Security is complicated. It's also filled with choices between what is convenient and what is secure. We worked very hard so you could have both.
Most email providers, that even care about security, force you to rely on what is called "opportunistic TLS." Although this method "usually" (not always) protects the email in transit, it offers zero protection for the email after it arrives or is stored (which almost all emails are). It should not be relied upon.
Our philosophy is that you, not your email provider, should ultimately control the privacy and security of your email. Email providers, almost always, maintain backdoor access to your emails...which also puts them at risk to hacking and data breaches.
To maximize security and convenience we provide two options when you send an encrypted email. We call them "Encrypted" and "Encrypted+."
With either method, recipients do NOT have to use SecureMyEmail, download anything, or register for anything. They just receive a regular email with a link to securely access the encrypted email and attachments.
Note: If they DO use SecureMyEmail, the path is already secured and they should simply use their SecureMyEmail software or mobile apps to view the message.
The Encrypted option transmits your email via encrypted tunnel to our secure systems, where we generate unique and ephemeral encryption keys to secure the message and its contents. We then send an email to the recipient to let them know they have an encrypted message from you.
You may also choose how long the recipient has to access the message before it is purged from our systems. From one hour up to 30 days. Note that you, as the sender, always retain a secure and encrypted copy of the message in case you need to resend it.
Recipients then access your encrypted email on our secure servers via an encrypted tunnel generated via the link they received. They may then reply, add attachments of their own, and the email is then fully encrypted for its return trip back to you.
The main advantage with this option is the user needn't know a password to access the email. This is a very unique advantage SecureMyEmail has versus other approaches.
The email is then encrypted at rest using your unique 4096-bit OpenPGP keys combined with your zero-knowledge password that you created when you set up the service.
This is a "best of both worlds" option because you can just "send away" to any email on Earth knowing everything is fully protected and compliant with most any security requirements, such as HIPAA and the GDPR.
If you need email encryption even aliens can't hack, the Encrypted+ option adds an additional layer of security with symmetrical encryption utilizing the renowned ChaCha20-Poly1305 cipher suite.
Your email and contents are encrypted before they even leave your device with a "zero knowledge" password that you create.
This means that no one, and we mean no one, ever has the means to decrypt the email without the password.
In fact, even if your recipient, or their email provider, is hacked, even the hacker cannot access the email or its contents without the password. There is no more secure method to encrypt email.
The only inconvenience is you must create the password that your recipient must enter to decrypt the message. Usually this is sent via "another channel" such as text or voice, or you can use the included "hint" field to ask them something only they would know.
no payment or other info is required