One Mail Downloads
One Mail clients for Android, Windows, macOS, Linux, and Ubuntu Touch.
Android
| Label | Version | Build | Date | Size | Notes | |
|---|---|---|---|---|---|---|
| v1.0.3-260812 Latest | 1.0.3 | 10003 | 2026-08-12 | 27.2 MB | Download | |
| v1.0.2-260812 | 1.0.2 | 10002 | 2026-08-12 | 26.2 MB | Download | |
| v1.0.1-260812 | 1.0.1 | 10001 | 2026-08-12 | 25.9 MB | Download |
- FeatureWebmail Settings — account, passphrase, sessions and activity from the sidebar
- FeatureQuick login in the menu — approve a browser sign-in without digging through Settings
- FeatureCompose shows per-attachment upload progress — thin sky bar, percentage and speed while files load or send
- FeaturePhone compose offers Gallery or Files when attaching — multi-select photos and videos from the gallery
- FeatureFiles too large for the 25 MiB send limit become secure download links — One Mail still opens them as normal attachments
- FeatureOpen images and videos in an in-app gallery with pinch-zoom, swipe, scrub and save
- ImprovementMobile compose matches AmL premium style — soft panels, labelled Save draft, matching field sizes, and per-file sky progress while loading or sending
- ImprovementSign-in, splash and sidebar now show the same One Mail app icon as the home screen
- ImprovementCircular codes (sign-in approval and key transfer) now read automatically from the live camera — point and hold, no shutter
- ImprovementSign-in circular code shine sweeps less often so the phone camera can lock between pulses
- ImprovementAdmin DNS check now explains when a DKIM host wrongly resolves to SPF (wildcard CNAME)
- ImprovementAdmin DNS check now fails DKIM while a wildcard CNAME (*.domain → apex) is still live — Gmail keeps reporting "bad version" until it is deleted
- ImprovementInbox and folders feel closer to the AmL family — softer empty states, search, Write button and message cards
- ImprovementOversized attachments warn before send that external recipients will get a secure link instead of an embedded file
- BugfixLive circular-code scan now locks on CameraX stills (EXIF orientation was cropping the wrong region)
- BugfixSign-in and key-transfer circular codes now decode on the phone (decoder was rejecting One Mail headers as invalid)
- BugfixSending a message with a multi-megabyte attachment no longer fails with a generic error (API body limit was 2 MB)
- BugfixCompose now shows a clear size error when a message is too large to send
- BugfixLive scan no longer flashes “That is not a One Mail code” while you are still lining up the camera
- BugfixSaving a draft shows encrypt/upload progress, then returns to the mailbox so Drafts actually lists it
- BugfixOutbound MIME boundaries no longer start with "--", which made some receivers show attachments as empty
- BugfixCompose refuses attachments whose file bytes failed to load, instead of sending JPEG stubs with no content
- BugfixThe server rejects outbound messages whose attachment parts have headers but no body
- BugfixAndroid install and launcher now show the One Mail envelope icon instead of the default Flutter logo
- Note[security] Repeated failed sign-ins lock an account for fifteen minutes, whether the attempts come from one machine or a thousand.
- Note[security] Codes from your authenticator and your recovery codes share that same budget, so a stolen passphrase does not buy unlimited guesses at the second factor.
- Note[security] Guessing at an address that does not exist behaves exactly like guessing at one that does, so nobody can learn which addresses are real by watching the responses.
- Note[security] The mail server refuses connection floods and address-guessing on port 25 before they reach anything expensive.
- Note[security] The administration panel now requires two-factor to be set up, not merely claimed, before it opens at all.
- Note[security] An administrator sees an account's sealed recovery share only while that person's own recovery is waiting on them, and only after confirming with OneAuth.
- FeatureOne Mail is here: end-to-end encrypted mail where the server never holds a key that can read it.
- FeatureSign in by holding your phone up to the screen, with no password to type and nothing to phish.
- FeatureRead, write, search and organise mail offline; everything syncs when you reconnect.
- FeatureMove your identity to a new device by scanning a circular code, without either device touching the network.
- FeatureBring your own domain, with the DNS records generated for you and checked live until they are right.
- FeatureTwo-factor sign-in through OneAuth, with recovery codes for the day the phone is gone.
- FeatureRecover a forgotten passphrase through a quorum ceremony, so no single person can unlock your mail.
- ImprovementAttachments download and resume from where they stopped, so a lost connection costs nothing.
- ImprovementMessages render as text, so a remote image cannot report back that you opened it.
- ImprovementUpdates arrive in the app, verified against a published hash before anything is installed.
- ImprovementActivation setup is centred, with the pairing code the same width as the buttons above it.
- BugfixActivation can mint a fresh OneAuth pairing code when the previous one expires, instead of forcing a whole new invite.
- BugfixReopening an activation link after the passphrase step but before OneAuth is paired resumes enrolment instead of saying the link expired.
- BugfixThe OneAuth pairing step keeps the six-digit field on screen instead of burying it under a full-size code image.
- BugfixOneAuth pairing survives a page refresh and no longer silently swaps the secret after five minutes, which made valid codes look wrong.
