Enigmail Guide for Email Security and Encryption

Author

Reads 3K

A hand holding a smartphone displaying a VPN app screen for secure online browsing.
Credit: pexels.com, A hand holding a smartphone displaying a VPN app screen for secure online browsing.

Enigmail is an extension for email clients that adds encryption and digital signatures to your emails. It's a great tool for keeping your communications private and secure.

Enigmail uses the OpenPGP standard to encrypt emails, which is a widely accepted and trusted method. This means you can send and receive encrypted emails with anyone who also uses OpenPGP.

To get started with Enigmail, you'll need to generate a pair of keys: a public key and a private key. Your public key can be shared with others, while your private key should be kept safe and secure.

The private key is used to decrypt incoming encrypted emails, so it's essential to keep it safe from unauthorized access.

Intriguing read: Password Safe

Getting Started

To get started with Enigmail, you need to set up email encryption. You can't send or receive encrypted emails until you've initialized the process.

To initialize email encryption, you need to send your public key to your contacts. This is the key step in being able to send and receive encrypted emails.

To send your public key, write a new email to a recipient and click on Enigmail in the menu, then Attach Public Key… and send the email.

Once you've sent your public key, the recipient can send you encrypted emails.

Installing

Businesswoman using a desktop computer in an office, viewing contact details on screen.
Credit: pexels.com, Businesswoman using a desktop computer in an office, viewing contact details on screen.

To get started with Enigmail, you need to install it in Thunderbird.

Open Thunderbird and click the sandwich button in the menu at the top right.

Next, click Add-ons and enter “Enigmail” in the search field, then confirm with the Enter key.

Click Install next to the entry for Enigmail.

Once installation is complete, restart Thunderbird by clicking Restart.

For quick setup, follow our visual instructions.

For more insights, see: Mozilla Thunderbird

Initialising Email Encryption

You can't send or receive encrypted emails until you've set up your system.

To start with, you need to know the recipient's public key to encrypt emails, and the sender needs your public key to receive encrypted emails.

The last step for sending and receiving encrypted email is initialisation: sending your public key to your contacts.

To do this, write a new email to a recipient with whom you'd like to communicate encrypted, then click Enigmail in the menu and attach your public key.

You'll need to define how you want to encrypt attachments for future emails, and we recommend using PGP/MIME.

Email Blocks on Gray Surface
Credit: pexels.com, Email Blocks on Gray Surface

Here's a step-by-step guide to initialising email encryption:

  1. Write a new email to a recipient with whom you'd like to communicate encrypted.
  2. Before sending the email, click Enigmail in the menu and then Attach Public Key….
  3. Now click Send.
  4. Select Sign the message as a whole and send it using PGP/MIME.
  5. Place a tick next to Use the selected method for all future attachments.
  6. Confirm by clicking OK.

You've sent your public key, and the recipient can now send you encrypted emails.

Security and Encryption

Enigmail offers a secure alternative to traditional email encryption methods. It uses OpenPGP public key e-mail encryption and signing, handled by GNU Privacy Guard.

You can only encrypt emails if you know the recipient's public key. This is a crucial step in the encryption process. To obtain a recipient's public key, you can ask them to send it to you or search for it online.

Enigmail is compatible with various operating systems, including Microsoft Windows, Unix-like, and Mac OS X. It also works with other mail clients, such as Microsoft Outlook with Gpg4win package installed, Gnome Evolution, KMail, Claws Mail, Gnus, and Mutt.

To set up Enigmail, you'll need to generate a key pair. This involves creating a public key and a private key, which are used for encryption and decryption, respectively. The private key should be kept safe, as it's the only way to access encrypted messages.

For another approach, see: Microsoft Mobile Services

A close-up of a laptop screen showing a credit card security notification next to a potted plant.
Credit: pexels.com, A close-up of a laptop screen showing a credit card security notification next to a potted plant.

A good analogy for the encryption process is a safe belonging to your email recipient. Imagine the recipient has a safe that you can put messages into, and only the recipient has the key to open the safe and see your message. The safe is the recipient's public key, and they use their private key to decrypt the message.

To complete the initialisation process, you'll need to send your public key to your contacts. This can be done by drafting a new email with your public key included. Enigmail will automatically check if you have the recipient's public key before encrypting the email.

Here are some important points to remember for best security practices:

  • Subject headers and recipients are never encrypted; so the subject and who you are communicating with is totally visible
  • Never share your passphrase with anyone
  • Never share your private key with anyone
  • Your private key is on your computer; keep it safe the same way you protect other precious files: lock your computer, keep backups, and save your revocation certificate somewhere safe

By following these steps and best practices, you can enjoy secure and private communication with Enigmail.

Creating and Managing Keys

To create a key pair, you'll need to use the Enigmail wizard, which opens automatically after installation. The wizard walks you through the process, making it easy to set up.

A man arranges keys in a wall-mounted cabinet inside an office setting.
Credit: pexels.com, A man arranges keys in a wall-mounted cabinet inside an office setting.

You can only encrypt an email if you know the recipient's public key. Enigmail automatically checks if you have the public key and decides whether encryption is possible or not.

Select Sign all of my messages by default to include a digital signature with your emails. A digital signature is an important part of the email encryption process.

To create a new key pair, select I want to create a new key pair for signing and encrypting my email. This will generate your personal key pair.

Choose a passphrase to protect your private key, which you'll use to decrypt your emails. Never disclose your passphrase to anyone.

You can create a revocation certificate to make your key invalid if your private key is stolen. Save the certificate to your computer and keep it safe.

Here's a quick summary of the key creation process:

  • Choose to create a new key pair.
  • Select a passphrase to protect your private key.
  • Read the summary and confirm your key creation.
  • Create a revocation certificate to keep your key safe.

Using Thunderbird

Using Thunderbird is a great way to start using email encryption with Enigmail. You can install Enigmail directly in Thunderbird, which will help you set up key pairs and check if the recipient can decrypt your emails.

Credit: youtube.com, How to Setup Encryption in Thunderbird Mail with Enigmail (Windows 10)

To get started, you'll need to install the Enigmail add-on in Thunderbird. This requires a free, non-proprietary email client that you can modify, and Mozilla Thunderbird fits the bill.

You'll also need to use a program called GnuPG to set up a secure pair of keys for encryption and decryption. This program is likely already installed on your GNU/Linux operating system, but if not, you can install it separately.

Here are the steps to install Enigmail in Thunderbird:

  1. Choose the beginner options, unless you are an expert, and then click Next
  2. On the key selection screen, indicate you want to create a new key and click Next
  3. Select the account you want to use and provide your secure passphrase:
  4. Be patient, it will take a while to generate a secure keypair
  5. After the key generation is complete, save your “Revocation Certificate” to a secure location
  6. Click Next to proceed and Finish

Using Thunderbird

Thunderbird is a free, non-proprietary email client that's perfect for modifying and using with email encryption.

To start using email encryption with Thunderbird, you'll need to use a program called GnuPG, which sets up a secure pair of keys for encrypting and decrypting messages.

You can use a GNU/Linux operating system, it's most likely that GnuPG is already installed in your system.

Thunderbird recommends using Mozilla Thunderbird as the email client for email encryption.

A close-up of the word 'Secure' spelled out with tiles on a red surface, ideal for security concepts.
Credit: pexels.com, A close-up of the word 'Secure' spelled out with tiles on a red surface, ideal for security concepts.

To install Enigmail, a plugin that helps you set up key pairs, you'll need to add it as an addon to Thunderbird.

You can install Enigmail by searching for it under Tools > Addons in Thunderbird.

To generate and use an OpenPGP key for your email address, you'll need to follow the setup wizard in Enigmail.

The setup wizard will guide you through creating a new key, selecting the account you want to use, and providing a secure passphrase.

Be patient, it will take a while to generate a secure keypair.

Once you've generated your keypair, save your Revocation Certificate to a secure location.

To upload your public key to a keyserver, choose Enigmail from the toolbar and Key Management, right-click your key, and choose upload public keys to keyserver.

This will allow others to easily find your key to send you encrypted messages.

Here's a step-by-step guide to setting up Enigmail:

  1. Choose the beginner options, unless you are an expert, and then click Next.
  2. On the key selection screen, indicate you want to create a new key and click Next.
  3. Select the account you want to use and provide your secure passphrase:
  4. Be patient, it will take a while to generate a secure keypair.
  5. After the key generation is complete, save your “Revocation Certificate” to a secure location; you will be prompted to do this; further explanation follows.
  6. Click Next to proceed and Finish.
  7. To upload your public key to a keyserver, choose Enigmail from the toolbar and Key Management.
  8. Right-click your key and choose upload public keys to keyserver.

To send encrypted emails, you'll need to know the recipient's public key.

High-Angle Shot of Two People Using Their Laptop while Working in the Office
Credit: pexels.com, High-Angle Shot of Two People Using Their Laptop while Working in the Office

You can only receive encrypted emails if the sender knows your public key.

To send your public key to a recipient, write a new email to them, click Enigmail in the menu, and then Attach Public Key….

You can also use a keyserver to host your public key, making it easy for others to find and use it to send you encrypted messages.

To use a keyserver, choose Enigmail from the toolbar and Key Management, right-click your key, and select upload public keys to keyserver.

This will allow others to easily find your key to send you encrypted messages.

Here's a list of keyserver options:

By following these steps, you'll be able to set up Enigmail and start sending and receiving encrypted emails with Thunderbird.

4 Stars Rating

Using Thunderbird, you'll want to know about the 4-star rating from users who've had success with the Enigmail add-on.

Enigmail works fine on Win7 64bit with Thunderbird 68.4.1 and the newest gpg4win 3.1.11.

Close-up of a hand holding a smartphone displaying email app against a green background.
Credit: pexels.com, Close-up of a hand holding a smartphone displaying email app against a green background.

It also works as expected for Thunderbird 68.4.1, according to a user who's been using Enigmail for many years.

If you're having trouble getting Enigmail to work, try clicking on "Search for Updates" using the "wheel" icon, and if no update is found, download Enigmail from a specific link and install it manually.

Enigmail has been reported to work perfectly with Thunderbird 68.3.1, so it's likely a compatibility issue that can be resolved with a little troubleshooting.

Glen Hackett

Writer

Glen Hackett is a skilled writer with a passion for crafting informative and engaging content. With a keen eye for detail and a knack for breaking down complex topics, Glen has established himself as a trusted voice in the tech industry. His writing expertise spans a range of subjects, including Azure Certifications, where he has developed a comprehensive understanding of the platform and its various applications.

Love What You Read? Stay Updated!

Join our community for insights, tips, and more.