Whitelabel: How can I get the Tutanota login at my custom (own) domain and configure colors and my logo?

When you order the whitelabel upgrade for your Premium account you can activate the Tutanota login on your own domain (a sub-domain), change the look of Tutanota according to your needs (e.g. corporate identity) and create contact forms for your clients. If you send confidential messages to external recipients, those recipients are also directed to your whitelabel domain. 

Complete list of possible customizations:
  • Set custom logo (displayed on your whitelabel domain instead of the Tutanota logo)
  • Set custom colors (displayed on your whitelabel domain)
  • Set custom meta tags for the Tutanota app on your whitelabel domain, like title and social media texts
  • Set a custom imprint link (displayed in the "More" menu on the login page of your whitelabel domain instead of the Tutanota imprint link)
  • Set a custom notification email text for external recipients (coming soon).
Preconditions for applying the whitelabel feature:
  • You need your custom whitelabel domain. This must be a subdomain. A main domain is technically not allowed. It is also not allowed to add an email domain as whitelabel domain.
  • You need a valid SSL certificate for your whitelabel domain and you need to make sure to update it in Tutanota before it expires.
This is how you can setup your whitelabel domain:
  1. Choose a subdomain of your own domain, at which you would like to reach the Tutanota login.
  2. Set the CNAME DNS entry for that domain to point to login.tutanota.com. Keep in mind that the DNS changes may take a while until propagated.
  3. Enable the Tutanota login at your domain by uploading your domain's SSL certificate chain and private key https://mail.tutanota.com/settings/whitelabel. Both must be provided in PEM format (base64 coded). The private key file content must start with the line "-----BEGIN RSA PRIVATE KEY-----" or "-----BEGIN PRIVATE KEY-----". The certificate file content must start with the line "-----BEGIN CERTIFICATE-----". In order to create a certificate chain from individual certificates create a file in a text editor. Then first copy your domain's certificate into that file and below that certificate any intermediate certificate or certificate bundle that was provided to you in addition to you certificate file. Your certificate chain file might then look like this:
    (Your SSL certificate, e.g. from your_domain_name.crt)
    -----END CERTIFICATE-----
    (Your intermediate SSL certificate, e.g. from intermediate.crt)
    -----END CERTIFICATE-----
  4. Optionally upload your custom logo to be shown when you load Tutanota at your own domain.
  5. Optionally configure your custom colors to be used in Tutanota when you load Tutanota at your own domain.
Now you should be able to open your custom domain in your browser and see the Tutanota login with your own logo and own colors. Additionally you may now order and setup contact forms ("Settings" -> "Contact forms") which allows you to be contacted confidentially.

Please note that your whitelabel customizations will not be visible in the mobile apps.


  1. Is Tutanota for free?
  2. What does the name "Tutanota" stand for?
  3. How to use Tutanota?
  4. Where does the encryption process take place?
  5. What is encrypted and what can you read?
  6. Can I use Tutanota anonymously? Do you log IP addresses?
  7. Where are the Tutanota servers located?
  8. How do I reset my password if I lose it?
  9. Is Tutanota certified?
  10. Where are my keys generated and how is my private key secured?
  11. Tutanota uses only one password. Do you have access to it?
  12. What hashing function is used for the password?
  13. How do I choose a strong password?
  14. What encryption algorithms does Tutanota use?
  15. Why does Tutanota not use pgp?
  16. Which browsers does Tutanota support?
  17. What browsers can an external recipient use for receiving confidential emails?
  18. Where can I get the Tutanota app?
  19. Is Tutanota open source?
  20. Is my address book within Tutanota encrypted?
  21. How secure are my Tutanota emails?
  22. The development goes on. What comes next?
  23. What is the maximum size for emails and attachments?
  24. Can I retrieve my Tutanota emails via IMAP to another email client?
  25. How are my emails encrypted with Tutanota?
  26. As an external recipient, can I re-access my emails later?
  27. How do I send an encrypted email to another Tutanota user?
  28. How do I send an encrypted email to an external recipient?
  29. How do I set emails to external recipients to unencrypted by default?
  30. How can I add alias mail addresses to Tutanota?
  31. Do you delete inactive accounts / recycle email addresses?
  32. I have received an abusive email (spam, phishing) from one of your domains. What should I do?
  33. How can I use my custom (own) domain with Tutanota?
  34. Logging: What do you log and for how long are logs kept
  35. Special offers for non-profit organizations
  36. How can I use Tutanota in my organization or company with my custom (own) domain?
  37. How can I configure spam detection rules (configuration of spam blacklist and whitelist)?
  38. Are there email limits to protect Tutanota from being abused by spammers?
  39. How does two-factor-authentication (2FA) work in Tutanota?
  40. Whitelabel: How can I get the Tutanota login at my custom (own) domain and configure colors and my logo?
  41. Outdated WebView version on Android

Feedback and Knowledge Base