Proton vs iCloud vs Fastmail: How to Choose a Private Email

Quick verdict: if nobody but you should be able to read your mail, choose Proton Mail. If you live on iPhone and Mac and want private-enough mail at the lowest extra cost, choose iCloud Mail. If you want one well-run private mailbox that works in any app, with your own domain and plenty of aliases, choose Fastmail.

The three are not three flavours of the same product. Proton is built so the provider cannot read your stored mail. Fastmail and iCloud encrypt your mail in transit and on their servers but hold the keys, which is what lets them offer open IMAP, server-side search and instant setup in any email app. Neither of those two runs ads against your inbox. So the real question is not which one is most private, but how much of the ordinary email workflow you are willing to give up for the strongest guarantee.

• Proton Mail: nobody but you can read stored message bodies. You pay for it with Proton Mail Bridge for outside apps (paid plans only) and on-device search.
• iCloud Mail: free 5 GB with an Apple Account, iCloud+ adds Hide My Email and a custom domain. Not end-to-end encrypted, even with Advanced Data Protection.
• Fastmail: paid only with a free trial, no ads, full IMAP/SMTP, strong custom domains and Masked Email. Not end-to-end encrypted in its own apps.

Proton vs iCloud vs Fastmail at a glance#

Here is the head-to-head on what decides it in practice. We have left prices out on purpose: all three change plans and prices often, so the table shows the shape of each offer and you should check the current number on each provider's own pricing page. Read the table as a map of trade-offs, not a scoreboard.

Which private email provider should you choose?#

Find the row that sounds like you. Notice that for most rows the answer is not the one with the most encryption: if your real goal is email that is not mined for ads, all three clear that bar and Proton's extra protection costs you convenience you may not need.

Two tie-breakers. If you want a custom domain, aliases and any email app working together with no extra software, that is Fastmail's sweet spot. And if you are not sure your needs justify Proton's friction, they probably do not: most people who ask for the most private email really want email that is not mined, and iCloud or Fastmail delivers that with no bridge.

Only weighing Fastmail against Proton? We cover that head-to-head in depth elsewhere: see Fastmail vs Proton Mail for custom domains, Proton vs Fastmail for IMAP access and Fastmail vs Proton Mail for business.

Proton Mail vs iCloud Mail: which is more private?#

Proton Mail is more private than iCloud Mail, and it is not close. Proton stores your message bodies with zero-access encryption, so Proton cannot read them, and mail between Proton accounts is end-to-end encrypted by default. Apple says plainly that iCloud Mail does not use end-to-end encryption because it has to interoperate with the global email system, and that stays true even if you turn on Advanced Data Protection: Mail, Contacts and Calendars keep Apple-held keys.

Where iCloud wins is convenience. It is already set up on every iPhone and Mac, it works in Apple Mail with no extra software, and Hide My Email is built into Safari and Sign in with Apple, so creating a throwaway address for a new site takes one tap. Proton has hide-my-email aliases too on its paid plans, but on Apple devices iCloud's version is more seamless.

A common mix-up in searches for Apple Mail vs Proton Mail: Apple Mail is an app, iCloud Mail is the provider. You can read iCloud Mail in Apple Mail, and you can also read Proton Mail in Apple Mail on a Mac by running Proton Mail Bridge. Choosing Proton does not stop you using Apple's app on the desktop; it changes who can read the stored mail.

Verdict: pick Proton if your threat model includes the provider itself, a server breach or a legal demand for readable mail. Pick iCloud if you want ad-free mail that just works on Apple hardware and you are comfortable with Apple holding the keys. Both are honest about what they do.

Fastmail vs iCloud Mail: which is better?#

On privacy, Fastmail and iCloud Mail sit in the same place: both encrypt in transit and on their servers, both hold the keys, neither runs ads. The difference is control and platform. iCloud is the better choice if you are all-Apple and want the least setup. Fastmail is the better choice if you use Windows or Android, want several custom domains, catch-all addresses, rules and Masked Email that works with password managers. For a deeper look, read Fastmail vs iCloud Mail for Apple users.

What does "private email" actually mean?#

The word covers three different things. First, no ad targeting: your mail is not mined to build an advertising profile. All three providers here clear that bar. Second, encryption in transit and at rest: mail is encrypted on the wire and on the provider's disks, which protects against interception and stolen hardware, but the provider holds the keys so it can run server-side search and spam filtering. Fastmail and iCloud work this way. Third, end-to-end or zero-access encryption: only you hold the keys, so the provider cannot read the stored message bodies. That is Proton.

