# Sign or encrypt every mail by default

To protect every mail you send, open **Settings › Security › Encryption** and, at the bottom, tick **Mail Encryption**, **Digital Signature** or both. Each choice saves at once. XgenPlus then uses your active PGP key on all outgoing mail. You need a PGP key first, and recipients need public keys for encryption.

## How to sign or encrypt every mail by default

1. Create or upload a PGP key first.
2. Open **Settings › Security** and the **Encryption** tab.
3. At the bottom, tick **Mail Encryption** to encrypt, **Digital Signature** to sign, or both.

## When to use it

> A compliance officer at acme.in turns on **Digital Signature** so every mail she sends can be checked as genuine and unchanged.

## Good to know

- The defaults use your active PGP key. Change the active key in **Key(s) List**.
- Untick the box to stop. Mails already sent are not changed.

## Common questions

**Should I turn on Mail Encryption for everything?**

Only if almost everyone you write to has a PGP public key. Otherwise sign by default and encrypt only the mails that need it.


Source: https://docs.xgenplus.com/security/encrypt-or-sign-all-mail/