Create or upload your PGP keys
To set up PGP, open Settings › Security › Encryption. Enter a passphrase twice and click Generate Key, or click Upload to add an existing public and private key. Use Key(s) List to download your public key and share it. Then tick Encryption or Signed in Classic compose to send protected mail.
How to create or upload your pgp keys
Where: Settings › Security › Encryption
- Click your profile picture, choose Settings, open Security and then the Encryption tab.
- To create a key, enter a passphrase, enter it again and click Generate Key.
- To use a key you already have, click Upload, choose your public and private key files, enter the passphrase and click Upload Both Key.
- Open Key(s) List to download your public key and send it to the people who will write to you.
When to use it
Kiran, a lawyer at example.in, generates a PGP key and sends her public key to outside counsel. They now send privileged documents to her encrypted, and only she can open them.
Options
| Option | What it does |
|---|---|
| Generate Key | Creates a new key pair protected by your passphrase. |
| Upload | Adds a key pair you already use elsewhere. |
| Key(s) List | Shows your keys. Download a public or private key, view key information, choose the active key or delete a key. |
| Mail Encryption / Digital Signature | Encrypt or sign every outgoing mail by default. |
Send PGP mail
PGP encryption and signing are in Classic compose. Click the arrow next to Compose Mail, turn on Classic, then tick Encryption, Signed or both. They are two separate checkboxes. Each recipient needs a PGP public key for encryption.
Good to know
- Deleting a key pair means you can no longer read mail encrypted with it. XgenPlus warns you first.
- Your administrator can hide the Encryption tab. If it is missing, ask them.
- If your organisation issues S/MIME certificates, you can sign and encrypt in new compose without PGP.
Common questions
What if I forget my passphrase?
XgenPlus does not store it, so it cannot be recovered. Without it you cannot read mail encrypted with that key. Keep it safe and never share it.
Can I have more than one key?
Yes. Key(s) List shows all your keys, marks the default one and lets you choose another key as active.
Which key types can I upload?
The upload screen accepts a DSA/ElGamal key pair. Generating a new key in XgenPlus avoids the question.