End-to-End Encryption
Last updated 26 September 2026Effective 26 September 2026
What end-to-end encryption is
Viremail lets you encrypt messages end to end with OpenPGP, an open standard supported by many email apps. When you send an encrypted message, it is encrypted in your browser with the recipient's public key, and only the recipient's private key can decrypt it.
End-to-end encryption is optional. You turn it on in Settings.
How your keys are stored
- Your key pair is created in your browser.
- Your private key is encrypted in your browser with your password before it is stored on our servers. We never receive it unencrypted and cannot read it.
- Your public key is stored so that other people can send you encrypted mail.
What is and is not encrypted
| Item | End-to-end encrypted? |
|---|---|
| Message body and attachments of an encrypted message | Yes |
| Subject line | No. Standard OpenPGP does not encrypt subject lines. Do not put sensitive information in the subject. |
| Sender, recipients, dates and message size | No. Mail servers need these to deliver the message |
| Messages to people who do not use OpenPGP | No. They are protected by TLS in transit where supported, but not end to end |
| Your ordinary (unencrypted) mail, contacts, calendars, tasks and notes | No |
| Chat messages | No, unless specifically stated in the app |
| Audio and video calls | Calls use WebRTC, which encrypts media in transit. Calls are not recorded. |
If you forget your password
Important: because your private key is protected by your password, we cannot recover it for you.
- Changing your password while signed in (when you know the old one) re-encrypts your private key, so you keep access.
- Resetting a forgotten password means your old private key can no longer be unlocked. You will lose access to messages encrypted to that key, unless you have a backup of the key.
Where a key backup or export option is available, we recommend keeping a backup of your private key somewhere safe.
Verifying fingerprints
Each public key has a fingerprint: a long string of letters and numbers. To be sure you are encrypting to the right person and not an impostor, compare fingerprints with them through a different channel, such as in person or on a call.
If a contact's fingerprint changes unexpectedly, check with them before sending sensitive information.
Limits
End-to-end encryption protects message content from us and from anyone who gains access to our servers. It does not protect against malware on your own device, someone who knows your password, or a recipient who chooses to share your message.