Coming from Gmail, protonmail has been great. I use their VPN and password all the time also. I have been thinking about switching password managers just so I'm not all in with just one company. More on reddit.com

Gmail just cuz i am used to it from 10 years ago 😅 More on reddit.com

I mean, ProtonMail, Tuta Mail, mailbox.org are all recommendable. I would add Posteo here as a fourth option as well. Basically, it boils down to a few main things: ProtonMail and Tuta Mail both have a free tier, mailbox.org and Posteo are paid only. ProtonMail and Tuta Mail force you to use their own apps, mailbox.org and Posteo support IMAP / POP3 and can thus be used with any general purpose e-mail app, like Thunderbird, FairEmail, Apple Mail app etc. Every provider I mentioned except for Posteo supports custom domains, in case you need that. The main thing will be whether you are comfortable with ProtonMail's or Tuta Mail's apps, or not. I could not use them because I need a powerful / feature-rich e-mail app such as FairEmail at my disposal. I personally use Posteo - what I can say about it is: It is very reliable (no downtimes so far), reasonably priced (12€ per year), and their privacy policy is very decent: https://posteo.de/en/site/privacy_policy Their spam filtering seems to be really good because I haven't gotten a spam or junk e-mail in years, so that's a plus. Downsides are the meh web UI, as well as the aforementioned lack of custom domain support. I use Posteo with both FairEmail and Thunderbird on different devices. Of the options you mentioned, you can't really "pick wrong", mailbox.org is a bit more flexible due to IMAP / POP3 support, that's it. On this subreddit, ProtonMail and Tuta Mail are the most popular. I see FastMail mentioned here, well that's not a provider with zero access encryption, they can read your e-mails at any time, that's not private by any means. Their servers are in Australia and in the USA, lol. In terms of jurisdiction that's questionable at least (Cloud Act). No PGP support either, so good luck sending an encrypted e-mail to anyone in case you have to. Check out this table comparing various e-mail providers, I would only bother with those that provide zero access encryption, hindering the provider from reading your e-mails, which to me at least is a prerequisite: https://eylenburg.github.io/cloud_comparison.htm More on reddit.com

I use Postfix and Dovecot on my internal server. However, I use a separate KVM instance in the cloud to act as my MX host. That's because it runs commercial anti-spam software that I wrote back when I was running my own email security company, and I want that hosted somewhere with more bandwidth than I have at home. If you do decide to host your own email, you're going to want some kind of anti-spam. SpamAssassin is a decent solution and I recommend pairing it with my open-source Mailmunge email filtering framework. If you want your mail to be delivered properly, you also need to follow these best practices: Set up an SPF record and make sure all your outbound mail yields a "pass" Enable DKIM signing. Enable a DMARC policy. Make sure your outbound IP isn't on any widely-used blocklists Make sure your outbound server has correct forward- and reverse-DNS entries Use STARTTLS with a valid certificate (you can use a LetsEncrypt cert) Consider enabling DNSSEC Hosting mail can be a royal pain, but it is doable with a fair amount of work. More on reddit.com