# Encrypt a mail with S/MIME

To encrypt a mail with S/MIME, add your recipients in new compose, click the shield icon and turn on **Encrypt for recipients**. XgenPlus checks each recipient's certificate as you go. Send once it says all recipients are eligible. If anyone lacks an active S/MIME certificate, encryption is blocked until you remove them.

## How to encrypt a mail with S/MIME

1. Open new compose and add your recipients.
2. Click the shield icon and turn on **Encrypt for recipients**.
3. Wait for the certificate check to finish.
4. If some recipients have no certificate, remove them or send them a separate mail.
5. Click **Send**.

## When to use it

> A hospital at example.in sends patient reports to a partner lab whose staff hold certificates. The reports are encrypted, so only the lab staff named in the mail can open them.

## Status messages

| Message | Meaning |
|---|---|
| Checking recipient certificates | XgenPlus is checking the recipients you added. |
| All recipients are eligible | You can send encrypted. |
| Cannot encrypt because some recipients do not have active S/MIME certificates. | Remove those recipients or turn encryption off. |
| Add at least one recipient before enabling encryption. | Add recipients first. |

## Good to know

- Encryption and signing can be used together.
- Delivery reports are turned off while S/MIME is on.
- You need your own active certificate before you can encrypt.

## Common questions

**What happens if I reply to an encrypted mail without encryption?**

XgenPlus stops the send and asks you to confirm that you really want to send the reply unencrypted. Keep encryption on unless you are sure.

**Can I encrypt mail to someone outside my organisation?**

Only if XgenPlus knows an active S/MIME certificate for that person. Otherwise the check reports that they are not eligible.


Source: https://docs.xgenplus.com/security/encrypt-a-mail-with-smime/