Setup GPGTools for macOS

Use the fee-based GPGTools program collection available at www.gpgtools.org to encrypt e-mails using the Apple e-mail client in macOS. Download GPG Suite and install it on your Mac. This software contains all of the necessary tools.

PGP setup on macOS with the GPG Suite

To securely encrypt emails with the Mail app on macOS, it is recommended to use the paid software suite “GPG Suite” from the website www.gpgtools.org. Download the current version there and install it on your Mac. All necessary programs are included in this package.

Step-by-step guide to setting up PGP with the GPG Suite

1. Create key pair:
   When starting the GPG Suite for the first time, you will be prompted to create a new key pair for your email address.

2. Avoid publishing the key:
   Disable the option “Upload key after generation” to prevent your key from being automatically uploaded to a public key server. A PGP key once published cannot be deleted from the key servers.

3. Set expiration date:
   It is advisable to assign an expiration date to the key, for example two to five years. Since encryption technologies develop further, the key should be renewed regularly to ensure security.

4. Set up password protection:
   Protect your private key with a strong password. This password is required to encrypt or decrypt emails.

5. Back up key pair:
   Export your key pair and save it in a secure place, for example on an external storage device or in an encrypted container file. Losing the private key means you can no longer decrypt encrypted emails and data.

6. Complete key management:
   After setup, your new key pair will be displayed in the “GPG Keychain” program. The label “sec / pub” indicates that you possess both the private (sec) and the public (pub) key.

Key exchange

To receive encrypted emails, others must obtain your public PGP key. There are several possibilities:

1. Upload to a key server:
   In the menu bar of the “GPG Key Management” you can select the option “Send to key server” under “Keys”. Other users can download your public key from there.

2. Send by email:
   Send your public key as an attachment in a signed email to your communication partners.

3. Provide on your website:
   Make your public key available for download on your personal website.

Sending encrypted and signed emails

After setup, you can encrypt and sign emails with the Mail app on macOS:

1. Encryption:
   When composing a new email, a lock symbol appears, allowing you to encrypt the message.

2. Signing:
   A gear symbol allows you to sign the email. It is recommended to always sign emails to confirm the sender’s authenticity to the recipient and to promote the spread of secure communication.

Further settings can be made in the “GPGMail” menu.

Alternative email clients

An alternative to the Mail app is the email client Mozilla Thunderbird. Previously, the Enigmail plug-in was used there to enable PGP support. In newer versions from Thunderbird 78 onwards, Enigmail is no longer required, as Thunderbird now integrates its own OpenPGP implementation.

Note on usage with Meet

If you use the mailbox Guard, you can upload your own PGP keys in the key management and replace the keys generated by the Guard.

The mailbox Guard is a security feature of mailbox that automatically generates and manages PGP keys for your email addresses. This allows you to receive and send emails encrypted, even if you have not yet set up your own PGP key.

More information about the mailbox Guard can be found at: mailbox Guard