Thunderbird: Encrypt emails - simple instructions

Encrypting emails in Thunderbird is not difficult. You can find simple instructions in this practical tip.

Encrypt emails in Thunderbird with Enigmail

Emails in Thunderbird are particularly easy to encrypt with the Enigmail addon. It is based on the GnuPG open source encryption tool.

1. First install the Enigmail add-on. Either download it or navigate in Thunderbird to "Tools> Add-ons> Discover add-ons> Enigmail".
2. After you restart Thunderbird, the setup wizard opens automatically.
3. Leave all settings as they are and install GnuPG when prompted.
4. After installation, the setup wizard creates your key pair with which you can encrypt and decrypt emails. To do this, select the desired email account. You will also be asked to set a password for the key pair.
5. Finally, you will be asked whether you want to generate a revocation key. This is highly recommended, so if you forget your password, you can invalidate the key. However, make sure to keep this cancellation key safe.
6. The setup is now complete. In future, you can sign and encrypt emails when writing them. For this purpose, Enigmail has inserted buttons in the compose window.
7. If you want to send messages encrypted, you need the public key of your counterpart. Your counterpart also needs your public key if he wants to write to you in encrypted form.
8. There are also buttons for sending your public key when composing emails.
9. However, if you send your public key in an unencrypted message, it can of course be manipulated by potential eavesdroppers. The handover at a personal meeting is safer.

Encryption of emails using S / MIME

The second variant for encryption is called S / MIME.

1. First, you need a certificate issued by an official body. As a private individual, this is free of charge from providers such as CAcert, StartSSL or StartCom.
2. Now you have to import the certificate. To do this, right-click on your email address in Thunderbird and open the settings.
3. The last entry under the entry is "S / MIME security". Click on it and select "Manage Certificates".
4. You can now import your certificate here. To do this, select the certificate you created as a p12 file.
5. Back in the Thunderbird settings, you can now select your certificate under "Digital signature" and "Encryption".
6. Once you have completed the settings, you can now choose whether you want to sign or encrypt it when composing a new mail.

Learn how to encrypt emails in Outlook here.