Gute Clients, Schlechte Clients
Some email clients not only store access data locally, but also transfer it unnoticed to external servers. As this is a considerable security risk and a data protection violation, we strongly advise against using such insecure e-mail clients. In addition, the storage of access data is a transfer of these data, which is prohibited according to the LRZ user guidelines, §4, para. 3a.
Below you will find a list of recommended clients and those that we strongly advise against.
The list will be updated if we become aware of any further problematic clients. If you are using a client that is not listed, please check whether it is passing on your credentials.
If you have used a client that transfers your credentials: Remove your mail account from that client, uninstall it and change your password.
Safe clients
Mobile Clients
Apple Mail | iOS |
Gmail | Android |
FairEmail | Android |
k9-Mail | Android |
Nine - Email & Calendar | Android, iOS |
Unrecommended clients
New Outlook
Windows
There are now two versions of Outlook: the classic version from the Microsoft Office bundle and the Windows app ‘New Outlook’. The version from the Office package can still be used without concern.
However, the new Outlook synchronises all mail accounts to the Microsoft servers. Not only are the credentials (user name and password) routed through Microsoft's servers, but also all mailbox content. This happens from the first time you try out the app.
The new version is displayed as ‘Outlook (new)’ in the Windows start menu, and a button also appears in ‘normal’ Outlook that allows you to switch to the new version. You can find more information on how to protect yourself from accidentally using the app here:
Further information:
https://www.heise.de/news/Microsoft-krallt-sich-Zugangsdaten-Achtung-vorm-neuen-Outlook-9357691.html
Mac
The new Outlook for Mac cannot be used with an Exchange account currently. Using it via IMAP is also not recommended, as this also stores your credentials (user name and password) and all mailbox content on the Microsoft servers.
You can find out how to revert from the new version to the old version here:
Other unrecommended clients
Name | OS | Entwickler | Grund |
---|---|---|---|
Outlook-iOS-Android | iOS, Android | Microsoft Corporation | Stores mailbox content and credentials on their own servers. |
Cloze Relationship Management | iOS, Android | Cloze | Stores mailbox content and credentials on their own servers. |
Spark
| iOS, MacOS | Readdle Technologies Limited | Saves the credentials when using the ‘send later’, ‘sync between devices’ and ‘push notifications’ features. |
MyMail | iOS, Android | MGL MY.COM (CYPRUS) LIMITED | Stores mailbox content and credentials on their own servers. |
Canary | iOS, Android, | Mailr Tech LLP | Stores mailbox content and credentials on their own servers when using push notifications and cloud functions of the app. |
Newton | iOS, Android, MacOs, Windows, Linux | Cloudmagic, Inc | Saves mailbox contents of the last 60 days and credentials on their own servers. |
Cronofy | Cronofy | Saves the content of the calendar on their own servers. | |
BlueMail | iOS, Android, Windows, MacOS, Linux | Blix Inc | iOS & Android Apps: Zugangsdaten werden auf den eigenen Servern. Speichert beim Nutzen einiger Features die Mailboxinhalte. https://bluemail.me/privacy/ |
Edison | iOS, Android, Windows, MacOS | Edison Software Inc | Stores mailbox content and credentials on their own servers. |
Xiaomi Mail / MiMail | Android | Xiaomi | |
TypeApp - Mail & Calendar | iOS, Android, MacOS, Windows, Linux | Type App Inc | Stores the mailbox content on their own servers for a certain period of time when using the Instant Push Services features and some additional features on iOS. |
QQ Mail | Tencent Technology (Shenzhen) Company Ltd. |
| |
Airmail | MacOS, iOS | Bloop S.R.L | Saves mailbox content and credentials when using the Realtime Mailbox Monitoring, Synced Snooze or Send Later features. |
Calendly | iOS, Android | Calendly | Saves the free/busy times and, when using some features, the entire calendar content. |
Calendars | iOS, MacOS | Readdle Technologies Limited | Stores mailbox content and credentials on their own servers. |