Set up your key and verify recipients

  1. In the desktop app, open Settings → Security → Email end-to-end encryption. It is off by default.
  2. Generate a personal key or import your own protected private key. Set a private key password distinct from your SMTP password. Assign the personal key to the account with the matching From address.
  3. Import a recipient’s public key or explicitly look one up. Compare its full fingerprint through a trusted channel before accepting it. Importing a key does not verify ownership.
AeroMailer interface: Encrypt or sign individual email with OpenPGP
Sample-data app screenshot. Select the image to view it at full size; your accounts and content will differ.

Send and read protected email

In Compose, choose Encrypt email, Digitally sign email, or both as appropriate. All encrypted recipients need accepted, usable public keys. If you explicitly request encryption, AeroMailer must not silently send plaintext if key validation fails. The automatic setting encrypts only when the required keys are available. In Inbox, open the encrypted message and unlock the relevant personal key when prompted to decrypt it.

Know what protection covers

OpenPGP protects the message body and attachments; addresses and subject remain visible. A signature authenticates the message under its key; it does not encrypt it. Recipients need compatible mail software. This guide covers individual mail, not blanket encryption of campaigns or automation.

Back up the protected private key and keep its password separately. Full owner Backup can include protected keys; staff Transfer does not. Never send your private key to the recipient; share only your public key.