{{short description|Open-source web-based IMAP email client}} {{Use American English|date=March 2026}} {{Use mdy dates|date=March 2026}} {{Infobox software | name = Roundcube | logo = Roundcube logo icon.svg | logo_size = 100px | screenshot = Roundcube 1.6.0 screenshot.png | author = Thomas Bruederli | developer = The Roundcube Team<ref>{{cite web |url=http://trac.roundcube.net/wiki/Dev_Members |title=Dev_Members - Roundcube Webmail - Trac |publisher=Trac.roundcube.net |access-date=September 19, 2011 |url-status=dead |archive-url=https://web.archive.org/web/20111002090238/http://trac.roundcube.net/wiki/Dev_Members |archive-date=October 2, 2011 }}</ref> | released = {{Start date and age|2008|3|4}} | latest release version = {{wikidata|property|preferred|references|edit|Q1769269|P348|P548=Q2804309}} | latest release date = {{wikidata|qualifier|preferred|single|Q1769269|P348|P548=Q2804309|P577}} | latest preview version = {{wikidata|property|preferred|references|edit|Q1769269|P348|P548=Q51930650}} | latest preview date = {{wikidata|qualifier|preferred|single|Q1769269|P348|P548=Q51930650|P577}} | programming language = PHP | operating_system = Cross-platform | genre = Webmail | license = GPL-3.0-or-later with exceptions for skins and plugins<ref name="license-diff">{{cite web|url=http://trac.roundcube.net/changeset/5787|title=Changeset 5787 - Roundcube Webmail|url-status=dead|archive-url=https://web.archive.org/web/20120426105707/http://trac.roundcube.net/changeset/5787|archive-date=April 26, 2012}}</ref> }} '''Roundcube''' is a web-based IMAP email client written in PHP. It uses Ajax throughout its interface and is licensed under the GNU GPL version 3 or later, with exceptions for skins and plugins.<ref name="license-diff" />
== History == After roughly two years of development, the first stable release of Roundcube was announced on March 4, 2008.<ref>{{cite web |url=https://roundcube.net/news/2008/03/04/roundcube-webmail-01-stable-released |title=RoundCube Webmail 0.1-stable released |date=March 4, 2008 |website=roundcube.net |access-date=March 8, 2024}}</ref> cPanel adopted Roundcube as its bundled webmail client, replacing SquirrelMail.
On May 3, 2015, Roundcube announced, in partnership with Kolab Systems AG, a plan to completely rewrite the application as Roundcube Next. A crowdfunding campaign was set up to finance the project. The $80,000 goal was reached on June 24, 2015,<ref>{{cite web |title=Tweet from @roundcubenext |url=https://twitter.com/roundcubenext/status/613697964893184000}}</ref> and the final amount raised was US$103,541.<ref>{{cite web |title=RoundCube-Next is Woefully Behind Schedule |url=https://www.phoronix.com/scan.php?page=news_item&px=RoundCube-Next-Drags-On |url-status=live |archive-url=https://web.archive.org/web/20211019123100/https://www.phoronix.com/scan.php?page=news_item&px=RoundCube-Next-Drags-On |archive-date=October 19, 2021 |access-date=October 19, 2021 |website=Phoronix}}</ref> Roundcube Next was intended to add calendar, chat, and file management features using WebRTC, with connectors for services such as Dropbox and ownCloud. Kolab Systems and Roundcube halted development in 2016, and backers received no updates or refunds.<ref>{{cite web |title=In 2018, RoundCube Next Remains Dead In The Water |url=https://www.phoronix.com/scan.php?page=news_item&px=RoundCube-Next-2018 |url-status=live |archive-url=https://web.archive.org/web/20211019123014/https://www.phoronix.com/scan.php?page=news_item&px=RoundCube-Next-2018 |archive-date=October 19, 2021 |access-date=August 9, 2019 |website=Phoronix}}</ref> A Roundcube developer later stated that the project had no ownership over the Roundcube Next campaign.<ref>{{cite web |title=What about Roundcube Next? · Issue #6030 · roundcube/roundcubemail |url=https://github.com/roundcube/roundcubemail/issues/6030 |url-status=live |archive-url=https://web.archive.org/web/20211019123014/https://github.com/roundcube/roundcubemail/issues/6030 |archive-date=October 19, 2021 |access-date=August 9, 2019 |website=GitHub |language=en}}</ref>
