How to Set up PGP Encryption in ProtonMail

Protonmail Encryption

Most people tend to use popular email services that are available: Gmail, Yahoo, etc. However, ProtonMail is one of the few that offers native PGP encryption to safeguard your privacy and data breaches. Learn how to take advantage of it.

The Needs For PGP Encryption

With free services like Google’s Gmail, a good rule of thumb is to always assume that all your emails are read or at least checked by AI bots for keywords. That is why you need to encrypt your email, so that they are only read by you and the intended recipients. ProtonMail comes with PGP encryption by default so that you can easily encrypt your emails.

How Does PGP Work?

PGP algorithms work by generating an encrypted session key. When you use PGP to send an email, you need the recipient’s public key. The recipient then uses their own private key to unlock the encryption. Likewise, if someone gets a hold of your private key, it would allow them to read the email.

In both cases, ownership of your private key means owning the key to your privacy. Switzerland-based ProtonMail, which now offers its own VPN service for free, is one of the rare email providers with native OpenPGP encryption, so you don’t have the hassle with plugins and third-party software.

Here is how you can set up PGP encryption in ProtonMail.

1. Attach Public Key

When you log in to your ProtonMail account, preferably by using a good dedicated password manager, click on the big “Compose” button in the upper-left corner, above Inbox, to create a new email.

Compose

Once the new window for messages opens, go to the end of the formatting bar on the far right to click on the upward arrow icon. Once you hover over it with your mouse, the “More” option will pop up. Click on it and then on the “Attach Public Key” from the drop-down menu.

Attach Public Key

Now that it is checked, your email will be PGP-encrypted. To do this for all future email instead of just one, go to “Settings -> Security” and scroll down until you see “Automatically attach public key” under External PGP Settings. Click on this button so that it is checked and your PGP encryption becomes active for all further emails.

Auto Sign

Click “YES” to confirm.

2. Sharing the Public Key

With PGP encryption enabled, all that remains is having the recipient share their public key. This will come as an email with the attached public key file.

Trust Key

You will see a yellow-highlighted notification informing you that this message is signed by a public key. Once you click on the “Trust Key” button, it will become trusted. Furthermore, check the “Use for Encryption” box that appears in the new prompt after you have clicked the button. This signs the emails you send with your private key.

With all new emails that are PGP-enabled, both received and sent, you should see a green padlock icon.

Padlock

Use PGP for a Short List of People You Trust

As you can see, the main friction in exchanging messages this way is to have an already established repository of contacts with their public keys. Otherwise, you would have to go through the same procedure for every person you wish to contact. It is rather inconvenient than simply composing a message and pressing Send, but this is the price one has to pay for extra security.

Other than ProtonMail, you can also try out these alternative email services for better privacy.

Subscribe to our newsletter!

Our latest tutorials delivered straight to your inbox

Rahul Nambiampurath Avatar

Read next

Suzanne Simard sealed paper birch and Douglas fir seedlings inside plastic bags, fed them carbon-14 and carbon-13 dioxide, and nine days later found carbon had crossed between species through fungal threads in the British Columbia soil beneath her boots
A species of jellyfish called Turritopsis dohrnii can revert its adult cells back to a juvenile polyp stage when injured or starving, effectively restarting its life cycle, and biologists have so far failed to identify any natural limit to how many times it can do this.
A Japanese man named Jiroemon Kimura, who lived to 116, was born in 1897 when Queen Victoria still ruled and died in 2013, meaning a single human life personally overlapped with the invention of the airplane, the atomic bomb, the internet, and Instagram
The Hollywood sign originally read HOLLYWOODLAND when it was built in 1923 as a real estate advertisement for a housing development, and it was only meant to stand for 18 months, but nobody ever got around to taking it down and the city eventually adopted it as a landmark
Almost all of the world’s internet traffic does not travel by satellite but through fibre-optic cables lying on the ocean floor, a hidden web of wires crossing the deepest parts of the sea to connect the continents.
People who flip their phone face down on every table aren’t being secretive. They figured out that staying interruptible meant handing their time to whoever rang first
Twitch vs. Facebook Gaming vs. YouTube Gaming: What’s the Best Live Game Streaming Platform?
Chrome Extensions Ownership Transfer is a Direct Threat to You: How to Stay Safe