PGP for Email

📧 Encrypting Email with PGP

This guide walks you through using PGP (Pretty Good Privacy) to encrypt email using both graphical and client-based tools.

PGP encryption ensures that only the intended recipient can read your email content — even if it's intercepted.

---

🔹 Option A: Outlook (Windows) with GpgOL

GpgOL is a plugin included with Gpg4win that integrates directly into Microsoft Outlook (desktop only).

✅ Requirements

• Gpg4win (with GpgOL selected during installation)
• Outlook 2010 or newer (desktop version)
• Recipient’s public key

⚠️ GpgOL does not work with Outlook for Microsoft 365 Web or Outlook Mobile. It is only compatible with the desktop edition of Outlook on Windows.

📥 Encrypting an Email in Outlook

1. Open Outlook and compose a new message
2. Enter the recipient’s email address (must match imported key)
3. Click the Encrypt button on the GpgOL ribbon tab
4. Send your email

✉️ Outlook will encrypt the email contents using the recipient's public key.

📥 Decrypting an Email in Outlook

When receiving an encrypted message:

• GpgOL will automatically prompt to decrypt it using your private key
• You may need to enter your key passphrase

💡 Tip: Manage keys with Kleopatra — launch from Start Menu

---

🔹 Option B: Thunderbird (Windows/macOS/Linux)

Thunderbird includes built-in OpenPGP support and is often preferred for privacy-focused users.

✅ Setup

1. Download Thunderbird
2. Add your email account
3. Go to: Account Settings → End-to-End Encryption
4. Generate a new key, or import your existing one
5. Import your recipient’s public key

🔐 Sending Encrypted Email

When composing a message:

• Click the padlock icon to enable encryption
• Click sign if you also want to verify authenticity
• Send as usual

---

🔹 Option C: Webmail with Mailvelope

Mailvelope adds OpenPGP support to Gmail, Outlook.com, Yahoo, and others.

🔧 Setup

1. Install Mailvelope for Chrome or Firefox
2. Import your keys or generate a new pair
3. Use the Mailvelope overlay when composing encrypted emails

---

Alternative PGP-Compatible Email Clients

In addition to widely used options like Outlook (via GpgOL) and Thunderbird, several other desktop email clients offer OpenPGP support—either natively or through plugins.

Notable alternatives include:

• Betterbird:
  A privacy-focused Thunderbird fork with full PGP support.
  ▸ Available on Windows, Linux, and macOS.

• eM Client:
  A feature-rich client with native OpenPGP integration and calendar/task support.
  ▸ Available on Windows, macOS, Android, and iOS.
  ▸ Free tier supports 2 email accounts after a 30-day trial.

💡 Note: Be sure to verify the client’s compatibility with your GPG keyring (e.g., Gpg4win or Kleopatra on Windows).

---

📱 Mobile Email Clients with OpenPGP Support

For secure email on Android, the following apps support OpenPGP encryption via OpenKeychain:

• FairEmail
  A lightweight, privacy-first email client for Android, offering built-in OpenPGP support, rich customization, and a modern, privacy-respecting interface.

• K-9 Mail
  A veteran open-source Android mail client known for its simplicity and transparency. K-9 is now maintained by the Thunderbird team as part of their mobile strategy.

• Thunderbird Mobile
  A mobile adaptation of Thunderbird, currently built on K-9 Mail and maintained by the same team. Provides end-to-end encryption and an open-source, user-friendly experience.

⚠️ OpenPGP support on iOS is limited due to platform restrictions.
Most options are proprietary or require external tools, and may not provide full compatibility with standard PGP workflows.

---

📤 Exporting and Sharing Public Keys

You can export your public key from Kleopatra, Thunderbird, or the command line, and share it via:

• Your website
• A keyserver (e.g., keys.openpgp.org)
• Your GitHub profile (e.g., in SECURITY.md or a PGP-KEY.asc file)

🔧 Export via Command Line

If you’re using GnuPG directly:

gpg --armor --export [email protected] > publickey.asc

This creates a text-formatted (.asc) version of your public key that’s easy to upload or embed.

💡 Replace [email protected] with the email associated with your PGP key.

---

🛠 Troubleshooting Tips

• Ensure email address in key matches recipient’s address
• Key must be trusted/imported before encryption works
• For Outlook, restart if GpgOL ribbon does not appear
• Thunderbird may require re-indexing of OpenPGP keyring

---

📚 Learn More

• Gpg4win Documentation
• How to Encrypt Emails with OpenPGP in Thunderbird (2022)
• Mozilla OpenPGP Docs
• Mailvelope Overview

---

🔐 PGP protects your communication, but both parties must be using it correctly. Always test before sending sensitive content.