This guide for the Web app Mail Infomaniak (online service ksuite.infomaniak.com/mail) or the mobile app Infomaniak Mail (application for iOS/Android smartphone or tablet) explains how to activate encryption for emails sent from Infomaniak Web and mobile services.

Preamble

• When encryption is activated, emails and attachments are encrypted as soon as they are received on Infomaniak servers, via the public keys of senders and recipients.
  • Each email address generates a key at its first use, stored securely in Infomaniak data centers.
• The keys are based on elliptic curve cryptography (ECC) and use the OpenPGP standard.
  • They are themselves encrypted in AES-256-GCM with automatic decryption via Infomaniak authentication.
• In search results, only the subject of encrypted messages will be visible, while their content will remain secure during storage.

Activate email encryption...

...from the Infomaniak Web Mail app

To automatically encrypt a message sent to an email address:

1. Click here to access the Web app Mail Infomaniak (online service ksuite.infomaniak.com/mail).
2. Write a new message as usual.
3. Click on the lock icon to the left of the Send button to activate encryption:
   
4. Confirm the action if a confirmation window appears.
5. The icon now represents a closed lock and the color of the whole is changed.
6. Press the Send button.

The action is to be performed with each new send.

A. Recipient whose email is managed with Infomaniak

If the recipient of the encrypted email has an email address managed with Infomaniak, the encryption is done in a completely transparent manner for both the sender and the recipient. A note will indicate the encryption of the message…

1. ... in the recipient's inbox:
   
2. … when opening the received message:
   
3. ... and in the sender's sent folder:
   

B. External recipient

If the recipient of the encrypted email has an email address managed outside of Infomaniak services, encryption is still possible, but it requires setting a password:

1. Click here to access the Infomaniak Mail web app (online service mail.infomaniak.com).
2. Compose a new message as usual, but addressed to an email address outside of Infomaniak.
3. Click on the lock icon ‍to the left of the Send button to enable encryption.
4. A modal opens to allow you to define a password.
5. Enter a password and copy it to send it to the recipient by your own means (kPaste for example) (you can agree on a password in advance so the recipient is already informed):
   
6. The icon now represents a closed lock and you can send the email as usual.

Recipients will then receive a message notifying them that an encrypted email is waiting for them:

By clicking on the provided button, they will be redirected to a secure web page where the password must be entered.

Once the password is validated, the encrypted message can be viewed on the same page.

… from the Infomaniak Mail mobile app

To automatically encrypt a message sent to an email address:

1. Open the Infomaniak Mail mobile app (app for iOS / Android smartphone or tablet).
2. Compose a new message as usual.
3. Tap the lock icon at the bottom of the composition window to enable encryption:
   

A. Recipient whose email is managed with Infomaniak

If the recipient of the encrypted email has an email address managed with Infomaniak, the encryption is completely transparent for both the sender and the recipient:

1. Closed padlocks are displayed on the screen.
2. Tap the send icon:
   

B. External recipient

If the recipient of the encrypted email has an email address managed outside of Infomaniak services, encryption is still possible, but it requires setting a password:

1. Sending will not be possible as the send icon will remain grayed out and symbols will appear on the padlocks:
   
2. Tap the lock icon.
3. A modal opens to allow you to set a password.
4. Leave the suggested password or enter a new password and copy it to send it to the recipient by your own means (e.g., kPaste) (you can agree on a password in advance so the recipient is already informed).
5. Tap the cross in the top left if you have finished managing the password.
6. Here it is, the sending can now be done in an encrypted way: