WildDuck
Scalable IMAP/POP3 mail server with MongoDB backend and REST API
2.1k stars 278 forks last commit first released EUPL-1.2
Actively maintained
Last commit 26 Aug 2026.

WildDuck is a modern IMAP/POP3 mail server designed for large-scale deployments. It stores all mail data in a sharded and replicated MongoDB backend and runs stateless Node.js instances that can be scaled behind a load balancer.
Key Features
- First-class IMAP and POP3 support for standard mail clients
- MongoDB-backed storage for messages and metadata, designed for sharding and replication
- Stateless architecture for horizontal scaling and high throughput
- REST API to manage accounts, access, filtering features, and server settings
- Unicode-first support for internationalized email addresses and folders
- Built-in account security features such as application-specific passwords, rate limiting, and MFA helpers (TOTP/U2F)
- Optional support for storing a user GPG public key to encrypt stored emails
Use Cases
- Hosting IMAP mailboxes for large organizations with many users and large quotas
- Building an API-driven mail platform where provisioning and operations are automated
- Running a scalable mail storage and access layer alongside separate SMTP components
Limitations and Considerations
- Opinionated design may not fit setups that depend on traditional MTA/IMAP stacks and features like Sieve-based workflows
- Typically used together with additional components (for example, an SMTP server) to form a complete mail system
WildDuck is a strong fit when you need an API-controlled, horizontally scalable IMAP server architecture rather than a classic single-host mail stack. For high-user-count installations, its stateless design and database-backed storage simplify scaling and operations.
Categories:
Tags:
Tech Stack:
Similar to WildDuck
OpenTrashmail
Self-hosted disposable email inbox with web UI, API, RSS, webhooks
OpenTrashmail is a standalone disposable email (“trashmail”) service with its own SMTP server, offering a web UI plus JSON API, RSS feeds, and webhooks for received mail.
Mox
Modern, secure, all-in-one mail server for self-hosted email
All-in-one secure mail server with SMTP, IMAP, webmail, automatic TLS (ACME), and built-in SPF/DKIM/DMARC plus junk filtering for low-maintenance domains.

Hemmelig
Encrypted secret sharing with client-side encryption and self-destructing links
Share sensitive text or files securely using client-side encryption, expiring links, view limits, and optional password protection.


Onetime Secret
Self-destructing service for sharing single-use encrypted secrets
Open-source web and API service to create encrypted, single-view links for sharing secrets with configurable expiry and optional passphrase protection.


SearXNG
Privacy-focused metasearch engine for aggregating web results
SearXNG is a privacy-respecting metasearch engine that aggregates results from many search services without tracking or profiling users.

Passbolt
Open-source password and secret manager for teams
Passbolt is an open-source, security-first password and secret manager for teams, with end-to-end encryption, granular sharing permissions, and auditing.



