Nothing Special   »   [go: up one dir, main page]

Skip to Main Content

SecureMyEmail Review

Easy encryption for existing email accounts

4.0
Excellent
By Neil J. Rubenking
Updated February 5, 2025

The Bottom Line

SecureMyEmail easily encrypts your email communications without making you switch to a new email address, and its free tier is fully functional.

PCMag editors select and review products independently. If you buy through affiliate links, we may earn commissions, which help support our testing.

Pros

  • Feature-complete free tier available
  • Works with existing email accounts
  • Supports existing PGP keys
  • Multi-factor authentication
  • Selectable message expiry times

Cons

  • Didn’t work with Yahoo in testing

SecureMyEmail Specs

Works With Existing Email
PGP Encryption
Non-PGP Encryption
Two-Factor Authentication
Cloud Storage and File Sharing
Disposable Email Addresses
Supports Rich Text Messages

Email today is more private than it was years ago. Your messages mostly travel using encrypted protocols. But your email app still has access, and securing your privacy isn’t the provider’s main concern. If you really want communication that no unauthorized party can read, you need an email encryption tool. SecureMyEmail lets you communicate privately with other users and outsiders using any existing email address. Better yet, it has a good free tier of service. That said, PreVeil is entirely free and Proton Mail offers more in the way of features, so they remain our Editors' choice winners.


How Much Does SecureMyEmail Cost?

Signing up for SecureMyEmail’s 30-day trial subscription is free. It also offers a free edition, no trial required. You don’t have to supply a credit card or any personal information beyond your email address. If the email address you want to protect is a Gmail, Yahoo, or Microsoft account, you can use SecureMyEmail indefinitely at no cost.

Our Experts Have Tested 132 Products in the Security Category in the Past Year
Since 1982, PCMag has tested and rated thousands of products to help you make better buying decisions. See how we test.

Protecting any other type of account with SecureMyEmail requires a paid subscription, as does using it to protect multiple accounts. In that case, your signup starts a 30-day free trial. After the trial, a subscription costs $3.99 per month or $29.99 per year. That subscription covers up to eight email addresses, which should be enough for most users.

SecureMyEmail Free Account Verified
(Credit: Witopia/PCMag)

The free edition is feature-complete, as is the 30-day trial (until it expires). PreVeil and Virtru for Google Gmail are totally free, so they’re likewise feature-complete at the free level.

Similar Products

PreVeil Logo
4.5
Outstanding

PreVeil

Proton Mail
4.5
Outstanding

Proton Mail

Private-Mail, Proton Mail, and Tuta Mail offer free tiers, but each has significant limitations. For free users, Proton Mail limits the number of messages per day, the size of the inbox, and the number of folders and tags. Private-Mail also limits storage and puts certain features out of reach. With Tuta Mail, there’s no limit on messages sent and received, but you can only search the latest 30 days of messages. Paying for Tuta Mail also unlocks several premium features.

It's Surprisingly Easy to Be More Secure Online
PCMag Logo It's Surprisingly Easy to Be More Secure Online

A Tuta Mail Revolutionary account costs 36 euros per year, about $37.11 as of this writing. All the other paid subscriptions mentioned above also cost more than SecureMyEmail does. At $59.95 per year, StartMail’s price is roughly twice that of SecureMyEmail. Proton Mail doubles the price again, but its $119.88 yearly subscription also gets you Proton VPN, the Proton Pass password manager, and more.


Getting Started With SecureMyEmail

As a first step, you install the SecureMyEmail app on any Windows, macOS, Android, or iOS device. When I installed it on a Windows virtual machine, the Windows firewall blocked it and popped up a notification. It’s uncommon for Windows Firewall to block legitimate programs, but it does happen. I allowed the app to communicate on public and private networks.

