Trust
Blix Security
Security and privacy at Blix are a top priority, and our team maintains the highest standards of security, encryption, and authorization to keep your accounts, emails, and chats safe.
Our commitment
Security and privacy are the foundation, not a tier
We invest enormous effort in building the best email and messaging experience for teams, and we do it with a special emphasis on privacy, reliability, and security. The architecture is engineered to deliver fast, beautiful email, chat, and calendar while keeping you — and only you — in control of your data.
Almost none of it sits behind a paywall. Every layer below is on by default with no toggles to hunt for, and all but one are included on the Free plan — S/MIME is the exception, and it ships with Premium and Enterprise.
- 0Emails stored on our servers
- 0Times we have sold your data
- 8Layers of protection, on by default
How we protect you
Layered protections, on by default
Eight independent layers, on by default. Seven are included on the Free plan; S/MIME is a teams feature on Premium and Enterprise.
OAuth 2.0
When you add an account, Blix hands you off to your provider’s own sign-in page. You enter your credentials with them, and only with them, and they issue Blix a token. Your password never touches Blix — not transmitted, not stored.
Gmail, Outlook, Office 365, Yahoo
SSL, TLS, and STARTTLS
Every byte traveling between your device and your email provider is encrypted in transit, using TLS 1.2 and above. Plain SMTP and IMAP leave metadata and credentials exposed; Blix never speaks them unprotected.
TLS 1.2+
PGP, end to end
Generate a key pair in the app in seconds or import the one you already use, then encrypt messages and attachments end to end. Private keys are encrypted with a passphrase and stay on your device.
RSA 2048/4096 · Curve25519Free on every plan
S/MIME
S/MIME does two things at once: it signs a message so recipients can verify it genuinely came from you, and it encrypts the content so only they can read it. Signed mail carries a visible proof of authenticity.
Sign · Encrypt · VerifyPremium & Enterprise
Secure Lock Screen
A passcode or your fingerprint keeps mail protected even if the device is lost or borrowed. Set a PIN separate from your device lock, choose when it engages, and lock individual accounts independently.
Face ID · Touch ID · PIN
Attachment safety
Attachments are the most common vector for malware and phishing. Blix blocks dangerous file types, warns about risky archives, flags suspicious filenames, and integrates with your antivirus — before you can open something you should not.
Block · Warn · Scan
Spam management and block list
A block list that supplements your provider’s filter rather than duplicating it, catching what it misses. Send any sender’s mail straight to spam and never see them again.
Per-sender control
Secure backup and recovery
Blix’s Secure Account Backup and Recovery tool restores your setup when a phone is lost or when someone simply moves to a new device, without exposing credentials along the way.
Encrypted backup
In the app
Security highlights
Secure OAuth Connections
Blix uses the secure OAuth2 authorization protocol wherever possible — for providers such as Gmail, Google Workspace, Office 365, and Yahoo — so it can access your account with a token alone, without ever having to enter your password.
Security Features within Blix
Blix offers a secure Lock Screen feature that uses a passcode or your fingerprint to keep your emails safe, even if you lose your device or hand it to someone else.
Secure Account Backup and Disaster Recovery
Blix’s Secure Account Backup and Recovery tool restores your setup when your phone is lost or when you simply want to move to a new device.
End-to-end encryption
iMail is encrypted end to end
Blix protects your data in transit with TLS, as any modern service should. But transport encryption only guards a message while it moves between servers — it is decrypted again at every hop. iMail encrypts the message itself, using PGP natively, so it stays sealed the entire way and can be opened only by the people you sent it to.
- Native PGP — generate a key pair in the app in seconds, or import the one you already use.
- Modern defaults: RSA 2048 and 4096, or ECC Curve25519.
- Private keys are encrypted with a passphrase and stored on-device; the passphrase never leaves your hardware.
- Optional digital signatures prove who a message came from and that nobody altered it along the way.
Data minimization
We process as little as possible
Blix aspires to process the minimum data required to deliver a powerful, sleek, intuitive experience. Emails are not stored on our cloud. We do not sell your data, and never did. The optional push proxy for iOS holds email headers for one to two seconds before deleting them completely.
- Emails are not stored on our servers.
- We do not sell your data, and never did.
- The iOS push proxy deletes headers within seconds; push emails are not stored.
- Blix connects directly to your provider wherever the platform allows it.
Compliance
GDPR and CCPA, honored fully and promptly
Blix complies with the world’s strictest data-protection regulations. Your rights of access, rectification, deletion, portability, and consent are honored, fully and promptly — and the same rights apply whether you are one person or an organization of thousands.
Questions
Short answers
- Does Blix store my email?
- No. Blix connects directly to your email provider, so messages travel between your device and their servers. The one exception is the optional iOS push proxy, which holds a header for one to two seconds to deliver a notification and then deletes it completely.
- Does Blix ever see my password?
- Not where OAuth 2.0 is available, which covers every major provider. You sign in on your provider’s own page and Blix receives a token instead of a password.
- Is end-to-end encryption a paid feature?
- PGP is free — on every plan and every platform. S/MIME, which adds signing and certificate-based encryption, is a teams feature and ships with Premium and Enterprise.
- How do I report a vulnerability?
- Email [email protected] with as much detail as you can share. We investigate every report, and we would rather hear about a problem from you than from anyone else.
Have a security-related question or issue?
If you believe you have found a security vulnerability on Blix, we encourage you to get in touch with our security team right away.
Read more about our Privacy Policy and Terms of Service.
Email [email protected]