Tendon Mail operates fully serverless. Secure your mailbox using hardware passkeys.
Private keys stay localized on your device's sandbox runtime. Select how to authenticate:
Set a client-side Argon2id password key wrap. You can use this password to decrypt your vault on other devices that do not share your hardware passkeys.
This is your secure, client-side derived recovery seed phrase. Store these 12 words in a safe, offline location. Anyone with access to this phrase can recover your mailbox identity.