Website profiles · Technology insights · Alternatives

hushmail.com

Send secure emails and forms with Hushmail. Trusted by therapy and healthcare practitioners for handling sensitive information.

Paid content
Visit website
Profile views 7 Outbound visits 11 Normal
Hushmail Full homepage screenshot

At a glance

Category
Security & Privacy
Language
English
Paid-content signal
Paid contentObserved
Registered
1998
Hosting
CloudflareInferred
HTTPS certificate trusted
PassedObserved
Last updated

Website review

This review may include AI-generated content and is not individually verified. Domain, certificate and other facts come from the observed data on this page.

What is Hushmail?

Hushmail is an email service built around privacy, with a particular focus on encrypted messages and secure web forms. Its pitch is aimed less at general consumers and more at professionals who routinely handle confidential information — therapists, counselors, psychologists, psychiatrists, and similar healthcare practices — along with small businesses and legal practices.

The core idea is that you don't need to be a security expert to send sensitive mail. Encryption is applied through a simple toggle, and a green lock icon confirms the message is protected. The recipient doesn't need to install anything or use the same provider: they get a private link in their normal inbox that opens a web page where they can read and reply securely. That matters in practice, because a client on Gmail or Outlook can still correspond with you without creating an account.

Beyond email, Hushmail includes HIPAA-compliant forms you build with drag-and-drop. Clients fill in intake details, attach files, and add e-signatures, and the completed form lands in your Hushmail inbox. For a solo practitioner, that replaces printing, scanning, and chasing paperwork.

Who it suits

  • Solo healthcare practitioners who want encrypted client communication and digital intake without running their own IT.
  • Small group practices needing several accounts under one arrangement.
  • Legal practices and small businesses with similar confidentiality duties.

What to weigh

The trade-off is focus: Hushmail is optimized for confidential professional correspondence rather than being a full productivity suite. If you rely heavily on shared calendars, document co-editing, or a large third-party app ecosystem, check how it fits your existing workflow before committing. Also confirm that your specific compliance obligations are covered by the plan you choose, since requirements differ by profession and region.

A practical next step: run a real test with one client or colleague. Send an encrypted message, have them reply from their everyday email address, and complete one form end to end. If that feels smooth for both sides, the service is likely a good fit.

How does Hushmail work for sending encrypted emails?

Hushmail sends encrypted email by turning encryption into a per-message toggle rather than a separate app. You compose an email in your Hushmail inbox, click the encryption toggle, and send. A green lock icon confirms the message is encrypted. Your client does not need Hushmail, a plugin, or any download: they receive a private link in their normal inbox, and that link opens a simple web page where they can read your message and reply securely. Replies come back into your Hushmail inbox, and clients can also start a new encrypted message to you from that page.

For a therapist or counselor, this matters most for intake, scheduling changes, referrals, and any message that would otherwise carry clinical detail. The practical benefit is that the security step sits inside ordinary email habits, so you are less likely to fall back on plain email when a client writes first.

Hushmail also pairs this with drag-and-drop, e-signable forms. A client completes intake details, attachments, and signatures on a secure page, and the finished form lands in your Hushmail inbox. That keeps documentation in the same place as the conversation instead of split across a separate portal.

Two trade-offs are worth weighing. First, the client experience is link-based, so clients who ignore unfamiliar links or let them expire may need a nudge; explain the process in advance. Second, encryption protects the message in transit and at rest in your account, but it does not control what a client does after reading on their own device.

If you are deciding, test the workflow with one real client scenario before committing: send an encrypted message, have the client reply from a non-Hushmail address, then send one e-signable form. Hushmail offers a 14-day free trial for healthcare, and its published plans start at $11.99 per month for solo practices, with small group practices up to 5 accounts from $24.99 per month, so you can validate the fit on your own caseload. See Hushmail for plan details.

How can I build and send HIPAA-compliant forms with Hushmail?

