I'm planning on creating a mail server, but I don't want to use passwords at all. They seem a wrong security choice to me.

I'd love to use a certificate to login. This seems easy to do in HTTP, but I found no way to do it in SMTP. Is there any way to do it?

If not, is there another option than passwords? OAuth, 2FA or anything else?

2 Answers 2


Look into client certificate validation for the SMTP server of your choice. For example, in Postfix you can use TLS client certificates as an authentication method.


kerberos (gssapi) or certificates are the options, I guess.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .