Level 3 · How it works2 min read

How to send an encrypted email to any address

How password-protected emails work at Proton Mail, Tuta, Posteo, and Hushmail, what your recipient sees, how long the message stays available, and how to share the password safely.

Illustration: an envelope icon in a rounded tile, with the title Encrypted email to any address

Key points

  • Your recipient does not need the same provider. With a password-protected email, they get a link and read the message on the provider’s website.
  • Never send the password in the same email. Say it on the phone, send it in a text message, or give it in person.
  • At Proton Mail, such a message expires after 28 days at most, and the recipient can reply securely up to five times.

How it works

  1. You write the email and set a password for it.
  2. Your recipient gets a notice with a link.
  3. They open the link, enter the password, and read the message in the browser.
  4. They can reply from there, encrypted.

The four providers compared

How your recipient opens itReplyGood to know
Hushmaila link; then they sign in with a Google, Microsoft, or Apple account, or create a passwordyes, encryptedwith the first message, you can add a security question
Posteoa password-encrypted email; works with any provider, Posteo statesnot stated–
Proton Maila link to unlock the message, then the passwordyes, up to five timesexpires after 28 days at most; on every plan, including Proton Free
Tutaa link to Tuta’s login page, then the passwordyes, end-to-end encryptedthe same password works for later messages to that contact

Two details matter at Proton. Your own reply to a protected message is not end-to-end encrypted by default; you have to turn encryption on again for each reply. And the 28 days include the time the message spent in your drafts folder.

At Hushmail, a recipient who forgets the password has to create a new one and loses access to past secure messages.

Share the password the right way

  • Not in the same email, and better not by email at all. Call, send a text message, or tell the person face to face.
  • Choose a password that is easy to say, such as several random words. Your password manager can create one.
  • At Tuta, you share the password once. It then works for later conversations with the same person.

When PGP is the better choice

If you often write to someone who uses PGP, you do not need a password. Proton Mail then encrypts automatically with the recipient’s public key. At Posteo, you use OpenPGP with Mailvelope, and Posteo’s key directory finds most publicly available keys automatically. Tuta does not use PGP.

Next step

How aliases protect your main address, and how your own domain lets you change providers without a new address, is explained in the guide Email aliases and your own domain, explained.

Check it with the archive's data