WildDuck logo

WildDuck

Website

Scalable IMAP/POP3 mail server with MongoDB backend and REST API

2.1k stars 278 forks last commit first released EUPL-1.2

Actively maintained

Last commit 26 Aug 2026.

WildDuck screenshot

WildDuck is a modern IMAP/POP3 mail server designed for large-scale deployments. It stores all mail data in a sharded and replicated MongoDB backend and runs stateless Node.js instances that can be scaled behind a load balancer.

Key Features

  • First-class IMAP and POP3 support for standard mail clients
  • MongoDB-backed storage for messages and metadata, designed for sharding and replication
  • Stateless architecture for horizontal scaling and high throughput
  • REST API to manage accounts, access, filtering features, and server settings
  • Unicode-first support for internationalized email addresses and folders
  • Built-in account security features such as application-specific passwords, rate limiting, and MFA helpers (TOTP/U2F)
  • Optional support for storing a user GPG public key to encrypt stored emails

Use Cases

  • Hosting IMAP mailboxes for large organizations with many users and large quotas
  • Building an API-driven mail platform where provisioning and operations are automated
  • Running a scalable mail storage and access layer alongside separate SMTP components

Limitations and Considerations

  • Opinionated design may not fit setups that depend on traditional MTA/IMAP stacks and features like Sieve-based workflows
  • Typically used together with additional components (for example, an SMTP server) to form a complete mail system

WildDuck is a strong fit when you need an API-controlled, horizontally scalable IMAP server architecture rather than a classic single-host mail stack. For high-user-count installations, its stateless design and database-backed storage simplify scaling and operations.

Categories:

Tags:

Tech Stack:

Share:

Similar to WildDuck

OpenTrashmail

Self-hosted disposable email inbox with web UI, API, RSS, webhooks

924
75
Last commit

OpenTrashmail is a standalone disposable email (“trashmail”) service with its own SMTP server, offering a web UI plus JSON API, RSS feeds, and webhooks for received mail.

Apache-2.0Slowing down
Alternative to:
Mailinator logo
Mailinator
+3

Mox

Modern, secure, all-in-one mail server for self-hosted email

5.8k
218
Last commit

All-in-one secure mail server with SMTP, IMAP, webmail, automatic TLS (ACME), and built-in SPF/DKIM/DMARC plus junk filtering for low-maintenance domains.

MITActively maintained
Alternative to:
Microsoft Exchange Online logo
Microsoft Exchange Online
+19
Hemmelig logo

Hemmelig

Encrypted secret sharing with client-side encryption and self-destructing links

1.2k
106
Last commit

Share sensitive text or files securely using client-side encryption, expiring links, view limits, and optional password protection.

Actively maintained
Alternative to:
Onetime Secret logo
Onetime Secret
+3
Onetime Secret logo

Onetime Secret

Self-destructing service for sharing single-use encrypted secrets

2.9k
451
Last commit

Open-source web and API service to create encrypted, single-view links for sharing secrets with configurable expiry and optional passphrase protection.

MITActively maintained
Alternative to:
Onetime Secret logo
Onetime Secret
+6
SearXNG logo

SearXNG

Privacy-focused metasearch engine for aggregating web results

36.1k
3.3k
Last commit

SearXNG is a privacy-respecting metasearch engine that aggregates results from many search services without tracking or profiling users.

AGPL-3.0Actively maintained
Alternative to:
Google Search logo
Google Search
+6
Passbolt logo

Passbolt

Open-source password and secret manager for teams

6.1k
398
Last commit

Passbolt is an open-source, security-first password and secret manager for teams, with end-to-end encryption, granular sharing permissions, and auditing.

AGPL-3.0Actively maintained
Alternative to:
Passbolt Cloud logo
Passbolt Cloud
+11