SecureMyEmail Blocked by Windows Firewall
(Credit: Witopia/PCMag)

Next, you create your account, entering the email address you want to secure and a strong password to protect the account. If you’re using SecureMyEmail with a Google, Yahoo, or Microsoft email address, the program allows you to create a free account or start a 30-day free trial. If you change your mind, you can upgrade from a free account to a paid one, but you can’t switch to the 30-day trial after starting at the free level. If there’s any chance that you’ll want to experiment with securing multiple email addresses, choose the 30-day trial.

SecureMyEmail Import PGP Keys
(Credit: Witopia/PCMag)

SecureMyEmail uses PGP (Pretty Good Privacy) for encrypted communication, but it hides most of the aggravating features of PGP. If you already use PGP, you can import your existing keys. Not sure if you’re using PGP? As the app points out, “Trust us. You’d know.”

You do need to add a password or passphrase, distinct from your account password, to secure the public and private keys that the program generates. Your password manager should have captured the account login data, so just record this passphrase in the Notes field of that entry. One way or another, you need to retain the passphrase. Without it, you lose access to your encrypted conversations. In a “Pleading Reminder,” the app suggests you write it down and hide it.

SecureMyEmail Add Passphrase
(Credit: Witopia/PCMag)

Next, you get an option to upload your key to SecureMyEmail’s servers, which eases the process of installing it on other devices. True security geeks can choose to keep the keys local and manage them manually. Note that uploading the key to the server doesn’t give the company any access to your data. And if you decide not to upload initially, you can always upload the key later.

To wrap things up, you create a profile of information that’s only shown to your invited contacts. You can add a photo if you wish. There’s also an option to link with a social media account for verification. The app notes that it removed Facebook and LinkedIn from this feature because “users had privacy concerns,” leaving only Twitter. If you have privacy concerns about Twitter, now called X, you can skip this step.

SecureMyEmail Verify With Social Media
(Credit: Witopia/PCMag)

Multi-Factor Authentication for Added Security

You don’t need to log in to SecureMyEmail with a master password every time you use it, but installing it on a new device requires many levels of security. First, you must log in to your SecureMyEmail account. You may need to repeat the process of giving SecureMyEmail access to your protected email accounts. And before you can encrypt or decrypt any messages, you must supply either your PGP keys or (more likely) the passphrase to download those keys.

Like PreVeil and Virtru, SecureMyEmail doesn’t technically require you to log in with a master password once you’ve completed that initial authentication. Proton Mail, Private-Mail, StartMail, and Tuta Mail use a more traditional username/password login system, and these three also support multi-factor authentication.

What Is Two-Factor Authentication?
PCMag Logo What Is Two-Factor Authentication?

New since my last review, SecureMyEmail also supports multi-factor authentication. Open Security in the Settings menu and click the Enable Two-Factor Authentication button. Snap the QR code with your authenticator app, and you’re ready to go. Now, logging in to your account requires both the account password and the code supplied by your authenticator app. Even if someone shoulder-surfs the password, they won’t get into your account without the unique code from that app.


Connect Your Email to SecureMyEmail

Even though you used an email address to create your SecureMyEmail account, you must give the app full access to each email account where you want to use encryption. If it’s a Google, Yahoo, or Microsoft address, setup is a snap. The app takes care of everything.

SecureMyEmail Main Window
(Credit: Witopia/PCMag)

At this point, you’re ready to roll. The app notes that the initial sync process may take a while if you have a lot of messages, but you can immediately start sending and receiving new messages.

If you selected a paid subscription or 30-day trial, you can configure additional email addresses now or later. When you choose an address other than the three main supported types, SecureMyEmail offers some advice. It points out that you might have to enable IMAP for the account if it’s not already active. It notes that two-factor authentication could interfere with the syncing process. It also links to an explanation of the app-specific password required for linking Apple accounts.

SecureMyEmail Add Other Email
(Credit: Witopia/PCMag)

In testing, I had no trouble associating SecureMyEmail with a Gmail or Outlook account. However, when I tried a Yahoo mail account, it stuck repeatedly at the connection stage. My company contact confirmed that this sometimes happens. “Yahoo’s systems seem to be ‘non-robust’ in our experience,” he said. “Usually works fine, but they are inconsistent and make changes without alerting developers.” If you plan on using this service with a Yahoo account, try the free edition first.