In November 2023, Nextcloud announced a partnership with Roundcube.<ref>{{cite web |last=Korotaev |first=Mikhail |date=November 29, 2023 |title=Open source email pioneer Roundcube joins the Nextcloud family |url=https://nextcloud.com/blog/open-source-email-pioneer-roundcube-comes-aboard-nextcloud/ |access-date=December 2, 2023 |website=Nextcloud Blog}}</ref><ref>{{cite web |last=Rudra |first=Sourav |date=December 1, 2023 |title=Open-Source Webmail Roundcube Joins Nextcloud |url=https://news.itsfoss.com/nextcloud-roundcube/ |access-date=December 2, 2023 |website=ItsFOSS.com}}</ref>
== Architecture == Roundcube runs on standard web servers such as Apache, LiteSpeed, Nginx, and Lighttpd, and can be deployed on any operating system that supports PHP. It works with a LAMP stack or comparable environment. The web server requires access to an IMAP server for reading mail and an SMTP server for sending. Supported databases are MySQL, PostgreSQL, and SQLite.
The user interface is rendered in XHTML and CSS and is fully customizable through skins. Roundcube ships with jQuery and additional libraries including GoogieSpell and TinyMCE.
== Features == Roundcube supports over 70 interface languages and connects to any IMAPv4 server with encrypted TLS connections. The interface uses Ajax to enable drag-and-drop message management, threaded message listing, and find-as-you-type address-book lookup. It provides full support for MIME and HTML messages, rich-text composition, multiple sender identities, and spell checking. The address book supports vCard, group management, and LDAP directory integration. Additional capabilities include PGP encryption via Mailvelope, OAuth authentication, shared and global IMAP folders with ACL support, IDNA support, and a template system for custom themes.
== Security == In 2023, the pro-Russia hacking group Winter Vivern<ref>{{cite web |date=March 16, 2023 |title=Winter Vivern | Uncovering a Wave of Global Espionage |url=https://www.sentinelone.com/labs/winter-vivern-uncovering-a-wave-of-global-espionage}}</ref> exploited a cross-site scripting vulnerability in Roundcube to attack European government entities and a think tank, as reported by researchers from ESET.<ref>{{cite web |date=October 25, 2023 |title=ESET Research: Winter Vivern attacks Roundcube webmail servers of governments in Europe through zero-day vulnerability |url=https://www.eset.com/int/about/newsroom/press-releases/research/eset-research-winter-vivern-attacks-roundcube-webmail-servers-of-governments-in-europe-through-zero |url-status=dead |archive-url=https://web.archive.org/web/20231028041109/https://www.eset.com/int/about/newsroom/press-releases/research/eset-research-winter-vivern-attacks-roundcube-webmail-servers-of-governments-in-europe-through-zero/ |archive-date=October 28, 2023 |access-date=October 28, 2023 |website=ESET}}</ref> Opening a malicious email was sufficient to trigger the exploit, which could read folder contents and forward messages to attacker-controlled servers.<ref>{{cite web |date=October 25, 2023 |title=Pro-Russia hackers target inboxes with 0-day in webmail app used by millions |url=https://arstechnica.com/security/2023/10/pro-russia-hackers-target-inboxes-with-0-day-in-webmail-app-used-by-millions |website=Ars Technica}}</ref>
== See also == * Comparison of email clients * Internet Messaging Program * SquirrelMail
== References == {{reflist|30em}}
== External links == * {{official website}}
{{Authority control}}
{{Email clients}}
Category:Free email software Category:Free software programmed in PHP Category:Free software webmail Category:Web-based email clients for Linux Category:Webmail Category:Software using the GNU General Public License