How to Create an Encrypted Email

By Kwame Nkrumah3 min read 458 views

How to Create an Encrypted Email

Creating an encrypted email means choosing a service or tool that protects message content so only the sender and intended recipient can read it. The most reliable approach is end-to-end encryption, where messages are encrypted on your device and decrypted only on the recipient's device, and the provider never holds the keys. This guide covers the main methods, provider options, and steps to get started.

Table of Contents

How to Create an Encrypted Email
Choose an End-to-End Encrypted Email Provider
Use a Traditional Email Provider with Encryption Tools
Key Steps to Set Up Encrypted Email
What Encrypted Email Does and Does Not Protect
Tips for Everyday Use

Choose an End-to-End Encrypted Email Provider

The simplest path is to sign up with a provider that builds encryption into the service. These providers typically handle key generation and exchange in the background, so you do not need to manage technical details yourself.

ProtonMail — Swiss-based, supports end-to-end encryption automatically when both sender and recipient use ProtonMail, and offers a bridge for traditional email clients.
Tutanota — German-based, encrypts messages and contacts, with a free tier and optional paid features.
Mailfence — Belgian-based, offers OpenPGP-based encryption and digital signatures within a familiar webmail interface.

Use a Traditional Email Provider with Encryption Tools

If you must keep your existing email address, you can add encryption through plugins or external tools.

ProtonMail Bridge — Connects ProtonMail's encryption to Outlook, Thunderbird, or Apple Mail so you can send encrypted messages from your preferred client.
PGP/GPG with Thunderbird or Outlook — Install an OpenPGP plugin such as OpenPGP for Thunderbird or Gpg4win for Outlook, generate a key pair, and exchange public keys with your contacts.
S/MIME — Supported by some business email providers and email clients, S/MIME uses certificates issued by a certificate authority rather than a web of trust.

Key Steps to Set Up Encrypted Email

Choose a provider or tool that fits your threat model and technical comfort.

Create your account and generate or obtain your encryption keys.

Back up your private key securely, ideally offline, and never share it.

Exchange public keys or verify fingerprints with your contacts out-of-band (for example, in person or over a verified phone call).

Compose messages using the encrypted option provided by your tool, and confirm encryption indicators before sending.

What Encrypted Email Does and Does Not Protect

End-to-end encryption protects the content of your message in transit and on the server. It does not protect metadata such as sender, recipient, subject line, or timestamps unless the provider specifically strips or encrypts that information. For higher anonymity, pair encrypted email with a privacy-focused email provider and a VPN or Tor connection.

Tips for Everyday Use

Verify encryption indicators (such as lock icons or key verification prompts) before sending sensitive information.
Encourage contacts to adopt the same encrypted email service or tool to avoid friction.
Store private keys and recovery phrases offline and use a strong, unique password for your email account.