Open Source & Self-Hosted

All your email.
One beautiful home.

MailFlow is a self-hosted, open-source webmail client. Connect Gmail, iCloud, Outlook, and any IMAP account — then read, search, and reply from one fast, clean browser interface you control completely.

Get Started on GitHub Explore features →

Free to Self-Host 2FA Included Docker Ready Self-Hosted

mailflow.sh

Inbox 4

Starred

Sent

Accounts

work@gmail

me@icloud

outlook

GitHub 2m

PR #247 merged into main

Your pull request has been merged by...

Stripe 15m

Payout of $1,240 sent

Your payout is on its way to your bank...

Vercel 1h

Deployment succeeded

mailflow-prod is now live at...

Notion 3h

5 updates in your workspace

Team members have made changes to...

PR #247 merged into main

GitHub

[email protected]

View pull request

Everything you need.
Nothing you don't.

Built for people who want a beautiful webmail experience without handing their inbox to a third party.

Unified Inbox

Every account in a single, chronological feed. Stop switching tabs and start reading.

Any IMAP Server

Gmail, iCloud, Outlook, Fastmail, or your own mail server. If it speaks IMAP, it works.

Two-Factor Auth

TOTP 2FA with Google Authenticator, Authy, or any compatible app. Your accounts stay yours.

Fully Self-Hosted

Your webmail runs on your own server. No third-party clouds, no data harvesting, no subscriptions.

Themes & Layouts

Dark mode, light mode, multiple color schemes, typography controls, and flexible layouts.

Full-Text Search

Instant search across every connected account simultaneously, powered by PostgreSQL.

Real-Time Sync

New mail appears the instant it arrives via WebSocket. No polling, no manual refresh.

One-Command Deploy

Docker Compose gets you from zero to a running inbox in under five minutes.

Rich Text Compose

Full WYSIWYG editor with font controls, text and highlight color, tables, emoji, links, and file attachments.

Conversation Threads

Messages grouped into reply chains. Sent replies appear inline so you never lose context.

Installable PWA

Install MailFlow as an app on desktop or mobile. Push notifications work out of the box.

Keyboard First

Full shortcut set for compose, navigation, and actions — all remappable per user. Plus a Cmd+K command palette.

Roadmap

Where we're headed.
Built in the open.

MailFlow ships quality over velocity. This reflects what's in focus — updated as things move.

Now

In active development

Actively planned

Later

Longer horizon

No dates, no commitments — priorities shift as the community's needs become clear. Suggest something →

Gallery

See it in action.
Your inbox, your way.

Flexible themes, layouts, and typography — all from one clean, fast interface.

mailflow.sh

Theme

Light theme

Theme

Catppuccin theme

Theme

Gruvbox theme

Compose

Interface

Collapsed sidebar

Settings

Account management

Interface

Folder navigation

Settings

Appearance settings

Settings

Layout options

From zero to inbox
in three steps.

No complex configuration. No ops expertise required.

Download & configure

Grab the compose file and fill in four secrets. No cloning or building required — pre-built images are pulled automatically.

terminal

# Download compose file and config template
curl -o docker-compose.yml https://raw.githubusercontent.com/maathimself/mailflow/main/docker-compose.ghcr.yml
curl -o .env               https://raw.githubusercontent.com/maathimself/mailflow/main/.env.example

# Fill in APP_URL, SESSION_SECRET, DB_PASSWORD, ENCRYPTION_KEY

Launch with Docker

One command starts everything — the app, database, Redis, and nginx. Available on port 443 (self-signed HTTPS) and port 80 by default.

terminal

# Pull images and start all services
docker compose up -d

# Serves HTTPS:443 (self-signed) and HTTP:80 by default

Add your accounts

settings → accounts

# Supported providers
Gmail        → App Password
iCloud Mail  → App-Specific Password
Outlook      → OAuth2 / App Password
Custom IMAP  → Any server

Security

What's actually
under the hood.