With Private-Mail, Proton Mail, StartMail, and Tuta Mail, the onboarding process is rather different, as you must create a new, secure email address for your encrypted conversations. That’s a deal-breaker for some. Like PreVeil, SecureMyEmail lets you keep using your existing email address. The only qualifier is that your email account must support IMAP, which most do. Virtru Email Protection for Gmail also doesn’t make you change your address, but it only works with Gmail, and only if you log in using Chrome.


Encrypting and Signing Messages

If you’ve ever used any web-based email service, SecureMyEmail will look familiar. A list of message folders and personal folders runs down the left side. Most of the window is taken up by the list of messages in the selected folder. And there’s a big button at the top left to compose a new message. Simple!

The message list has a couple of columns you won’t find in other webmail services. A lock icon means the message is encrypted, and a shield icon means it’s digitally signed. In testing, I did find that the green shield’s appearance was inconsistent. The same message might show a shield at some times, not show it at others. My company contact explained that messages are encrypted thoroughly enough that the shield status isn’t known until you decrypt the message.

PreVeil installs as an add-in for Gmail or Outlook, and Virtru works within Gmail. SecureMyEmail is a separate webmail app. That makes sense, given that you can switch between different secured email accounts within the app.

SecureMyEmail Compose an Encrypted Message
(Credit: Witopia/PCMag)

Sending mail to another SecureMyEmail user is simple. You simply enter the address or choose from your contacts, ensure the Encrypt and Sign/Verify switches are turned on (as they are by default), and compose your message using the rich text editor. I mention the rich text editor because the encryption system used by Private-Mail strips out all formatting, leaving plain, unadorned text. Drop in any attachments you like, hit Send, and you’re done.

Sending mail to recipients who don’t use the product is almost as simple. I’ll discuss the precise details below. The most important point is that SecureMyEmail doesn’t make you do anything special. You can send mail to fellow users, non-users, or both at once. The app itself checks each address and determines how to handle it.


Emailing Contacts Who Don’t Use SecureMyEmail

A secure messaging system that required the recipient to purchase an encryption app would be too limiting. Email encryption services take various approaches to messaging non-users. For example, PreVeil is free, so messages to non-users come with instructions for setting up a free account.

With Tuta Mail Premium, you convey a password to the recipient using SMS, a phone call, or any channel other than email. Clicking a link in the encrypted message and entering that password opens a web-based page with the decrypted message. Private-Mail, StartMail, and Proton Mail user a similar system. However, these three also include the option to import PGP keys and communicate directly with others who also use services that support PGP. To be fair, the process of importing a PGP key can be awkward. You probably don't have a PGP key if you’re not an encryption nerd already.

Sending a secure message to someone who doesn’t use SecureMyEmail is effortless. In the background, the app creates keys specific to the conversation. Once the recipient verifies their email address, the decrypted message appears as a web page with the option for a secure reply. By default, such a message expires in 30 days.

SecureMyEmail Send Out of Network
(Credit: Witopia/PCMag)

You can dig into a message’s settings to shorten the expiry time, though you can’t configure expiry for longer than 30 days. You can also choose the Encrypted+ option for more security but less convenience. This mode works like competing products, requiring you to create a password and transmit it to the recipient via another channel. It also encrypts your messages using the advanced ChaCha20-Poly1305 cipher suite.


Managing Secure Contacts

The point of using email encryption is to protect conversations with your most important contacts. It makes sense to invite those people into your circle of secure contacts. When you try, you see two options: Invite Contacts via Email and Sync Contacts from Email Provider Accounts. The second option pulls in contacts from your associated email account but doesn’t actively make them secure contacts.

SecureMyEmail Secure Contact Invitation
(Credit: Witopia/PCMag)

Recipients of a secure contact invitation have two choices. They can create a free or trial SecureMyEmail account or set up a PGP key exchange to secure the conversation. Again, if you’re not already an encryption nerd, the PGP key exchange option is probably beyond your ken. To be fair, SecureMyEmail makes the key exchange as simple as possible.


