- Home
- Shared Inbox Software
- MailStack
MailStack
What it is
MailStack is a free, open-source, self-hosted mail server and shared team inbox for controlled, receive-only business email. Its web inbox includes search, pagination, read and unread states, attachment filters, previews, live polling, and browser notifications. Administrator and ordinary-user accounts support shared mailbox memberships with object-level isolation. Maildir ingestion protects against duplicate delivery, recovers from malformed messages, sanitizes HTML, and blocks remote or active content. Attachments remain in confined storage and are downloaded through authorized routes. Listed security controls include Argon2 password hashing, login throttling, CSRF protection, secure production cookies, and least-privilege database access. The reference deployment receives mail through Postfix and delivers it with Dovecot LMTP. It excludes public SMTP submission, IMAP, POP3, and open relay. Deployment targets a single-node Ubuntu Server 24.04 LTS VPS with public DNS and reachable ports 25, 80, and 443. The project also lists health checks, audit logs, and backup, restore, rollback, and verification tools. Source code uses GNU AGPL version 3.0 or later.
For and against
For
- Shared mailbox memberships
- Mailbox-level isolation
- HTML sanitization and content blocking
- Security audit logging
- Backup and rollback tooling
Against
- Receive-only email deployment
- Single-node reference setup
- Requires Ubuntu Server 24.04 LTS VPS
- No public IMAP or POP3
The verdict
MailStack focuses on controlled inbound mail and shared access rather than a general-purpose mail service. Its self-hosted design provides operational controls, with clear limits around deployment scale and protocols.
Who it suits
It suits teams needing self-hosted shared inboxes with per-user mailbox authorization and receive-only mail. It is intended for operators able to run the specified Ubuntu VPS deployment.
Plans and prices
Open source
Self-hosted · single-node reference deployment
Read 4 Oct 2026 · vib.tools
On the record
- Attachments
- Attachments are stored in confined protected storage and downloaded through authorized routes.vib.tools · read 4 Oct 2026
- Deployment requirements
- The supported reference deployment is a single-node Ubuntu Server 24.04 LTS VPS with public DNS and reachable inbound ports 25, 80, and 443.vib.tools · read 4 Oct 2026
- Inbox features
- The web inbox supports search, pagination, read and unread state, attachment filters, message previews, live polling, and browser notifications.vib.tools · read 4 Oct 2026
- Intended users
- MailStack is designed for teams needing self-hosted business inboxes with per-user shared mailbox authorization and controlled receive-only email.vib.tools · read 4 Oct 2026
- License
- The source code is licensed under GNU AGPL version 3.0 or later.github.com · read 4 Oct 2026
- Mailbox access
- It provides administrator and ordinary-user accounts, object-level mailbox isolation, and shared mailbox memberships.vib.tools · read 4 Oct 2026
- Mail flow
- The reference deployment receives mail via Postfix and delivers it through Dovecot LMTP; it excludes public SMTP submission, IMAP, POP3, and open relay.vib.tools · read 4 Oct 2026
- Message handling
- MailStack uses Maildir ingestion with duplicate-delivery protection, malformed-message recovery, HTML sanitization, and blocking of remote and active content.vib.tools · read 4 Oct 2026
- Notable limits
- The reference deployment excludes public user registration, outbound campaigns, multi-node or high-availability deployment, and a public administrative API.vib.tools · read 4 Oct 2026
- Operations
- The project lists health and readiness endpoints, structured security audit logging, and backup, restore, rollback, and verification tooling.vib.tools · read 4 Oct 2026
- Purpose
- MailStack is an open-source, self-hosted mail server and shared team inbox for controlled, receive-only business email.vib.tools · read 4 Oct 2026
- Security
- Listed controls include Argon2 password hashing, login throttling, CSRF protection, secure production cookies, and least-privilege database access.vib.tools · read 4 Oct 2026
- Support
- Vib Tools lists product support by email and provides a Bangladesh head office address in Kurigram, Rangpur.vib.tools · read 4 Oct 2026
