This guide for the Web app Mail Infomaniak (online service ksuite.infomaniak.com/mail) or the mobile app Infomaniak Mail (application for iOS / Android smartphone or tablet) explains how to enable encryption for emails sent from the Infomaniak Web and mobile services.

Preamble

• When encryption is enabled, emails and attachments are encrypted as soon as they are received on the Infomaniak servers, via the public keys of the senders and recipients.
  • Each email address generates a key at its first use, stored securely in the Infomaniak data centers.
• The keys are based on elliptic curve cryptography (ECC) and use the OpenPGP standard.
  • They are themselves encrypted in AES-256-GCM with automatic decryption via Infomaniak authentication.
• In search results, only the subject of encrypted messages will be visible, while their content will remain secure during storage.

Enable email encryption…

… from the Infomaniak Web Mail app

To automatically encrypt a message sent to an email address:

1. Click here  to access the Web app Mail Infomaniak (online service ksuite.infomaniak.com/mail).
2. Compose a new message as usual.
3. Click on the lock icon to the left of the Send button to enable encryption:
   
4. Confirm the action if a confirmation window appears.
5. The icon now represents a closed lock and the color of the whole is changed.
6. Press the Send button.

The action must be performed for each new send.

A. Recipient whose email is managed with Infomaniak

If the recipient of the encrypted email has an email address managed with Infomaniak, the encryption is done in a completely transparent manner for the sender as well as for the recipient. A mention will indicate the encryption of the message…

1. … in the recipient's inbox:
   
2. … when opening the received message:
   
3. … and in the folder of sent messages by the sender:
   

B. External recipient

If the recipient of the encrypted email has an email address managed outside of Infomaniak services, encryption is always possible, but it requires the definition of a password:

1. Click here to access the Infomaniak Mail app (online service ksuite.infomaniak.com/mail).
2. Write a new message as usual, but addressed to an email address outside of Infomaniak.
3. Click on the padlock icon to the left of the Send button to activate encryption.
4. A modal opens to allow you to create a password.
5. Enter a password and copy it to send it to the recipient by your own means (kPaste for example):
   
6. The icon now represents a closed padlock and you can send the email as usual.

The recipients will then receive a message informing them that an encrypted email is waiting for them:

By clicking on the provided button, they will be redirected to a secure web page where the password must be entered.

Once the password is validated, the encrypted message can be viewed on the same page valid for 30 days.

… from the Infomaniak Mail mobile app

To automatically encrypt a message sent to an email address:

1. Open the mobile app Infomaniak Mail (application for iOS / Android smartphone or tablet).
2. Compose a new message as usual.
3. Press the padlock icon at the bottom of the composition window to activate encryption:
   

A. Recipient whose email is managed with Infomaniak

If the recipient of the encrypted email has an email address managed by Infomaniak, encryption is done completely transparently for both the sender and the recipient:

1. Closed padlocks are displayed on the screen.
2. Press the send icon:
   

B. External recipient

If the recipient of the encrypted email has an email address managed outside of Infomaniak services, encryption is always possible, but it requires the definition of a password:

1. Sending will not be possible as the send icon will remain grayed out and symbols will appear on the padlocks:
   
2. Press the padlock icon.
3. A modal opens to allow you to create a password.
4. Leave the suggested password or enter a new password and copy it to send it by your own means (kPaste for example) to the recipient (you can agree on a password in advance so the recipient is already informed).
5. Click on the cross in the top left if you have finished managing the password.
6. There you go, the sending can now be done in an encrypted way: