Migrating from Gmail to Encrypted Email Without Losing Your Mail

People put off leaving Gmail because the migration looks ambiguous. The mail history is large, contacts are tangled across services, and Gmail addresses are wired into account recovery for things you’ve forgotten you signed up for.

The work is finite. Here is the order to do it in, and the parts that genuinely need attention.

Step 1: Pick the Destination Before You Move

Choose either Proton Mail or Tutanota and create the account before doing anything in Gmail. Pick a custom domain if you can — you@yourname.com is portable in a way you@protonmail.com is not. If you migrate again in five years, the address goes with you.

Skip the temptation to pick the same username you used at Gmail. Picking a fresh handle gives you an audit point: every message that arrives at the new address is one you’ve explicitly migrated or signed up to, and every message still arriving at Gmail is one you haven’t handled yet.

Step 2: Import Your Mail History

Both Proton and Tutanota have desktop import tools that pull mail from Gmail via IMAP. Run the import once, end-to-end, before you start changing addresses. This usually takes a few hours for a typical mailbox and overnight for a large one.

For Proton Mail: Easy Switch in the web app, or the Import-Export Tool for larger mailboxes. For Tutanota: the desktop client’s import feature.

Both will preserve labels and folders. Both will encrypt messages on your new server as they arrive. The original Gmail copies remain on Google’s servers — deletion is a separate step you can take later, or never.

Step 3: Inventory Where Your Address Is Used

This is the step people skip and then regret. Before changing any addresses, get a list of every account tied to your Gmail address.

Three sources surface most accounts:

1. Google Account → Security → Third-party apps: shows OAuth-connected services
2. Gmail search for “verify your email” or “welcome to”: surfaces account creation messages
3. Your password manager: every entry with this email address

Export those into a spreadsheet. Mark each one with how critical it is and what the email address is used for: account login, recovery, notifications, marketing.

Step 4: Forward, Don’t Cut

Set Gmail to forward all incoming mail to your new address. Do not delete the Gmail account. The forwarding is your safety net while you update the accounts in step 3.

Gmail’s forwarding setting is at Settings → Forwarding and POP/IMAP. Verify the forwarding works by sending yourself a message from a different account.

Step 5: Update Accounts in Priority Order

Work through your spreadsheet. Update the email address on each account, starting with:

1. Banking, brokerage, government services — these are the hardest to fix later if compromised
2. Password manager and 2FA recovery — change the recovery address before changing other accounts that depend on this one
3. Domain registrar and hosting accounts — losing access here is hard to recover from
4. Cloud storage — anywhere you have important files
5. Social media and personal accounts
6. Newsletters and low-stakes signups — last, or never

Some services will require you to verify the new address by clicking a link sent to it. The forwarding from step 4 catches these even if you forget.

Step 6: Handle the Long Tail

After a few weeks of forwarding, look at what is still arriving at Gmail. You will find:

• Newsletters you forgot about — unsubscribe or update the address
• Quarterly or annual notifications from services you use rarely — update those when they arrive
• Marketing mail from companies you bought from once — let those expire or unsubscribe

This phase typically runs for a year. Old, low-frequency services surface in their natural cadence and get updated as they arrive.

Step 7: When (and Whether) to Close Gmail

You don’t have to close it. Many people keep Gmail forwarding in perpetuity as a safety net. If you do want to close it:

• Wait until at least a year of forwarding has passed without surfacing any new accounts
• Export your Google Takeout data first (mail, contacts, calendar, photos, etc.)
• Update or remove the address from any remaining accounts you can find
• Confirm your account recovery email and phone number do not still reference the Google account

Then close the account through Google’s account management page. Once closed, the username can be re-registered by Google after a holding period — your forwarded mail stops arriving immediately, but the address is not necessarily yours anymore.

What Will Break

A few things genuinely don’t migrate well:

Gmail filters and labels don’t transfer. Both Proton and Tutanota have their own filtering systems. Plan to recreate the most important rules manually.

Google Calendar invitations sent to your old address won’t appear in your new calendar without setup. Forward your calendar to the new account, or use the calendar at your new provider.

Gmail-only features — Smart Reply, Smart Compose, conversation view exactly as Gmail does it — won’t have direct equivalents. Both Proton and Tutanota have their own UX choices that take a few weeks to feel natural.

Search will work, but it may not match Gmail’s speed and quality immediately. Both Proton and Tutanota search inside encrypted content using local indexes, which means there’s a one-time index build before search becomes useful.

What Doesn’t Break

Most of what you actually do with email — read, write, organize into folders, archive, mark important — works exactly the same. The transition feels smaller in week three than it does in week one.

Treat the move as a project that takes a few weekends spread over a year, not as something you finish in an afternoon.