You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

84 lines
8.9 KiB
HTML

<!DOCTYPE html>
<html lang="en">
<head>
<title>(POST) How To Encrypt Emails</title>
<link rel="icon" type="image/x-icon" href="../images/favicon.webp">
<link rel='stylesheet' type='text/css' href="../style.css">
<meta charset="utf-8"/>
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<meta property="og:image" content="../images/favicons/blog.webp"></head>
<body>
<a style="text-decoration: none;" href="../">
<pre class="main-header">
_______ _ _ _______ __ __ _______ _______ __ _
|______ | | |______ \_/ |_____| |_____| | \ |
______| |_____| | | | | | | | \_|
</pre>
</a>
<hr/>
<p><a href="../">sf.me</a> > <a style="color:#bd93f9" href="../blog/">Blog</a> > <a style="color:#bd93f9" href=".">How To Encrypt Emails</a></p>
<h1>How To Encrypt Emails</h1>
<p style="font-size:110%">Posted on: <strong>14 March 2023</strong></p>
<p style="font-size:110%">Reading time: <strong><strong>4 min</strong>
<p>
<p style="font-size:110%"></strong>Category: <a style="color:#ff79c6" href="../blog/software/"><strong>Software</strong></a> && <a style="color:#ff79c6" href="../blog/guides/"><strong>Guides</strong></a></p>
<p>In this article, I will show you how to encrypt emails. You can encrypt emails on almost any device. In this article, however, I will be focusing on Gmail, Outlook, Yahoo. I will also be focusing on making ProtonMail encrypt emails with Gmail.</p>
<h2>Myths</h2>
<p>Firstly, let us dispell a few myths. The first myth is a big one.</p>
<h3>Gmail's Confidential mode does not encrypt your emails</h3>
<p>Yes, you heard that right. Gmail's confidential mode does not encrypt your emails. Whenever I speak about email encryption, I hear something along the lines of:</p>
<p><em>“Why are you making things so complicated? Just use Gmail's confidential mode! It encrypts your emails for you!”</em></p>
<p>No, Gmail's confidential mode does not encrypt emails. It simply puts a password on your email.</p>
<h3>ProtonMail does not encrypt emails sent to non-ProtonMail users</h3>
<p>This is also a huge myth. ProtonMail encrypts emails sent to other ProtonMail users. However, they do not encrypt emails sent to or received from non-ProtonMail users. It collects less data about you and it stores your emails with encryption on their servers but the email itself is not encrypted on the other person's end.</p>
<p>Encryption for non-ProtonMail users works on a user-to-user basis. You have to have the encryption keys of the other person if they are a non-ProtonMail user and they also have to encrypt their emails manually. We will learn how to do this in this guide.</p>
<h2>Online Email</h2>
<p>Encrypting your emails online is a simple process.</p>
<h3>Step 1: Get the Mailvelope extension</h3>
<p><a href="https://mailvelope.com/">Mailvelope is a free, libre and open-source browser extension</a> which allows you to not only encrypt emails using public keys but also has a keyserver which has a list of other people who use Mailvelope. Emails sent to other people using Mailvelope will automatically be encrypted.</p>
<h3>Step 2: Set it up</h3>
<p>Open the extension and generate your keypair if you do not have a keypair or import your keypair if you do have one.</p>
<div style="text-align:center"><img src="mailvelope-1.webp" alt="Mailvelope Setup Screen"></div>
<h3>Step 3: Import other people's keys</h3>
<p>Encourage all of your friends to get the Mailvelope extension. Afterwards, you can import their public keys. Henceforth, all emails will be encrypted. Many websites also give their own public key along with their emails so that you can encrypt them as well. If you have friends who use ProtonMail, go to the ProtonMail import section of this post.</p>
<h3>Step 4: Send encrypted emails!</h3>
<p>Whenever you go to compose an email, there will be a button like the image below. Just click on it and there will be a popup to compose your encrypted email. Just fill in the info and send your email!</p>
<div style="text-align:center"><img src="mailvelope-2.webp" alt="Mailvelope Icon to send encrypted emails"></div>
<h2>Smartphones</h2>