Use Hushmail's Forms feature to create a form, add fields and an e-signature block, then send it from your Hushmail inbox. When the client completes it, the finished form is delivered back to that same inbox, so the intake details, attachments and signature stay in one place.

The basic workflow

  1. Build the form with the drag-and-drop form builder — intake questions, file upload fields for attachments, and an e-signature field.
  2. Send it to the client. They complete it through a secure page rather than downloading software or creating an account.
  3. Receive the completed form directly in your Hushmail inbox and keep it with the rest of the client's correspondence.

Why the reply path matters

Hushmail's encryption is designed so clients using any email provider can respond securely. They get a private link in their normal inbox, which opens a page where they can read and send secure messages. For a form, the practical benefit is the same: you are not asking a client to install anything or learn a new tool just to return paperwork.

Who this suits

This is aimed at solo and small healthcare practices — therapists, counselors, psychologists, psychiatrists — where the main need is confidential client communication plus organized intake documentation. Larger organizations with an existing EHR or patient portal may find the form tool redundant, since those systems usually handle intake already.

Decisions to make before you start

  • Form complexity: Drag-and-drop builders handle standard intake forms well. If you need branching logic, scoring, or deep integration with a practice-management system, check whether the builder supports it before committing.
  • Signature weight: An e-signature field is fine for consent and intake. If a document needs a specific legal signature standard, confirm that requirement separately.
  • Volume: If several practitioners share client contact, confirm how many accounts you need; the plan tiers are organized around solo versus small-group use.
  • Retention: Decide how long completed forms stay in the inbox versus moving to your records system, so your documentation stays organized rather than piling up.

Practical next step

Run one real intake form through the free trial before switching anything over. Send it to a colleague or yourself, complete it as a client would, and check that the returned form, attachments and signature all arrive in a usable format. That single test tells you more than a feature list about whether it fits your existing admin routine.

For plan tiers and account limits, see Hushmail.

Is Hushmail worth the cost for a solo therapy or healthcare practice?

Yes—if your main need is confidential client email plus basic intake forms, Hushmail is usually worth the cost for a solo therapy or healthcare practice. Its value comes less from general email features and more from making encryption and HIPAA-oriented workflows simple enough that you will actually use them.

Where the money goes

  • Client email encryption is the core: you toggle encryption on and your client gets a private link in their normal inbox, with no app or account required. That removes the biggest practical barrier to secure messaging—clients who won't install anything.
  • Replies work the same way, so a client can start a secure message to you without leaving their usual email provider.
  • E-signable forms use drag-and-drop building, collect intake details, attachments and signatures, and deliver completed forms into your Hushmail inbox. For a solo practitioner, that can replace a separate forms tool and reduce admin time.
  • The healthcare plan is positioned specifically for solo practitioners such as therapists, counselors, psychologists and psychiatrists, with small group practices covered as you add accounts.

When it's a good fit

A solo therapist who mostly needs to exchange sensitive messages with clients, send occasional documents, and collect intake paperwork before a first session gets the clearest return. The setup cost is low, and the client experience is the part that matters most—people who feel their privacy is respected are more likely to engage openly.

When it may not be worth it

  • If you already have a secure client portal through an EHR that handles messaging and forms, paying for a second system duplicates work.
  • If your clients rarely email and you mainly need scheduling, notes or billing, a dedicated practice-management platform may cover more of your day for similar money.
  • If you need deep calendar, task or document collaboration, check whether the email features match how you work before committing.

How to decide

Run the 14-day healthcare trial with two or three real client scenarios: an encrypted reply, a form with a signature, and an attachment. If those feel smooth and your clients don't get stuck, the cost is easy to justify. If you find yourself fighting the interface or needing features it doesn't have, that's your answer.

For comparison, it's worth knowing what mainstream secure-email alternatives offer—Proton Mail for general encrypted email and Paubox for HIPAA-focused email—though neither replaces the combined email-and-forms workflow in the same way.

Start with the free trial and test it against your actual intake process, not a demo.

Can my clients reply securely without installing any software?

