Remember that sinking feeling when you realize you've sent sensitive information through regular email? I do. Last year, I accidentally forwarded a client's contract details to the wrong person. Nothing bad happened, but that cold sweat moment made me finally learn how to send an encrypted email properly.
Why Bother with Encryption Anyway?
Most people don't realize email is like a postcard. Anyone handling it can read your messages. I used to think "Who'd care about my boring emails?" until my bank statement got intercepted. Here's why encryption matters:
What Encryption Actually Does
It scrambles your message into unreadable gibberish during transit. Only someone with the right digital key can unscramble it. Without encryption, your emails can be:
- Intercepted by hackers on public Wi-Fi (happened to me at a coffee shop)
- Read by email providers (yes, they scan your content)
- Accessed if someone guesses your weak password
| Email Risk | Without Encryption | With Encryption |
|---|---|---|
| Hacker interception | Full content readable | Appears as scrambled code |
| Email provider access | Content scanned for ads | Only see metadata |
| Accidental forwarding | Recipient sees everything | Requires authentication to view |
| Government requests | Service providers must comply | Only provide encrypted data |
Different Flavors of Email Encryption
Not all encryption is equal. Through trial and error (and some headaches), I've learned there are three main approaches to sending encrypted emails:
Built-In Encryption Services
Services like ProtonMail or Tutanota bake encryption right into their platforms. I switched to ProtonMail last year and love how simple it is:
- No technical setup needed
- Automatic encryption between users
- Mobile apps work seamlessly
But there's a catch - it only works fully when emailing other ProtonMail users. When I email my aunt's Gmail account, I have to use password-protected messages.
Their Limitations
- Sparse customer support (waited 3 days for a reply once)
- Limited integrations with other tools
- Free accounts have storage restrictions
Still, for everyday secure messaging, they're my go-to solution when discussing how to send an encrypted email to friends.
PGP/GPG: The Old-School Powerhouse
Pretty Good Privacy (PGP) is like the Fort Knox of email encryption. I use GNU Privacy Guard (GPG), the open-source version. Setting it up feels like assembling IKEA furniture blindfolded initially, but once configured:
- Works with any email client (Outlook, Apple Mail, Thunderbird)
- End-to-end encryption regardless of provider
- Digital signature capability
// Sample GPG Command to Encrypt File
gpg --encrypt --recipient [email protected] secret_document.txt
gpg --encrypt --recipient [email protected] secret_document.txt
My first PGP attempt took two hours and three YouTube tutorials. The key management is clunky, but it's still the gold standard for journalists and whistleblowers.
Step-by-Step: Sending Your First Encrypted Email
Let's walk through how to send an encrypted email using common methods. I'll share the pitfalls I encountered so you avoid them.
Using ProtonMail (Beginner-Friendly)
- Create a free account at protonmail.com
- Compose new email and click the lock icon below the subject line
- Set expiration time (I usually choose 1 week)
- Add password hint if sending to non-ProtonMail users (but never the actual password!)
- Click "Encrypt and Send"
The recipient gets a notification with decryption instructions. When I first used this, I forgot to tell my client the password separately - lesson learned!
Using Gmail with FlowCrypt (Intermediate)
- Install FlowCrypt browser extension
- Generate your encryption key when prompted
- Write email normally in Gmail
- Click the "Encrypt" button before sending
- Share your public key with contacts
I like this method but wish FlowCrypt's mobile app was more reliable. Sometimes encryption fails mid-send on my Android.
Critical: Key Exchange Protocol
No matter which method you use, securely sharing encryption keys is vital. I once sent my PGP public key via regular email - dumb move. Now I use:
- Signal messenger for key exchange
- In-person QR code scanning
- Verified public key servers
Treat your private key like your toothbrush - never share it!
Real Encryption Tools I Actually Use
After testing over a dozen tools, here's what survived my daily workflow:
| Tool | Cost | Best For | Setup Time | My Rating |
|---|---|---|---|---|
| ProtonMail | Free-$8/mo | Personal & small business | 5 minutes | ★★★★☆ |
| Mailfence | Free-$8/mo | Document sharing | 10 minutes | ★★★☆☆ |
| Virtru | Free-$15/user/mo | GSuite/Outlook integration | 15 minutes | ★★★★☆ |
| GPGSuite | Free | Advanced users | 45+ minutes | ★★★☆☆ |
| Tutanota | Free-€2/mo | Open-source enthusiasts | 7 minutes | ★★★★☆ |
Warning: Avoid "encrypted" webmail services that hold your decryption keys. True end-to-end encryption means only you and the recipient hold the keys. I learned this the hard way with a now-defunct service called SafeGmail.
DIY Encryption: When You Need Maximum Security
For ultra-sensitive communications, I combine two methods:
- Encrypt attachments separately with Veracrypt
- Send password through Signal messenger
- Send encrypted email with encrypted attachment
Overkill? Probably. But when sending tax documents to my accountant, it's worth the extra steps. Takes about 8 minutes total once you're practiced.
Attachment Encryption Checklist
- Compress files to ZIP first
- Use AES-256 encryption standard
- Create password with 12+ characters (mix upper/lower/symbols)
- Verify decryption works before sending
- Name files innocuously (e.g., "Q3_Reports.zip")
I once named a file "SECRET_CONTRACT.zip" - don't be like me.
Why Encryption Sometimes Fails (And How To Fix)
Even now, I occasionally mess up encrypted emails. Common failures include:
Recipient Errors
- Forgets password (set memorable hints!)
- Deletes "secure message" notification accidentally
- Uses outdated email client
When sending to tech-challenged friends, I now include screenshots.
Technical Glitches
- Browser extensions conflict (disable other extensions)
- Certificate expiration (check annually)
- Firewall blocking ports (test on mobile data)
My VPN once blocked port 993 needed for encrypted IMAP.
Encrypted Email FAQs
Can I send encrypted email from my iPhone?
Absolutely. ProtonMail, Tutanota, and Canary Mail all have iOS apps. I use Canary Mail because it lets me encrypt messages from my regular iCloud account. The interface takes getting used to though - the settings are buried too deep.
Is encrypted email slower than regular email?
Marginally. Encryption adds 2-5 seconds to sending time. I've never noticed delays except once when sending a 50MB encrypted file. For large attachments, I prefer sharing encrypted links via Tresorit instead.
Do both parties need special software?
For full end-to-end encryption, yes. But services like ProtonMail let you send password-protected emails to anyone. The recipient just needs to open a web portal and enter the password you provided separately. I always follow up with a text saying "Check your email for secure portal link."
Are free encrypted email services trustworthy?
Mostly. ProtonMail and Tutanota have solid reputations based in Switzerland and Germany (strong privacy laws). But avoid obscure "free encrypted email" services with vague ownership. I tried one called SecMail that disappeared overnight taking my data with it.
Key Takeaways Before You Start
Learning how to send an encrypted email feels daunting initially, but becomes second nature. Here's what I wish someone told me when I started:
- Start small - Encrypt mundane emails first to build confidence
- Master password recovery - Losing access to encrypted emails is permanent
- Combine methods - Use PGP for messages + VeraCrypt for attachments
- Verify before sending - Send test emails to yourself first
The peace of mind is worth the slight inconvenience. Last month, my accountant told me my encrypted tax files were the only ones that arrived uncompromised from his clients. Felt good.
Got specific questions about how to send an encrypted email for your situation? I've probably wrestled with it. Remember, imperfect encryption is still better than none. Just hit send.
Leave a Message