K-9 Mail

K-9 Mail is an free software mail application for Android. The app is a more functional replacement for the default mail application included on most phones. It supports both POP3 and IMAP mailboxes.

You can install K-9 from Google Play, f-droid.org, or the K-9 website.

K9-Mail is about as easy to set up as they come.

  1. Install, as mentioned above
  2. Open K-9 Mail application
  3. Click ‘Next’
  4. Enter your riseup email address and password
  5. Select either POP or IMAP (if you don’t know the difference, and plan to use this email account on multiple devices select IMAP)
  6. Your username, password, and server should be prefilled in. You need to change your username to youruser@riseup.net. If it is missing, add the server mail.riseup.net or smtp.*.onion (see below).
  7. Select ‘SSL/TLS (always)’
  8. All other standard settings should be fine for most users
  9. Click ‘Next’ to test
  10. If you were able to connect successfully, you should now be on a screen titled ‘outgoing server settings’
  11. Select ‘SSL/TLS (always)’
  12. Click ‘Next’ to test
  13. If you were able to connect successfully, you should now be on a screen titled ’You’re almost done!’
  14. Give the account a name if you like, and add your name in the ‘name’ field, please be aware, this information will be transmitted when you send mail from this device, so do not use your real name if you wish to remain (somewhat) anonymous
  15. Click ‘Done’

Celebrate your good fortune for using Riseup!

Enhance security

  • Don’t enable secure passwords or secure authentication. These are somewhat of a misnomer. These methods of specifying passwords require that the email server keep a cleartext copy of your password. We would consider this a security risk, so we don’t enable “secure passwords.” Because the connection to riseup.net is encrypted anyway, these are not needed.
  • Encrypt your mail! For enhanced message security use Encrypted Email.
  • The secure connection may be of type TLS or StartTLS. For security reasons, we no longer support SSL. You should not use StartTLS. Instead, it is much better to use regular TLS. For added security, go to your account settings and change your connection type from StartTLS to TLS.
  • There are many vulnerabilities with how secure connections work. If you need high security, you should always connect to Riseup services using the Riseup VPN. This will prevent a long list of potential attacks against your communication.
  • To enhance connection security you can use Tor to connect to Riseup’s .onion services for IMAP and SMTP. Look for the according mail.*.onion and smtp.*.onion addresses on the linked page and replace mail.riseup.net for each server. Note: * SMTP port 465 is often blocked by exit nodes, but port 587 is less frequently blocked. If you have a problem sending mail, try port 587 or configure your client to use Riseup’s email hidden service in place of the regular mail.riseup.net domain. This is better than sending traffic through a Tor exit as it is MITM resistant, but it will generate certificate errors on the client side.