Yes. Hushmail is built so that the people you email don't need an account, an app, or any download. Your client receives a private link in their normal inbox, regardless of which email provider they use, and that link opens a web page where they can read your message and write back. Replies they send from that page come back to you encrypted.

For a therapy or healthcare practice, this matters because the alternative—asking a client to install software or create yet another login—is often where secure communication breaks down. A client in distress, or one who is not tech-comfortable, is unlikely to complete a setup process before a session. A link they can simply click removes that barrier.

Worth knowing about the trade-off: the link-based reply is convenient, but the client's side of the conversation lives in a browser session rather than in their own mailbox. If they lose the link or the session expires, retrieving the exchange may depend on you resending it. For ongoing correspondence, some practices pair this with a client portal or simply tell clients to keep the email so the link stays findable.

If you want to test the experience before committing, the practical next step is to send yourself an encrypted message from a trial account and open it in a different email provider—that shows you exactly what your clients will see. Hushmail offers a 14-day trial for healthcare, and you can compare plan tiers at Hushmail. For general context on secure messaging expectations in clinical settings, the U.S. Department of Health and Human Services publishes guidance on HIPAA and electronic communication.

How does Hushmail compare to other HIPAA-compliant email providers?

Hushmail's distinctive position is that it bundles encrypted email with drag-and-drop, e-signable intake forms in one account, and it is aimed squarely at solo and small healthcare practices rather than large hospital systems or general businesses. The page evidence describes a simple encryption toggle, a green lock indicator, and a client-reply flow that works through a private link in the client's own inbox — no app or account required on their end. That last detail matters in practice: your client's technical comfort level stops being a barrier to secure communication.

Compared with general secure-email services, Hushmail's trade-off is narrower scope in exchange for less setup. A few reference points:

  • Hushmail — encrypted email plus built-in e-signable forms, positioned for therapy and healthcare practices; the site cites 47,000+ healthcare professionals and 25+ years in operation.
  • Paubox — HIPAA-compliant email focused on seamless delivery to any inbox, often chosen when you want encryption without recipients noticing.
  • LuxSci — secure email and forms with heavier configuration options, better suited to organizations with IT support.
  • Proton Mail — strong general-purpose encryption, but not built around clinical intake workflows.
  • Google Workspace — widely used in healthcare, but HIPAA coverage depends on a signed Business Associate Agreement and correct configuration.

How to decide

If your main need is secure client email plus intake paperwork, Hushmail's combination is hard to match without stitching two tools together. If your priority is that clients never see a portal or link at all, a seamless-delivery provider may fit better. If you have in-house IT and complex compliance requirements, a configurable platform is worth the extra effort.

One practical next step: run a real test with a colleague or a willing client before committing. Send an encrypted message, have them reply through the private link, and complete one form end to end. Note how it feels on a phone, since many clients will open it there. Hushmail offers a 14-day free trial for healthcare, so you can evaluate that workflow against your actual caseload rather than a feature list.

Related questions

More questions →
Is Hushmail HIPAA-Compliant and Suitable for Therapy or Healthcare Practices?

Yes. Hushmail is built and marketed specifically for therapy and healthcare practices that need to handle sensitive client information. It offers HIPAA-compliant email and e-signable forms, is used by more than 47,000 healthcare professionals, and has been securing sensitive email for over 25 years. If your practice needs to exchange confidential messages with clients and collect intake details or signatures, Hushmail is designed for exactly that.

What makes Hushmail a fit for healthcare

Hushmail's core pitch is that client communications stay confidential. The site frames this as a trust signal: when you send encrypted email, you're telling clients you take their privacy seriously.

Two features carry most of the healthcare use case:

  • Encrypted email — You encrypt a message with a single toggle. A green lock icon confirms the message is encrypted before you send.
  • Encrypted replies — Clients can reply securely without downloading or installing anything. They receive a private link in their own inbox regardless of their email provider, and that link opens a user-friendly page where they can read and respond to your messages, or start a new one.

