mailbox

Very good, but not perfect.

Pros

1. Security and privacy are solid, and well handled
2. Web interface gives secure access to all functions
3. Multiple calendar support
4. Supports iCal so things like Remember the Milk integrate well
5. Both calendar and contacts integrate with Android via Ox Sync, unlike Posteo.de
6. Supports encrypted POP3 access, as well as IMap
7. Works with Thunderbird calendar

Cons

1. Support is nonexistent. If it works, great. If not, you post on a forum, and get ignored.
2. The web interface is often slow, and sometimes it will time out.
3. Some bugs in the web calendar require a refresh to see everything
4. Pulling from other POP3 accounts does not work for some accounts

It gets all of the major things right, and is recommended. But it could be improved.

None of the negatives are showstoppers, the way they have been with other services. Posteo.de, for example, was great, but I could not get the calendar to integrate with Android properly, no matter what. That works with Mailbox.org. I realize it's because Ox Sync explicitly supports Mailbox and not Posteo, and that's not Posteo's fault, but the end result is that it works for Mailbox, and that's what matters.

In terms of the security, and privacy, which are the reasons you choose a service like Mailbox in the first place, they meet expectations, and at a low price point.

I tested Maibox.Org services for 2 years. Mailbox.Org offers two types of email hosting services. Personal or Business.

As of December 8th, 2025, Business accounts have VERY WEAK security. Because the Business ADMINISTRATOR account is NOT protected by two-factor authentication (2FA). Only the Business USER accounts are protected by 2FA. Which is a major security risk. Why? Because the ADMINISTRATOR account has full access to domain name DNS records and all USER accounts usernames and passwords.

To resolve this Business 2FA challenge above, a first workaround is using another Business email hosting supplier who presently has STRONG 2FA on both the ADMINISTRATOR account and the USERS accounts. Such as, but not limited to, Zoho Mail, or Yandex 360, or any other business email hosting suppliers to your liking.

A second temporary workaround, if appropriate for you, is to activate the Maibox.Org whitelisted IP (authorized IP) feature. Then, add your own, self-hosted, external 2FA for all connections on your authorized IP. For example, this free, unlimited, and open source (libre source) https://lemonldap-ng.org or any other external 2FA products to your liking. I started using this first workaround a long time ago. For your information, this first workaround requires advanced skills in both DevOps and System Administration. If you have access to a team of DevOps and System Admin, this is might be a realistic workaround for you. If not, this workaround is unlikely to be realistic for you.

Maibox.Org Personal accounts are protected by two-factor authentication (2FA). Powered by the very popular Keycloak.

Both Personal and Business accounts are powered by the Libre Source Open-Xchange (OX). If you're not familiar with "Libre Source" software code, this means stronger security and stronger privacy. Because all can review the software code and contribute to it. Also, for both Personal and Business account, the cloud office and cloud storage are definitely not at Business level. But might be appropriate for very basic Personal needs.

• Source about Mailbox.Org Business ADMINISTRATOR account is NOT protected by two-factor authentication (2FA) in my December 8th, 2025 comment at https://userforum-en.mailbox.org/topic/lets-talk-about-2fa-on-this-website-again or at https://archive.ph/LHW5Z

• Source about Mailbox.Org is mostly powered by Libre Source software at https://archive.ph/ueZ5B#selection-715.0-733.34 ___ • Repository at https://software.open-xchange.com/products/appsuite/stable/appsuiteui/

___ • Repository at https://software.open-xchange.com/products/appsuite/stable/appsuiteui/

I do not have a financial conflict of interest with any of the products mentioned above. My feelings and thoughts are my own. Not those of any business.