Your messages are encrypted at rest with AES-256-GCM. Turn on client-side encryption and NOVA-to-NOVA mail is end-to-end encrypted - we cannot read it. No ads, no tracking, no AI training on your inbox.
Your password is hashed with Argon2id (64 MiB, 3 iterations). With client-side encryption, your encryption keys never leave your device.