This matters because the client side is usually the hard part. A client on Gmail or Outlook doesn't need an account or software to participate.

E-signable forms for intake and documentation

Hushmail also includes HIPAA-compliant forms you build with drag-and-drop. You can collect:

  • Client intake details
  • Attachments
  • E-signatures

When a client completes a form, it lands directly in your Hushmail inbox. The stated benefit is organized documentation and lighter admin work — useful if your practice still handles intake by PDF, fax, or plain email.

Who it's aimed at

The healthcare plan is positioned for solo practices such as therapists, counselors, psychologists, and psychiatrists, with a small-group option for practices with up to 5 email accounts. Hushmail also publishes separate plans for small businesses, legal practices, and personal use, so healthcare isn't the only audience — but it's the one the compliance messaging centers on.

Cost and trial

According to Hushmail's site:

Plan Price
Solo healthcare practice From $11.99/month
Small group practice (up to 5 accounts) From $24.99/month

Hushmail for Healthcare can be tried free for 14 days. Treat these as starting prices — the site says "as little as," so your actual cost depends on the plan and number of accounts you choose. Check the pricing page for current details.

How to decide

Hushmail is a reasonable fit if you:

  • Run a solo or small therapy/healthcare practice
  • Need clients to reply securely without installing anything
  • Want intake forms and e-signatures collected into one inbox
  • Prefer a provider with a long track record in sensitive communications

It may be less of a fit if you need a full EHR or practice-management suite rather than secure email and forms, or if you're outside the healthcare context the compliance features are designed around.

A practical first step is the 14-day free trial: send yourself an encrypted message, have a colleague reply through the private link, and build one test intake form to confirm the workflow matches how your practice actually operates.

What Is Hushmail and What Is It Used For?

Hushmail is an encrypted email and e-signable forms service built for handling sensitive information, especially in therapy and healthcare practices. If you need to exchange confidential messages with clients or patients and collect intake details, attachments, and signatures without asking them to install anything, Hushmail is designed for exactly that. It is also used by small businesses, legal practices, and individuals, but the healthcare use case is the one the service leads with.

The two core things Hushmail does

Encrypted email

You send and receive email through Hushmail, and encryption is applied per message rather than being an all-or-nothing setting. According to the site, encrypting a message is a matter of clicking a toggle; a green lock icon confirms the message is encrypted before you send it.

The receiving side is where this gets practical. Your client does not need a Hushmail account, a plugin, or any download. They get a private link in their existing inbox — whatever email provider they use — and that link opens a simple page where they can read your message and reply. Replies come back encrypted, and clients can also start a new secure message to you on their own.

E-signable forms

Hushmail includes a drag-and-drop form builder aimed at healthcare intake. You assemble a form, and clients can submit intake details, attach files, and add e-signatures through a secure page. Completed forms land directly in your Hushmail inbox, which keeps documentation in one place instead of scattered across attachments and paper.

Who it is for

User type Typical use
Therapists, counselors, psychologists, psychiatrists Confidential client email, intake forms, e-signatures
Small healthcare groups Shared secure communication across a small team
Small businesses Encrypted client correspondence
Legal practices Confidential client communication
Personal users Private email

The site states that more than 47,000 healthcare professionals use Hushmail, and that the company has kept sensitive emails secure for over 25 years. Those are the vendor's own figures.

What it costs

Hushmail's healthcare plans start at $11.99 per month for solo practices. Small group practices with up to 5 email accounts start at $24.99 per month. A 14-day free trial for Hushmail for Healthcare is available if you want to test it before committing. Current plan details and any changes to these figures should be checked on the pricing page, since published rates can be updated.

When Hushmail is a good fit — and when it isn't

Choose it if your main problem is getting confidential information to and from people who are not tech-savvy and will not install anything. The private-link reply flow removes the biggest friction point in encrypted email: the recipient side.

Look elsewhere if you need a full practice-management suite with scheduling, billing, and clinical notes in one system. Hushmail covers secure messaging and forms, not the whole back office.

