In this article, we'll explore how to encrypt your Gmail messages using Mailvelope, a browser extension that integrates PGP encryption into your webmail. This allows you to send and receive encrypted emails, ensuring your communication remains private.
# Generate a GPG Key
gpg --full-generate-key
# List keys
gpg --list-keys
# Export the Public GPG Key
gpg export-keys -a KEY_ID
# Export the Private GPG Key
gpg export-secret-keys -a KEY_ID
Introduction
In today's digital age, email privacy is more important than ever. While Gmail offers robust security features, end-to-end encryption isn't built-in. This article will guide you through setting up and using Mailvelope to encrypt your Gmail messages.
Create and export the GPG key in Linux
Before we dive into Mailvelope, let's start by creating a GPG key pair on your Linux system:
Open your terminal and run:
gpg --full-generate-key
Follow the prompts to create your key. Choose RSA and RSA, a key size of 4096 bits, and set an expiration date.
Enter your name and email address associated with your Gmail account.
Set a strong passphrase to protect your private key.
To export your keys:
List your keys:
gpg --list-keys
Export your public key:
gpg --export -a YOUR_EMAIL > public_key.asc
Export your private key (keep this safe!):
gpg --export-secret-keys -a YOUR_EMAIL > private_key.asc
Import the Key in Mailvelope
Now that you have your GPG keys, let's set up Mailvelope:
Install the Mailvelope extension for your browser (Chrome, Firefox, or Edge).
Click the Mailvelope icon in your browser and select "Options". In order to send and receive encrypted messages, you first need a "keypair". We will use the previously generated keys.
Go to "Key Management" and click "Import Keys".
Drag and drop your public_key.asc and private_key.asc files into the import area.
Enter your passphrase when prompted to import the private key.
Send an encrypted mail
With Mailvelope set up, you can now encrypt and decrypt emails in Gmail.
To compose an encrypted email, click the Mailvelope button next to Gmail's compose button.
In the Mailvelope editor, enter the recipient's email address. If their public key is available, the address will turn green.
Write your message and add any attachments. Click Submit to send your encrypted email.
Import public keys
If your recipient's key isn't available on the Mailvelope key server, you have two options:
Direct key exchange:
Ask your recipient to send you their public key. They can export it from their key management tool and send it as a file (typically with a .asc extension).
Public key server lookup:
Search for your recipient's email on https://keys.openpgp.org/. If found, you can download their public key directly from this site.
After obtaining the key:
In Mailvelope, go to Key Management.
Click on Import Keys.
Upload the downloaded key file (.asc) or drag and drop it into the designated area.
This process ensures you have the correct public key to encrypt messages for your recipient.
You can now send encrypted emails !
Receive an encrypted mail
First, to make it easier for others to send you encrypted emails, consider publishing your public key:
Back to Gmail: click on the encrypted email in your inbox. Mailvelope will display it as a sealed letter. Click on the letter and enter your passphrase to decrypt the message.
Conclusion
By using Mailvelope with Gmail, you've taken a significant step towards protecting your email privacy. Remember that while the body of your email is encrypted, the subject line and metadata are not. Always use caution when discussing sensitive information.
⚠️
Security tips
Keep your private key safe, use strong passphrases, and encourage your contacts to adopt encrypted email as well. With these practices, you'll be well on your way to more secure and private email communication.
-enhanced.png%3Ftable%3Dblock%26id%3D518be0ab-a94d-4c3a-9938-5a75c94bb205%26cache%3Dv2&w=3840&q=75)