Even Proton cannot hide everything, because email has to interoperate with the open mail system. Proton's own support pages say subject lines are not end-to-end encrypted, and its privacy policy lists sender and recipient addresses, subjects and send times among the metadata it can access. Mail you send to a non-Proton address is not end-to-end encrypted unless you use Proton's password-protected messages.

Proton Mail: the most private, with trade-offs#

If your single most important requirement is that no one but you can read your mail, Proton Mail is the answer. It is based in Switzerland, says it only responds to official requests from Swiss authorities, and its zero-access design means what sits on its servers is ciphertext it cannot decrypt. That makes it the choice for journalists, activists, people handling sensitive information, and anyone who wants a technical guarantee rather than a promise.

The trade-offs follow directly from that design. Because Proton cannot read message bodies on its servers, content search is built from a local index on your device rather than on Proton's servers. Because there is no readable mail to hand an outside app, using Proton in Apple Mail, Outlook or Thunderbird requires Proton Mail Bridge, a desktop app that decrypts on your computer and serves mail to local clients over IMAP. Proton states that Bridge is available only with a paid plan that includes Proton Mail. The free plan is genuinely useful but limited in storage and features.

Fastmail: the best all-rounder#

Fastmail is an independent, paid email company that has been running since 1999. Its pricing page lists no ads or tracking on every plan, and you can try any plan free for up to 30 days. Personal plans come as Individual, Duo and Family; business plans are priced per user, and the entry Business Basic plan does not include custom domains.

Is Fastmail encrypted? Yes, in transit and at rest: Fastmail says connections use TLS 1.3 with perfect forward secrecy and mail is stored encrypted on disk. Is Fastmail end-to-end encrypted? No. Fastmail says directly that it does not offer end-to-end encryption in its own apps, and points customers who need it to PGP or S/MIME in third-party apps. Because Fastmail holds the keys, it can offer fast server-side search and open IMAP, SMTP and JMAP, so it connects to any standard email app in about a minute.

Its custom-domain tools are the strongest of the three: several domains, aliases and catch-all addresses from a clean admin panel. Masked Email creates per-site addresses so one leaked address never exposes your real inbox, and it plugs into 1Password and Bitwarden. The limitation is the inverse of Proton's strength: Fastmail is private from advertisers and the outside world, not from Fastmail itself.

iCloud Mail: private enough for Apple users#

iCloud Mail comes with every Apple Account, with 5 GB of free storage shared across iCloud. Apple does not run ads against your mail. Its model is encryption in transit and on server with Apple holding the keys, and Apple's own data security page confirms Mail is not covered by Advanced Data Protection. On the privacy spectrum that puts iCloud alongside Fastmail.

The parts people miss come with iCloud+, Apple's paid storage tier. Hide My Email creates random forwarding addresses, and replies appear to come from the random address. Custom Email Domain lets you use a domain you own, or buy one, with up to three active addresses per person per domain; Apple notes it is not available in every country or region. The real limitations are about ecosystem: iCloud is best on Apple hardware, the iCloud.com web client is plain, and advanced controls are thinner than Fastmail's. Outside Apple's apps you connect over IMAP with an app-specific password.

Reading Fastmail or iCloud in an AI inbox#

Your provider is where mail lives and how it is secured; your email app is a separate choice. If you pick Fastmail or iCloud, you can read them alongside Gmail and Outlook in one AI-native client such as AI Emaily, which connects over standard IMAP/SMTP (iCloud with an app-specific password). It drafts replies in the voice you set in your Personal Context, and in Copilot mode nothing sends until you approve it. AI Emaily does not support Proton Mail, so if you choose Proton, stick with Proton's apps or a desktop client through Bridge.

The bottom line#

Proton is the answer when no one but you should be able to read your mail, paid for with Bridge, on-device search and a more deliberate setup. Fastmail is the answer when you want the best all-round private mailbox: no ads, your own domains, Masked Email and open IMAP everywhere, with Fastmail holding the keys. iCloud is the answer when you live in Apple's world and want ad-free mail with Hide My Email at the lowest extra cost. Match the provider to the threat you actually have: do not over-buy privacy you do not need, and do not under-buy privacy you do.