Also consider whether your compliance obligations extend beyond email and forms. Hushmail markets HIPAA-compliant email for healthcare, but the compliance question for your practice depends on your full workflow, not just the email provider.

A realistic example

A solo therapist needs a new client to complete an intake questionnaire and sign a consent form before the first session. Instead of mailing a PDF and hoping for a scanned return, the therapist sends a Hushmail form. The client opens it on their phone, fills in the fields, attaches an insurance card photo, signs, and submits. The completed form appears in the therapist's inbox. Later, when the client emails a question, the therapist replies with encryption toggled on, and the client answers through the same private-link page — no account, no app.

How does Hushmail encrypted email work for clients?

Hushmail encrypts an email with a single toggle, and the recipient reads and replies through a private link in their normal inbox — no download, no install, and no Hushmail account required on their end. That applies whether your client uses Gmail, Outlook, or any other provider. The one condition worth knowing up front: the encryption protects the message while it sits on Hushmail's servers and while the client views it through that link, not as end-to-end encryption between two mail servers.

What happens on the sender's side

You compose an email in Hushmail as usual, then turn on encryption before sending.

  • Click the encryption toggle in the compose window.
  • Confirm the green lock icon appears — that indicator means the message is set to be encrypted.
  • Send. Hushmail stores the message encrypted rather than delivering a plain-text copy to the recipient's mail server.

The toggle is the whole mechanism. There is no separate encryption app, no key exchange step, and nothing for you to configure per recipient.

What the client actually receives and does

Your client gets a notification in their own inbox — whatever provider they use — containing a private link.

  1. They open the link.
  2. It takes them to a user-friendly page where the secure message is displayed.
  3. They can reply to your message, or start a new secure message to you on their own.
  4. Their reply travels back into your Hushmail inbox as an encrypted message.

No software download, no installation, and no account creation is required for the client to read or reply. This is the part that matters most for therapy and healthcare practices, where asking a client to install something is often a non-starter.

Why the link approach matters for a practice

The design goal is that the client never has to change how they use email. They keep their existing address; Hushmail handles the secure viewing and reply layer.

Hushmail states that therapy and healthcare practices rely on it for handling sensitive information, and that 47,000+ healthcare professionals use it for client and patient communications. The encrypted reply path is what makes two-way confidential exchange possible without the client adopting new tools.

Encrypted forms work the same way

Beyond email, Hushmail lets you build e-signable forms with a drag-and-drop editor. Clients submit intake details, attachments, and e-signatures through a secure form, and the completed form lands directly in your Hushmail inbox. Same principle: the client fills it out in a browser, nothing to install.

What it costs and how to test it

Hushmail for Healthcare starts at $11.99 per month for solo practices such as therapists, counselors, psychologists, and psychiatrists. Small group practices with up to 5 email accounts start at $24.99 per month. A 14-day free trial for Hushmail for Healthcare is available if you want to verify the client experience before committing.

A quick way to verify it yourself

Before rolling it out to clients, send an encrypted message to a personal address on a different provider, open the link, and reply from there. You will see exactly what your client sees — the private link page, the reply flow, and the message arriving back in your inbox — which is the fastest way to confirm the no-install claim holds for your clients' setups.

How much does Hushmail for Healthcare cost and is there a free trial?

Hushmail for Healthcare starts at $11.99 per month for solo healthcare practices such as therapists, counselors, psychologists, and psychiatrists. Small group practices with up to 5 email accounts start at $24.99 per month. A 14-day free trial is available if you want to test it before committing.

Hushmail for Healthcare pricing at a glance

Practice type Starting price Notes
Solo healthcare practice $11.99/month Therapists, counselors, psychologists, psychiatrists
Small group practice $24.99/month Up to 5 email accounts

These figures come from Hushmail's own healthcare plan page, which describes the solo tier as covering "solo healthcare practices like therapists, counselors, psychologists, and psychiatrists."

