{"id":2547,"date":"2019-04-09T21:14:20","date_gmt":"2019-04-09T18:14:20","guid":{"rendered":"http:\/\/kifarunix.com\/?p=2547"},"modified":"2019-04-11T22:26:46","modified_gmt":"2019-04-11T19:26:46","slug":"encrypt-emails-using-enigmail-on-thunderbird","status":"publish","type":"post","link":"https:\/\/kifarunix.com\/encrypt-emails-using-enigmail-on-thunderbird\/","title":{"rendered":"Encrypt Emails using Enigmail on Thunderbird"},"content":{"rendered":"
Hello there, today we are going to learn how to encrypt emails using Enigmail on Thunderbird. Enigmail is a data encryption and decryption extension for Mozilla Thunderbird that allows you to use OpenPGP to encrypt and digitally sign your emails as well as decrypt and verify email messages you receive. In order to use Enigmail, ensure that you have Mozilla Thunderbird installed and your email account setup. Check our previous article on how to install and setup Mozilla Thunderbird on Ubuntu 18.04.<\/span><\/p>\n By default, Thunderbird doesn’t ship with Enigmail extension and therefore you need to install this extension using Thunderbird\u2019s Add-ons Manager. Hence launch Thunderbird and navigate to This opens up Add-ons Manager where you can search for Enigmail extension under Extensions tab.<\/p>\n The search results will appear as shown in the screenshot below;<\/p>\n Click the Enigmail has a setup wizard that enables you to set it up. To launch the setup wizard, click When the setup wizard launches, you will be prompted to choose the setup type. Click Next to proceed with standard configuration.<\/p>\n You can also choose to import settings from a previous installation.<\/p>\n Next, you need to generate the encryption key pair. This will create a Click Next to generate the key pair. Once the generation is done, you will be notified. Close the notification window and confirm key generation.<\/p>\n Revocation key is used to revoke the public key so that those whom you shared with them do not continue using it to encrypt the emails when you lost or your secret key has been compromised. Be sure to store this key safely.<\/p>\n Once the revocation certificate generation is done, click Next to finalize on the Enigmail setup.<\/p>\n You are now ready to encrypt outgoing mails. However, you can only encrypt emails if the recipient has shared with you their public keys. You can also read encrypted emails if they are encrypted with you public key. Therefore before both the sender and the recipient can encrypt or decrypt emails, they need to have shared their public keys with themselves.<\/p>\n To share the public keys with the recipient with whom you would like to have encrypted email communication, you would compose a new mail and click Enigmail > Attach My Public key then send your message. However, the easiest way would be to upload your public keys to public Keyserver such that both parties can pull the other’s public keys from there.<\/p>\n To upload the your public key to Keyserver, Navigate to Enigmail tab on the Menu bar > Key management. Right click on the Key you want to upload and select Upload Public Keys to Keyserver.<\/p>\n If your contacts have also uploaded their Public keys, you can similarly download them from Keyserver. On Key Management window, click Keyserver<\/strong> > Search for Keys<\/strong>.<\/p>\n Enter the contact email ID on the search bar. Once you found the key, click Ok to import it.<\/p>\n\n
Encrypt Emails using Enigmail on Thunderbird<\/h2>\n
Tools<\/code> tab on the Thunderbird Menu and click
Add-ons<\/code>.<\/p>\n
<\/a><\/p>\n
<\/a><\/p>\n
<\/a><\/p>\n
Add to Thunderbird<\/code> button to install it. Once the installation is done, you should be able to see it under the Extensions tab. You will also see the Enigmail tab on the Menu bar.<\/p>\n
<\/a><\/p>\n
Setting up Enigmail<\/h2>\n
Enigmail tab<\/code> on the menu bar and navigate to
Setup Wizard<\/code>.<\/p>\n
Choose the Setup Type<\/h4>\n
<\/a><\/p>\n
Generate Enigmail Key Pair<\/h4>\n
public key<\/code> which you will share with whomever you want to sent encrypted emails to you and
secret key<\/code> that you will use decrypt received emails signed encrypted with your public as well as sign the sent emails. To protect the secret key, you will need the passphrase. Hence, set a passphrase that you can easily remember and is secure at the same time. You can also define how long should the passphrase be remembered after decrypting an email message.<\/p>\n
<\/a><\/p>\n
<\/a><\/p>\n
Generate Revocation Key<\/h4>\n
<\/a><\/p>\n
Upload Public Keys to Keyserver<\/h4>\n
<\/a><\/p>\n
Download Public Keys from Keyserver<\/h4>\n
<\/a><\/p>\n