Early foundation · accounts are open
Everything you need.
Nothing you don’t.
Stillhold is a calm, privacy-first ecosystem for your files, mail, calendar, photos, notes and contacts — all behind a single account you control.
The ecosystem
One account. Every service.
Sign in once and move between Stillhold services without friction. Each one shares the same identity, design and security foundation.
Stillhold Drive
Upload files up to 2 GB, encrypted on your device.
Stillhold Mail
Your own @stillhold.cloud address, encrypted the moment mail arrives.
Stillhold Calendar
Month view with events encrypted on your device.
Stillhold Photos
Import from Google Photos. Encrypted before upload.
Stillhold Notes
Write, search and pin notes, encrypted on your device.
Stillhold Contacts
Import, search and edit contacts, encrypted on your device.
The account system is live today. The individual services are on the roadmap and launch independently.
Privacy & security
Security you can verify, not just read about.
We’d rather be precise than impressive. Here is exactly where Stillhold stands.
In place today
Live- Passwords hashed with argon2id
- Session tokens stored only as hashes, in HttpOnly cookies
- Rate-limited sign-in and recovery
- Passkey sign-in (WebAuthn) with Face ID, Touch ID or a security device
- Notes, contacts, calendar and photos compressed and encrypted in your browser; the server stores only ciphertext
- Drive files split, compressed and end-to-end encrypted in your browser
- Your own @stillhold.cloud mailbox, encrypted to a key only you hold the moment mail arrives
- Import from Google Photos, contacts files and more, encrypted before upload
- Authenticator-app two-factor sign-in and trusted devices
- One-time recovery codes and an encryption recovery key (foundation)
- Review and revoke your signed-in devices
- Full sign-in and security activity history
On the roadmap
Not built yet- Hardware-key-only accounts
- Zero-knowledge sign-in, so even a compromised server never sees your password
- Security notifications
Your data (including Drive files, once uploaded) is encrypted in your browser with a key derived from your password and recovery key, so the server can’t read it. One honest limit: you still type your password into a normal sign-in form, so a compromised live server could capture it. Email is the exception to “end to end”: mail from other providers arrives as ordinary email, so we encrypt it for you the moment it lands rather than before it is sent. Encryption protects against stolen databases, backups and disks. Closing that gap needs a different sign-in protocol and is on the roadmap.
Pricing
Simple plans, announced soon.
Placeholder tiers. Names and contents are not final and nothing is billable yet.
Free
A Stillhold account and the essentials of every service.
Pricing to be announced
Plus
More storage and advanced features for individuals.
Pricing to be announced
Teams
Shared spaces, custom domains and admin controls.
Pricing to be announced
Start with a calm foundation.
Create your Stillhold account now and be ready when each service opens.