Is there a free trial?

Yes. Hushmail offers a 14-day free trial for Hushmail for Healthcare. The site frames it as a way to decide whether the service fits your practice before paying. If you are unsure whether Hushmail suits your workflow, the trial lets you test encrypted email and e-signable forms with real client-facing tasks.

What you get for the price

The paid plan is built around two core tools for handling sensitive client information:

  • Encrypted email — you toggle encryption on before sending, and a green lock icon confirms the message is secure. Clients can reply through a private link without downloading or installing anything, regardless of their email provider.
  • HIPAA-compliant e-signable forms — drag-and-drop form builder for intake details, attachments, and e-signatures. Completed forms land directly in your Hushmail inbox.

Hushmail states it has kept sensitive emails secure for over 25 years and that 47,000+ healthcare professionals use it for client and patient communications.

How to check current pricing and start the trial

  1. Go to the Hushmail for Healthcare plans page (linked from the main pricing page).
  2. Review the plan tiers to confirm which one matches your practice size — solo or small group (up to 5 accounts).
  3. Start the 14-day free trial to test encrypted email and forms with your own workflow.
  4. If it fits, choose the plan and set up your account.

Because pricing can change, verify the current numbers on Hushmail's pricing page before signing up. The $11.99 and $24.99 figures reflect what the site states at the time of writing.

Who this pricing suits

The solo tier is aimed at individual practitioners who mainly need secure one-to-one client communication and simple intake forms. The small group tier makes sense if you have a handful of staff sharing the same secure email system — the "up to 5 email accounts" limit is the key constraint to check against your team size.

If you need more than 5 accounts, or you are evaluating Hushmail against other HIPAA-compliant email providers, compare on the same dimensions: monthly cost per account, encryption method for client replies, form-building features, and whether a trial is offered.

What Are Hushmail's E-Signable Forms and How Do They Help Healthcare Practices?

Hushmail's e-signable forms are a feature of its HIPAA-compliant email service that lets healthcare practitioners build forms with a drag-and-drop tool, collect client intake details, attachments, and e-signatures securely, and receive completed forms directly in their Hushmail inbox. They're designed for therapy and healthcare practices that need to gather sensitive client information without adding administrative overhead. If your practice already uses Hushmail for encrypted email, forms extend the same privacy approach to your documentation workflow.

What the forms actually do

The forms feature is built around three tasks:

  • Collect intake details — new client information, background questions, or any structured data your practice needs before a session.
  • Accept attachments — clients can include files alongside their form responses.
  • Capture e-signatures — consent forms and similar documents can be signed electronically within the form itself.

You build the form using a drag-and-drop interface, so no coding or separate form-builder subscription is required. The design intent is healthcare-specific: the same privacy standard that applies to Hushmail's encrypted email applies to the information clients submit through forms.

How the workflow runs

  1. You build the form in Hushmail using the drag-and-drop editor, adding the fields your practice needs (intake questions, file upload prompts, signature blocks).
  2. The client completes it through a secure interface — they fill in their details, attach any files, and sign where required.
  3. The completed form lands in your Hushmail inbox, rather than in a separate dashboard or third-party tool. This keeps client documentation in the same place as your client email.

The practical effect is that intake and consent paperwork stops being a separate system you have to check. It arrives alongside the rest of your client communication.

Why this matters for healthcare practices

Two problems tend to come up in small therapy and healthcare practices: getting sensitive intake information through a channel that meets privacy expectations, and keeping the admin work of chasing and filing that information manageable.

Hushmail's forms address both by design:

  • Privacy by default — the forms sit inside a service the company describes as HIPAA-compliant email, used by therapy and healthcare practitioners for handling sensitive information. Hushmail states it has kept sensitive emails secure for over 25 years and that 47,000+ healthcare professionals use it for client and patient communications.
  • Less admin work — because completed forms arrive directly in the inbox, there's no exporting from one tool and importing into another. Hushmail describes this as a way to keep documentation organized and lighten administrative work.
  • One place for client communication — encrypted email and forms share the same inbox, so client replies, new messages, and completed paperwork are all in one view.

