The Ovate Platform
Ovate is a privacy-first identity and communications suite. Sign in once, approve with a tap, and send mail that only you and your recipient can read.
Your keys never leave your devices — not even we can read your mail.
What you get
Everything below is on by default. No settings to tune, no keys to manage by hand — Ovate handles the hard cryptography so you don't have to.
A single Ovate account signs you into every app in the suite. No separate passwords, no re-registering.
Every message is encrypted on your device before it leaves. The server stores sealed text it can never open.
Confirm a new sign-in from your phone — one tap in Ovate Trust, or scan the on-screen code. Nothing to type.
Use a passkey — your fingerprint or face — for sign-ins that can't be phished, reused, or leaked in a breach.
Keep a primary phone and a backup. See every device that has access, and revoke any one of them in seconds.
A recovery phrase and a sealed key package mean a lost device never means lost mail. Restore and read on.
The suite
Each app does one thing well and shares the same secure identity. Sign in once and move between them freely.
Your security hub: sign-in, passkeys, trusted devices, and account recovery all in one place.
access.ovatetech.comEnd-to-end encrypted mail for your team. Compose, send, and search — sealed the whole way.
mail.ovatetech.comThe mobile app that holds your keys, approves your sign-ins, and protects your account on the go.
Get the appShared tasks and lists, signed in with your Ovate account — a taste of how any app can join the suite.
ovatetech.com/todoHow trust works
Enter your Ovate account on any app in the suite, or tap your passkey. No shared passwords between apps.
Ovate Trust asks you to confirm — one tap, or scan the code on screen. That approval is your consent, and it can't be replayed.
Your encryption keys travel between your devices already sealed. Only your phone and browser can unlock them.
Under the hood
Ovate's design assumes the server can be curious. Your privacy holds anyway, because the secrets live only with you.
Messages are sealed with per-recipient keys on your device. Ciphertext is all the server ever holds.
A zero-knowledge registry brokers public keys only. Private keys are generated and kept on your devices — never uploaded in the clear.
Passkeys and phone approval replace shared secrets, so there's nothing to steal, reuse, or trick out of you.
Lost a device? Cut off its access from any trusted device in seconds — its keys stop working immediately.
Get started
Open your encrypted inbox, or set up Ovate Trust on your phone to approve sign-ins and protect your account.