SimpleLogin

Self-hosted email alias service: hand out a separate forwarding address to every site and reply through it without revealing your real inbox.

7.1k stars, 671 forks Python On GitHub since December 2019

SimpleLogin at a glance

Open sourceYes, AGPL-3.0No paid parts in the repository
Health61 of 100Actively developed
Self-hostingDockerSteps in the README
InterfaceEnglish onlyNo translation files found
Issue repliesNo repliesNone of the recent issues got an answer from the team

What is SimpleLogin?

SimpleLogin is the back end and web app behind an email alias service. Instead of giving one address to every website, you create aliases on your domain; incoming mail to an alias is forwarded to your real mailbox, so the sites cannot track you across services by address. This repository is what you deploy to run your own instance. Its components run as Docker containers next to Postgres and a Postfix installation on the host, and the official browser extensions and Android and iOS apps can be pointed at your server by changing the API URL.

Good fit if

  • You want unlimited aliases on your own domain without paying for a hosted alias subscription.
  • You already use the SimpleLogin extensions or mobile apps and want them to talk to a server you control.

Look elsewhere if

Before you adopt it

The code is under the AGPL-3.0, which requires you to publish your changes if you offer a modified version as a network service. It switched from MIT to AGPL-3.0 in August 2021. No paid parts or contributor agreement appear in the repository. Six people committed in the last 90 days, one of them about 72% of the work, and v4.83.5 shipped in November 2026. Setup is manual and long: a Linux server with at least 2 GB of RAM, port 25 open, a domain with MX, DKIM, SPF and DMARC records, Postgres, and hand-edited Postfix files.

Drafted with AI from the project's README and repository data, then checked against that data on 7 November 2026. Report a correction

How to run SimpleLogin yourself

One-click install

Not listed in the app catalogs of Umbrel, YunoHost, TrueNAS, Unraid, CasaOS, Runtipi, Proxmox VE Helper-Scripts and Coolify.

Ways to install

Docker files
Dockerfile or compose file in the repository
Compose file
None in the repository
Setup effort
Not rated: no compose file to judge from
Kubernetes
No Helm chart in the repository
Desktop and mobile
No app builds in GitHub releases
Interface languages
English only

Install instructions: simplelogin.io or the README on GitHub.

SimpleLogin health: is it still maintained?

61 of 100, actively developed

Release rhythmEvery ~6 daysLatest: v4.83.5, 6 November 2026
Issue repliesNo repliesNone of the recent issues got an answer from the team
Bus factorMedium riskThe most active of 6 authors wrote 71% of recent commits
  • Activity
    105 commits in the last 90 days, the latest on 10 November 2026.
    25 / 30
  • Contributors
    6 people wrote the latest 100 commits; the most active wrote 71% of them.
    11 / 20
  • Releases
    15+ releases in the last 12 months; the latest, v4.83.5, on 6 November 2026.
    19 / 20
  • Replies to issues
    Maintainers answered 0% of recent issues.
    0 / 20
  • Security practices
    OpenSSF Scorecard 6.4 of 10.
    6 / 10

Read from GitHub on 12 November 2026. How the score works

SimpleLogin security

Security advisories are the vulnerabilities the maintainers disclosed on GitHub, with the versions that fix them; many advisories can mean careful disclosure as much as weak code. OpenSSF Scorecard checks how a project is developed and released: reviews, protected branches, pinned dependencies, signed releases. It does not audit the code itself.

Security advisoriesNone publishedNo advisories in the repository’s Security tab
OpenSSF Scorecard6.4 of 10How the project is built and released
Security policyYesExplains how to report a vulnerability

What each Scorecard check found

  • Binary files10 / 10No compiled binaries checked into the repository
  • Code review10 / 10Changes are reviewed before merge
  • Dangerous workflows10 / 10No risky patterns in GitHub Actions
  • License file10 / 10A license file is present
  • Maintained10 / 10Steady commits and issue activity in the last 90 days
  • Packaging10 / 10Releases are published as packages from CI
  • Security policy10 / 10Explains how to report a vulnerability
  • Best-practices badge0 / 10No OpenSSF Best Practices badge
  • Fuzzing0 / 10No fuzz testing found
  • Pinned dependencies0 / 10Dependencies are not pinned to fixed versions
  • Static analysis0 / 10No static analysis found
  • Token permissions0 / 10CI tokens have broad write rights

Advisories read from GitHub on 12 November 2026. From the OpenSSF Scorecard of 26 October 2026; checks that do not apply to SimpleLogin are left out.

SimpleLogin license: is it open source?

SimpleLogin uses AGPL-3.0, an open-source license approved by the OSI.

  1. December 2019First published on GitHub under MIT.
  2. 21 August 2021Changed to AGPL-3.0. Commit: Use AGPL license instead of MIT
  3. TodayAGPL-3.0.

SimpleLogin for developers

Written in

  • Python 54%
  • CSS 22%
  • HTML 13%
  • JavaScript 10%
  • Jinja <1%
  • Other <1%

Getting involved

Contributing guideYesCONTRIBUTING.mdOpen issues210On GitHub
Authors, 90 days6Of the latest 100 commits
DonationsOpen CollectiveListed on GitHub

Language shares are GitHub’s count of the code in the repository.

Alternatives to SimpleLogin

  • MailuInsular email distribution - mail server as Docker images 76 health · MIT · 7.6k stars
  • Mailcowmailcow: dockerized - + = 74 health · GPL-3.0 · 13.8k stars
  • Maddy Mail ServerComposable all-in-one mail server. 73 health · GPL-3.0 · 6.1k stars
  • ModoboaMail hosting made simple 71 health · ISC · 3.5k stars
  • Mail-in-a-BoxMail-in-a-Box helps individuals take back control of their email by defining a one-click, easy-to-deploy… 53 health · CC0-1.0 · 15.5k stars

All 17 projects in Email servers & webmail

Questions about SimpleLogin

Is SimpleLogin open source?

Yes. SimpleLogin is published under AGPL-3.0, an OSI-approved open-source license.

Is SimpleLogin still maintained?

Its health score is 61 of 100 (actively developed). It had 105 commits in the last 90 days, the latest on 10 November 2026, and its latest release came out on 6 November 2026.

Did SimpleLogin change its license?

Yes. It moved from MIT to AGPL-3.0 on 21 August 2021.

How do I run SimpleLogin?

You can run it with Docker. The README on GitHub has the exact steps.

What is SimpleLogin written in?

SimpleLogin is written mainly in Python (54% of the code), with CSS (22%) and HTML (13%), by GitHub’s count of the repository.

What are the alternatives to SimpleLogin?

Close alternatives in the Email servers & webmail category include Mailu, Mailcow, Maddy Mail Server.