What it costs and how to try it

Hushmail's healthcare plan starts at $11.99 per month for solo practices such as therapists, counselors, psychologists, and psychiatrists. Small group practices with up to 5 email accounts start at $24.99 per month. A 14-day free trial of Hushmail for Healthcare is available if you want to test the forms and email workflow before committing.

Pricing and plan details are published on Hushmail's pricing and healthcare plan pages, so check those for current figures and what each tier includes.

Who this fits — and who it may not

A good fit if:

  • You run a solo or small therapy/healthcare practice handling sensitive client information.
  • You want intake forms, attachments, and e-signatures collected through the same service as your secure email.
  • You'd rather build forms yourself with a drag-and-drop tool than manage a separate form platform.

Worth checking first if:

  • You need forms that integrate with an existing EHR or practice-management system — Hushmail's forms deliver to the Hushmail inbox, so confirm that fits your stack.
  • You're outside healthcare and only need basic encrypted email — the forms feature is positioned around healthcare documentation, so evaluate whether you'd use it.

The clearest way to decide is to start the 14-day trial, build one intake form, and send it to yourself as a client would see it. That tells you quickly whether the drag-and-drop builder covers your fields and whether inbox delivery matches how your practice files paperwork.

Website Overview

An established domain and managed infrastructure suggest continuity of operations and may support dependable delivery, although neither guarantees service quality. Page metadata, canonical configuration and social previews work together to provide more consistent search and sharing presentation.

Domain and Registration

Registered in 1998, this domain has about 28 years of history. That suggests continuity, although ownership and purpose may have changed. Transfer-protection status is present, helping reduce the risk of unauthorized domain transfers. The registrar is Tucows Domains Inc., a widely used domain service provider. The domain uses the common .com extension, which is not an independent safety signal.

DNS and Email

Nameservers are provided by Cloudflare, indicating managed DNS hosting. MX records point to the hushmail.com email service. SPF and DMARC are configured. DKIM status is unknown. TXT records include verification markers for Google, Microsoft. Such markers may also remain after a service stops being used. DNSSEC signatures were not detected, so this additional DNS authenticity protection is not confirmed.

TLS and Certificates

The certificate includes the organization field Hush Communications Canada Inc.. The certificate issuer is DigiCert Inc, a commercial certificate authority. The certificate uses an RSA 2048-bit public key, offering broad client compatibility. The server supplied a complete certificate chain. The certificate is valid for about 396 days in total, with 96 days remaining.

HTTP and Browser Security

The response lacks these common security headers: X-Content-Type-Options, Permissions-Policy, clickjacking protection. No X-Powered-By header was found, reducing one common source of backend fingerprinting information. The cf-ray response header indicates a CDN or caching proxy in the delivery path. No obvious internal addresses or debug information were found in the headers. The Server header identifies cloudflare without an exact version.

Technology Stack Analysis

The public page identifies HubSpot, Google Analytics, Cloudflare without precise versions, leaving fewer clues for version-specific scanning.

Search and Social Sharing

The Generator tag identifies HubSpot, making the publishing system easier to fingerprint. Open Graph is partially configured; og:image, og:type is missing. Twitter Card metadata is configured. JSON-LD includes Organization data, helping describe the organization as an entity. The title has 46 characters, within a common display range.

