Webmail built for
Stalwart
A modern, self-hosted webmail client for Stalwart Mail Server, powered by the JMAP protocol. Email, calendar, contacts, and files - fast, private, and open source.
Backed by
Everything you need
in a self-hosted webmail client.
Full Email Experience
Read, compose, reply, reply-all, forward with threading, attachments, draft editing, embedded message/rfc822 unwrapping, virtual scrolling, color tags, answered and forwarded status icons, archive modes, TNEF extraction, email export/import, hover actions with configurable placement, plain text composer mode, conversation threading toggle, resizable inline images, reply-to addresses, auto-select reply identity, mail layout settings, and drag-and-drop organization.
Calendar Integration
JMAP Calendar (RFC 8984) with month, week, day, agenda, and task list views. Create, update, and delete events with drag-and-drop rescheduling, resize, recurring rules with client-side recurrence expansion, iTIP invitations with RSVP trust assessment, iCal/webcal subscriptions with editing and batch import, CalDAV discovery, shared calendar grouping, week numbers, hover preview settings, virtual location input, task management, and double-click quick-create.
Contacts & vCard
Contact management with JMAP sync (RFC 9553/9610), vCard import/export, address book directories with drag-and-drop, category filtering, groups, pagination, autocomplete in composer, duplicate detection, and bulk operations.
Cloud File Browser
JMAP FileNode storage with upload, download, preview, folder upload via drag-and-drop, folder navigation, favorites, recent files, dynamic server-configured max upload sizes, and bulk operations.
Brand Assets
Folder · 12 items
Q1-plan.pdf
PDF · 2.4 MB
Launch Notes.md
Markdown · 18 KB
Powerful Search
JMAP filter panel with search chips, cross-mailbox queries, and advanced filtering by sender, date, attachment and more.
Real-time Push
JMAP EventSource for live updates. Instant unread counts, email arrival notifications, configurable notification sounds with preview playback, and connection status indicator.
New email from Sarah C.
just now
PR #847 comment added
2m ago
Privacy & Security
SPF/DKIM/DMARC indicators, external content blocking, DOMPurify sanitization, S/MIME certificate workflows with legacy PBE support, TOTP 2FA, OAuth2/OIDC with PKCE, OAuth app passwords, CSP enforcement, SSRF protection, and trusted senders.
Identity Management
Multiple sender identities with per-identity signatures, server refresh after changes, sub-addressing ([email protected]), and identity badges.
Sieve Email Filters
Visual rule builder for server-side filtering (RFC 9661). Conditions, actions, expanded visual view, raw Sieve editor with syntax validation, vacation responder management with Sieve generation and parsing, filter activation state preservation, and drag reorder.
Email Templates
Reusable templates with placeholder variables, organized by category. Template picker in compose toolbar with search and filter.
Vacation Responder
JMAP VacationResponse with date range scheduling. Settings tab for message configuration and sidebar indicator when active.
Keyboard Shortcuts
Full keyboard navigation for power users. Navigate, compose, archive, delete, star — all without reaching for the mouse.
Themes & Branding
System-aware theming with smooth transitions, always-light email rendering, custom favicon and logo support, sidebar apps with drag-and-drop reordering and mobile visibility toggle, plugin and theme admin dashboard with schema-driven configuration, forced enable or disable controls, admin locks, Jitsi Meet plugin, interactive guided tour, and responsive desktop/mobile layouts.
9 Languages
English, French, Japanese, Spanish, Italian, German, Dutch, Portuguese, Russian. Auto-detection with persistent preference.
Easy Deployment
Docker images on GHCR (amd64/arm64). Runtime env vars, configurable bind address via HOSTNAME, health checks, structured logging with categories, custom JMAP server endpoints, and update checks on startup.
▊
See Bulwark webmail in action
Mail, calendar, contacts, and file management - a complete webmail experience for Stalwart Mail Server.
How Bulwark compares to other webmail clients
See how Bulwark stacks up against Roundcube, Snappymail, and hosted email providers.
| Feature | ★ This projectBulwark | Roundcube | Rainloop | SOGo | Gmail | Outlook |
|---|---|---|---|---|---|---|
| JMAP Native | ||||||
| Self-Hosted | ||||||
| Calendar | ||||||
| Contacts | ||||||
| Real-time Push | ||||||
| Dark Mode | ||||||
| i18n (9+ langs) | ||||||
| Modern Stack | ||||||
| Privacy First | ||||||
| Docker Deploy | ||||||
| Plugin System | ||||||
| Mobile App | ||||||
| Offline Mode |
Built on JMAP & Next.js
zero compromises.
Next.js 16
App Router with Turbopack
TypeScript
Type-safe codebase
Tailwind CSS v4
Utility-first styling
Zustand
Lightweight state management
JMAP Protocol
RFC 8620 - native, not bridged
next-intl
Internationalization for 8 languages
DOMPurify
HTML sanitization for email safety
Lucide Icons
Beautiful, consistent iconography
date-fns
Modern date utility library
JMAP-native architecture
No custom REST API between the browser and Stalwart. The JMAP protocol is the API - direct, standards-based, and efficient.
Browser
React + Zustand
JMAP Server
Email, Calendar, Contacts
Auth Bootstrapping Only
Next.js API routes handle credential encryption (AES-256-GCM), httpOnly cookie management, and OAuth 2.0 PKCE token exchange. After auth, the browser talks JMAP directly.
Zustand Stores
Feature stores (email, calendar, contacts, sieve, etc.) are initialized conditionally based on server capabilities discovered via JMAP session.
Deploy your webmail in seconds
One command to install Bulwark alongside Stalwart. Or use Docker, build from source, or deploy with your favorite platform.
Get involved
Bulwark is AGPL-licensed and developed in the open. Bug reports, translations, and code contributions all happen on GitHub.
A modern webmail client built on the JMAP protocol
Frequently asked questions
Everything you need to know about Bulwark.
Ready to take control of your email?
Self-host your webmail with Bulwark and Stalwart Mail Server. Email, calendar, contacts, and files - no tracking, no ads, no compromises.