IMAPS, submission, and POP3S are supported, and the maker says Apple Mail, Gmail, and Outlook on mobile can connect through IMAP and SMTP. The free plan costs nothing forever with one encrypted address, 500 MB storage, and web access. Paid plans start at $2.99 a month; overage sends cost $0.60 per 1,000.