Windows
| Label | Version | Build | Date | Size | Notes | |
|---|---|---|---|---|---|---|
| v1.0.3-260812 Latest | 1.0.3 | 10003 | 2026-08-12 | 17.3 MB | Download | |
| v1.0.2-260812 | 1.0.2 | 10002 | 2026-08-12 | 17.2 MB | Download | |
| v1.0.1-260812 | 1.0.1 | 10001 | 2026-08-12 | 17.1 MB | Download |
- FeatureWebmail Settings — account, passphrase, sessions and activity from the sidebar
- FeatureQuick login in the menu — approve a browser sign-in without digging through Settings
- FeatureCompose shows per-attachment upload progress — thin sky bar, percentage and speed while files load or send
- FeaturePhone compose offers Gallery or Files when attaching — multi-select photos and videos from the gallery
- FeatureFiles too large for the 25 MiB send limit become secure download links — One Mail still opens them as normal attachments
- FeatureOpen images and videos in an in-app gallery with pinch-zoom, swipe, scrub and save
- ImprovementMobile compose matches AmL premium style — soft panels, labelled Save draft, matching field sizes, and per-file sky progress while loading or sending
- ImprovementSign-in, splash and sidebar now show the same One Mail app icon as the home screen
- ImprovementCircular codes (sign-in approval and key transfer) now read automatically from the live camera — point and hold, no shutter
- ImprovementSign-in circular code shine sweeps less often so the phone camera can lock between pulses
- ImprovementAdmin DNS check now explains when a DKIM host wrongly resolves to SPF (wildcard CNAME)
- ImprovementAdmin DNS check now fails DKIM while a wildcard CNAME (*.domain → apex) is still live — Gmail keeps reporting "bad version" until it is deleted
- ImprovementInbox and folders feel closer to the AmL family — softer empty states, search, Write button and message cards
- ImprovementOversized attachments warn before send that external recipients will get a secure link instead of an embedded file
- BugfixLive circular-code scan now locks on CameraX stills (EXIF orientation was cropping the wrong region)
- BugfixSign-in and key-transfer circular codes now decode on the phone (decoder was rejecting One Mail headers as invalid)
- BugfixSending a message with a multi-megabyte attachment no longer fails with a generic error (API body limit was 2 MB)
- BugfixCompose now shows a clear size error when a message is too large to send
- BugfixLive scan no longer flashes “That is not a One Mail code” while you are still lining up the camera
- BugfixSaving a draft shows encrypt/upload progress, then returns to the mailbox so Drafts actually lists it
- BugfixOutbound MIME boundaries no longer start with "--", which made some receivers show attachments as empty
- BugfixCompose refuses attachments whose file bytes failed to load, instead of sending JPEG stubs with no content
- BugfixThe server rejects outbound messages whose attachment parts have headers but no body
- BugfixAndroid install and launcher now show the One Mail envelope icon instead of the default Flutter logo
- Note[security] Repeated failed sign-ins lock an account for fifteen minutes, whether the attempts come from one machine or a thousand.
- Note[security] Codes from your authenticator and your recovery codes share that same budget, so a stolen passphrase does not buy unlimited guesses at the second factor.
- Note[security] Guessing at an address that does not exist behaves exactly like guessing at one that does, so nobody can learn which addresses are real by watching the responses.
- Note[security] The mail server refuses connection floods and address-guessing on port 25 before they reach anything expensive.
- Note[security] The administration panel now requires two-factor to be set up, not merely claimed, before it opens at all.
- Note[security] An administrator sees an account's sealed recovery share only while that person's own recovery is waiting on them, and only after confirming with OneAuth.
- FeatureOne Mail is here: end-to-end encrypted mail where the server never holds a key that can read it.
- FeatureSign in by holding your phone up to the screen, with no password to type and nothing to phish.
- FeatureRead, write, search and organise mail offline; everything syncs when you reconnect.
- FeatureMove your identity to a new device by scanning a circular code, without either device touching the network.
- FeatureBring your own domain, with the DNS records generated for you and checked live until they are right.
- FeatureTwo-factor sign-in through OneAuth, with recovery codes for the day the phone is gone.
- FeatureRecover a forgotten passphrase through a quorum ceremony, so no single person can unlock your mail.
- ImprovementAttachments download and resume from where they stopped, so a lost connection costs nothing.
- ImprovementMessages render as text, so a remote image cannot report back that you opened it.
- ImprovementUpdates arrive in the app, verified against a published hash before anything is installed.
- ImprovementActivation setup is centred, with the pairing code the same width as the buttons above it.
- BugfixActivation can mint a fresh OneAuth pairing code when the previous one expires, instead of forcing a whole new invite.
- BugfixReopening an activation link after the passphrase step but before OneAuth is paired resumes enrolment instead of saying the link expired.
- BugfixThe OneAuth pairing step keeps the six-digit field on screen instead of burying it under a full-size code image.
- BugfixOneAuth pairing survives a page refresh and no longer silently swaps the secret after five minutes, which made valid codes look wrong.
macOS
| No releases published yet. |
Linux
| No releases published yet. |
Install on Ubuntu Desktop
- Download the x64 tar.gz.
- Extract the app folder to a permanent location (e.g.
~/apps). - Run the bundled launcher once — it installs an app-drawer entry with the icon automatically.
- In-app updates use the bundled updater (Settings → App updates).
Ubuntu Touch
| No releases published yet. |
One Mail
Zero-knowledge email. The server cannot read your mail. Install the client for your device, then sign in at onemail.aml.one.