Email messages often contain sensitive information that should only be accessible to the intended recipient. Enabling email encryption helps protect message content from unauthorized access and adds an important layer of security for personal and business communications.

1. Select an Encryption Method

Choose the encryption method that best fits your email platform and security requirements:

• S/MIME (Secure/Multipurpose Internet Mail Extensions): Commonly used with business email clients such as Outlook and Apple Mail.
• PGP (Pretty Good Privacy): A popular option for personal and advanced users that provides end-to-end encryption.

2. Obtain a Certificate or Encryption Key

Before you can send encrypted messages, you must have the appropriate credentials installed.

• S/MIME: Request a digital certificate from a trusted Certificate Authority (CA).
• PGP: Generate a public and private key pair using tools such as Gpg4win or Mailvelope.

3. Install the Certificate or Key

Follow the instructions for the email platform and encryption method you are using.

Outlook (S/MIME)

1. Open Outlook.
2. Select File > Options > Trust Center > Trust Center Settings.
3. Choose Email Security.
4. Select Import/Export and install your certificate.
5. Enable Encrypt contents and attachments for outgoing messages.

Gmail or Other Webmail Services (PGP)

1. Install a compatible browser extension, such as Mailvelope.
2. Import your PGP key.
3. Associate the key with your email address.
4. Verify that the extension is active and properly configured.

4. Send an Encrypted Email

1. Create a new email message.
2. Enable encryption using your email client's encryption or security option.
3. Verify that the recipient supports encryption and has a valid certificate or public key.
4. Send the message.

5. Confirm Encryption Is Working

1. Send a test message to yourself or a trusted contact.
2. Verify that the email arrives encrypted.
3. Confirm that the recipient can successfully decrypt and read the message.

Email will not send

• Confirm that the recipient has a valid certificate or public key.
• Check whether your certificate has expired.
• Verify that your encryption settings are correctly configured.

Recipient cannot read the encrypted message

• Ensure the recipient has imported your public key or trusts your certificate.
• Confirm that the correct certificate or key was used when encrypting the message.

Attachments are not encrypted

• Some older email clients may not support attachment encryption.
• If attachment encryption is unavailable, consider sharing files through a secure cloud storage service with appropriate access controls.

Additional Security Checks

• Expired keys or certificates: Rotate encryption keys regularly and revoke outdated credentials when necessary.
• Certificate pinning (S/MIME): Pin trusted certificates to reduce the risk of man-in-the-middle attacks.
• Compatibility testing: Test encrypted messages across different devices and email clients to verify consistent decryption.
• Software updates: Keep your email client, encryption tools, browser extensions, and operating system up to date to address known vulnerabilities.

• Verify that the recipient's email client supports encryption before sending sensitive information.
• Never share your private key or encryption password.
• Store backups of encryption keys and certificates in a secure location.
• Review certificate validity and expiration dates regularly.
• Email encryption protects message content but does not hide metadata such as the sender, recipient, or subject line.
• Test encryption functionality before sending confidential information.

Email encryption helps safeguard sensitive information and reduce the risk of unauthorized access. Once encryption is configured and tested, you can send secure messages with greater confidence. If you continue to experience issues or need assistance with setup, contact Swazzy Support.