<p>Firstly, I would like to give a disclaimer. There is no way to use PGP encryption on iOS. Most encryption that is used on iOS is either paid or unavailable. On Android, you cannot encrypt emails using the native applications for Gmail, Outlook or Yahoo. Even if there is such a feature, you should not use their official clients due to their invasive tracking. To encrypt emails, we will use an email app called K-9 Mail. I believe that everyone should use K-9 Mail even if they are not encrypting their emails. It is a fantastic app.</p>
<p>K-9 Mail is a free and open-source email app that has a lot of features. I believe that no one should be writing emails on their phones but it is a great app to have just to make sure there is nothing urgent in your inbox.</p>
<h3>Step 1: Get the app</h3>
<p>K-9 Mail is on the Play Store, but do not get it from there. <a href="https://f-droid.org/">Get F-Droid</a> and make it a habit to download apps you use and the alternatives to them through F-Droid. <a href="https://f-droid.org/packages/com.fsck.k9/">K-9 Mail is available on F-Droid</a> and is a popular app there.</p>
<h3>Step 2: Set it up</h3>
<p>Follow the guide to enter your email address and get it working through K-9 Mail. I have tried Gmail and it works flawlessly. <strong>Other</strong> email providers will work well but some may not work at all.</p>
<h3>Step 3: Get the OpenKeychain app</h3>
<p>OpenKeychain is an app that allows you to import and manage PGP keys. <a href="https://f-droid.org/packages/org.sufficientlysecure.keychain/">It is also available on F-Droid.</a></p>
<h3>Step 4: Generate/Import your key</h3>
<p>Generate your key by pressing the option to create a key or import the key file.</p>
<h3>Step 5: Setup K-9 Mail</h3>
<p>Go back to K-9 Mail, go to settings, go to your account that you added, go to end-to-end encryption and enable it. Select your key. Turn on autocrypt mutual mode. That is it! You should see a lock icon whenever you are sending an email to someone if you have their PGP public key. If you need to import more keys, just go to the OpenKeychain app and import them.</p>
<div style="text-align:center"><img src="k9-encryption.webp" alt="Composing an encrypted email in K-9 Mail"></div>
<h2>Exporting ProtonMail Keys</h2>
<p>To export your ProtonMail public keys, follow these steps.</p>
<ol>
<li>Login to your ProtonMail account</li>
<li>Go to the settings</li>
<li>Go to the section labelled 'Encryption and keys'</li>
<li>Scroll down to 'Email encryption keys' and click 'Export'.</li>
</ol>
<p>The image below is how it looks like in 2023.</p>
<div style="text-align:center"><img src="protonmail-key-export.webp" alt="ProtonMail Key Export Dashboard"></div>
<p>You can now send these keys to anyone to import into their PGP keychain. They will then be able to encrypt emails when sending them to your ProtonMail address!</p>
<h2>Conclusion</h2>
<p>That is it! You have setup encryption on your emails. This is a great step as email itself is very unsecure, so this will boost your privacy and security by a lot. Sharing passwords through email has never been safe but encryption allows you to do it with a good range of security.</p>
<p><a href="mailto:sf@sufyaan.me?subject=How%20To%20Encrypt%20Emails">>>> Reply To Me</a></p>
<p><a href="email.pdf">>>> Download PDF</a></p>
<p style="text-align:center;"><a href="../crypto/" style="color:#bd93f9"><svg class="footer-posts" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 48 48"><mask id="ipSLeftOne0"><path fill="#fff" stroke="#fff" stroke-linejoin="round" stroke-width="4" d="M30 36L18 24l12-12v24Z"/></mask><path fill="currentColor" d="M0 0h48v48H0z" mask="url(#ipSLeftOne0)"/></svg>Previous Post</a> - <a style="color:#bd93f9" href="../browser/">Next Post</a> <svg class="footer-posts" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 48 48"><mask id="ipSRightOne0"><path fill="#fff" stroke="#fff" stroke-linejoin="round" stroke-width="4" d="m20 12l12 12l-12 12V12Z"/></mask><path fill="#bd93f9" d="M0 0h48v48H0z" mask="url(#ipSRightOne0)"/></svg></p>
<hr/>
<footer>
<p class="footer-text"><a style="color:#bd93f9" href="../blog">blog</a> - <a style="color:#ffb86c" href="../about">about</a> - <a style="color:#f1fa8c" href="../portfolio">portfolio</a> - <a style="color:#ff5555" href="../links">links</a></p>
<p class="footer-text" style="font-size:80%"><a href="../">sufyaan.me</a></p>
<p class="footer-text" style="font-size:65%"><a style="color:#aaaaaa" href="../sitemap">Site Map</a></p>
</footer>