Hosting and Email

DNSCloudflare
HostingCloudflare
Emailhushmail.com
Approximate IP geolocation (inferred; a CDN or proxy may differ from the origin server) United States flagUnited States Inferred 199.60.103.227

Registration details

RDAP / WHOIS

RegistrarTucows Domains Inc.
Registered1998-06-14
Expires2027-06-13
Domain statusclient transfer prohibited、client update prohibited
Nameserversns0003.secondary.cloudflare.com、ns0132.secondary.cloudflare.com
DNSSECunsigned

DNS records

DNS

TypeNameValueTTLPriority
Agroup34.sites.hscoscdn30.net199.60.103.227190—
Agroup34.sites.hscoscdn30.net199.60.103.29190—
AAAAgroup34.sites.hscoscdn30.net2606:2c40::c73c:671d300—
AAAAgroup34.sites.hscoscdn30.net2606:2c40::c73c:67e3300—
MXhushmail.complsmtp1.hushmail.com1385100
MXhushmail.complsmtp2.hushmail.com1385100
NShushmail.comns0003.secondary.cloudflare.com3600—
NShushmail.comns0132.secondary.cloudflare.com3600—
TXThushmail.comMS=ms898086573600—
TXThushmail.comgoogle-site-verification=-9WG3jxMRUby01AO8TA6d94zqL_WIMAqMotQZ6uxQ6A3600—
TXThushmail.comgoogle-site-verification=G9FHE9YiH-IKegxK3nzp2iBJwZ33443vp414mETy8h43600—
TXThushmail.comstripe-verification=1f9d27b7e29999d2be566926e458fdbb4dec2e5582867b358bfce55868ada8cb3600—
TXThushmail.comv=spf1 include:4429584.spf01.hubspotemail.net ip4:65.39.178.0/24 ip4:64.69.70.192/28 -all3600—
TXThushmail.comyahoo-verification-key=xVkeQRD2q8mEuVfw/ng8GyvpEeYSX1/3CjGUP9b9QpQ=3600—
CNAMEwww.hushmail.com4429584.group34.sites.hubspot.net300—
DMARC_dmarc.hushmail.comv=DMARC1; p=quarantine; pct=100; rua=mailto:[email protected]3600—

TLS and certificates

TLS / SSL

AssessmentNormal configuration
Supported protocolsTLSv1.2、TLSv1.3
Negotiated protocolTLSv1.3
Certificate subjectwww.hushmail.com
IssuerDigiCert Inc
Valid until2027-01-01T23:59 · Remaining when checked: 96 days
Verification detailsCertificate trust: Passed · Hostname match: Passed

HTTP response headers

HTTP

HeaderValue
content-typetext/html; charset=UTF-8
cache-controlno-store, no-cache, must-revalidate
servercloudflare
strict-transport-securitymax-age=31536000
content-security-policyupgrade-insecure-requests
referrer-policyno-referrer-when-downgrade

Identified technologies

HubSpotGoogle AnalyticsCloudflare

Pages, Search and Sharing

Meta descriptionSend secure emails and forms with Hushmail. Trusted by therapy and healthcare practitioners for handling sensitive information.
Canonical URLhttps://www.hushmail.com
LanguageEnglish (default)
Twitter Cardsummary
All bots 0 allowed · 25 disallowed
  • Disallow/vch/
  • Disallow/lead/hipaa/
  • Disallow/lead/aca-2017/
  • Disallow/lead/sellingthecouch/
  • Disallow/amba2017/
  • Disallow/lead/amba-2017/
  • Disallow/eop2017/
  • Disallow/lead/eop-2017/
  • Disallow/conference/
  • Disallow/business/signup/hushmail-nonprofit-healthcare
  • Disallow/business/signup/hushmail-nonprofit-healthcare/
  • Disallow/client/
  • Disallow/express/
  • Disallow/pickup/
  • Disallow/upgrade/
  • Disallow/pay/
  • Disallow/signup/
  • Disallow/how-it-works/secure-forms/templates/fonts/
  • Disallow/tapfiliate
  • Disallow/secure.hushmail.com/home/conversations/
  • Disallow/_hcms/preview/
  • Disallow/hs/manage-preferences/
  • Disallow/hs/preferences-center/
  • Disallow/*?*hs_preview=*
  • Disallow/*?*hsCacheBuster=*

Recent Updates

  • Website images
  • Screenshots
  • Network details
  • Website Technologies
  • Pages and Search Information

User reviews (0)

  • No reviews yet.