Standard hardening out of the box — bcrypt passwords, rate-limited auth, HttpOnly session cookies, HTML email sanitization, and TLS via self-signed cert or automatic Let's Encrypt with the built-in Caddy profile.

It's open source, so nothing is hidden. Read the code if you want to verify any of it.

View source →

bcrypt password hashing Cost factor 12 — resistant to brute-force attacks

TOTP two-factor authentication Works with any TOTP app (Google Authenticator, Authy)

Rate-limited authentication 10 attempts per 15 minutes per IP address

Hardened session cookies HttpOnly, Secure, SameSite=Lax — stored in Redis

HTML email sanitization All email HTML sanitized before rendering — no XSS

TLS 1.2/1.3 only Modern cipher suite, HSTS, and full security headers

Invite-only registration Lock down your instance — only allow invited users

Open source & auditable Every line of code is public — no black boxes

Quick Start

Deploy in minutes.

A server with Docker installed is all you need. Works with a reverse proxy, or add automatic Let's Encrypt HTTPS with one extra flag.

bash

# 1. Download compose file and config template
curl -o docker-compose.yml https://raw.githubusercontent.com/maathimself/mailflow/main/docker-compose.ghcr.yml
curl -o .env               https://raw.githubusercontent.com/maathimself/mailflow/main/.env.example

# 2. Configure — four required values in .env:
#    APP_URL         →  https://your-domain-or-ip
#    SESSION_SECRET  →  openssl rand -hex 32
#    DB_PASSWORD     →  openssl rand -hex 16
#    ENCRYPTION_KEY  →  openssl rand -hex 32

# 3. Launch (pre-built images, no build step)
docker compose up -d

Then open your server's address in a browser. The first account registered becomes admin.

View full documentation → Report an issue

Licensing

Free to self-host.
Always.

MailFlow is and always will be free for personal use. Commercial deployments require a one-time license.

Personal & Open Source

Free

forever

Self-host for yourself, your family, or any non-commercial purpose under the AGPL-3.0 license.

All features included
Unlimited accounts
Full source code access
Community support

Get started on GitHub →

Commercial

Business Use

$500

per installation · one-time

For businesses, managed hosting, or any deployment where AGPL obligations cannot be met.

All features included
No AGPL obligations
Modify & deploy privately
Direct email for questions, feedback & business enquiries

Why the change? MailFlow has always been free for individuals and always will be. This dual-license model protects the project from commercial exploitation — if a business wants to build on MailFlow, a small license fee helps fund continued development for everyone. Questions? Open an issue, get in touch, or read the full license.

All your email.
One beautiful home.

Everything you need.
Nothing you don't.

Unified Inbox

Any IMAP Server

Two-Factor Auth

Fully Self-Hosted

Themes & Layouts

Full-Text Search

Real-Time Sync

One-Command Deploy

Rich Text Compose

Conversation Threads

Installable PWA

Keyboard First

Where we're headed.
Built in the open.

See it in action.
Your inbox, your way.

From zero to inbox
in three steps.

Download & configure

Launch with Docker

Add your accounts

What's actually
under the hood.

Deploy in minutes.

Free to self-host.
Always.

MailFlow,
fully hosted.

Supported by the community

All your email. One beautiful home.

Everything you need.Nothing you don't.

Unified Inbox

Any IMAP Server

Two-Factor Auth

Fully Self-Hosted

Themes & Layouts

Full-Text Search

Real-Time Sync

One-Command Deploy

Rich Text Compose

Conversation Threads

Installable PWA

Keyboard First

Where we're headed.Built in the open.

See it in action.Your inbox, your way.

From zero to inboxin three steps.

Download & configure

Launch with Docker

Add your accounts

What's actuallyunder the hood.

Deploy in minutes.

Free to self-host.Always.

MailFlow,fully hosted.

Supported by the community

All your email.
One beautiful home.

Everything you need.
Nothing you don't.

Where we're headed.
Built in the open.

See it in action.
Your inbox, your way.

From zero to inbox
in three steps.

What's actually
under the hood.

Free to self-host.
Always.

MailFlow,
fully hosted.