SecureMyEmail Runs on Other Platforms

As noted, SecureMyEmail has Windows, macOS, Android, and iOS apps. It supports macOS 10.12 (Sierra) and later. I ran into some minor difficulties on Mac during my previous review, but everything went smoothly this time around. As always, installing on a new device requires that you repeat the steps of giving access to your email account. You must also enter the password that unlocks your uploaded PGP keys or supply the keys directly if you choose not to upload them.

SecureMyEmail macOS Edition Add PGP Passphrase
(Credit: Witopia/PCMag)

When I last reviewed this service, I griped that it lacked an app specific to iPadOS. All you’d see is an undersized window designed for an iPhone. You could double its size to make it fill the space, but you wouldn’t get any more detail. I’m pleased to see that there’s now an app that takes full advantage of the bigger iPad screen.

SecureMyEmail Running on iPadOS
(Credit: Witopia/PCMag)

I also installed SecureMyEmail on a Google Pixel 6. During my last review, I encountered some significant problems getting started on Android. As with the Mac installation, this time, everything worked smoothly.

SecureMyEmail Android Edition
(Credit: Witopia/PCMag)

What’s Not in SecureMyEmail?

Encrypting your messages is one essential way to protect your privacy. Concealing your email address is another. Private-Mail and StartMail include a limited temporary email address feature that creates email aliases. Online merchants and other recipients get the alias, not your actual email. If an alias starts getting spam, you know who to blame and can just turn it off. Not surprisingly, the tools that offer this also require you to start fresh with a new email address. If that kind of privacy is your aim, you’re better off with a product like IronVest or ManyMe, one that focuses on masking rather than encryption.

Encryption services that replace your existing email address often replace related features as well. Proton Mail, Private-Mail, and Tuta Mail let you create email filter rules. You can set an out-of-office message in Proton Mail and Private-Mail. Tuta Mail and Private-Mail come with an encrypted calendar. With SecureMyEmail, you’d handle all such tasks in the underlying email account.


Verdict: Easy Cross-Platform Encrypted Email

SecureMyEmail provides a smooth and simple path to encrypting your email communication. Its free tier is fully functional, and it has no trouble handling mail to other users of the app, non-users, or both at once. Unlike many competitors, it doesn’t require you to spin up a totally new email address. It’s especially useful for securing Gmail, Yahoo, and Microsoft email addresses, as there’s no charge for these email types. By contrast, PreVeil is completely free, earning it our Editors' Choice award, while Proton Mail offers a wealth of bonus features, also making it an Editors' Choice winner.

SecureMyEmail
4.0
Pros
  • Feature-complete free tier available
  • Works with existing email accounts
  • Supports existing PGP keys
  • Multi-factor authentication
  • Selectable message expiry times
View More
Cons
  • Didn’t work with Yahoo in testing
The Bottom Line

SecureMyEmail easily encrypts your email communications without making you switch to a new email address, and its free tier is fully functional.

Like What You're Reading?

Sign up for SecurityWatch newsletter for our top privacy and security stories delivered right to your inbox.

This newsletter may contain advertising, deals, or affiliate links. By clicking the button, you confirm you are 16+ and agree to our Terms of Use and Privacy Policy. You may unsubscribe from the newsletters at any time.


Thanks for signing up!

Your subscription has been confirmed. Keep an eye on your inbox!

Sign up for other newsletters
Newsletter Pointer

About Neil J. Rubenking

Lead Analyst for Security

When the IBM PC was new, I served as the president of the San Francisco PC User Group for three years. That’s how I met PCMag’s editorial team, who brought me on board in 1986. In the years since that fateful meeting, I’ve become PCMag’s expert on security, privacy, and identity protection, putting antivirus tools, security suites, and all kinds of security software through their paces.

Before my current security gig, I supplied PCMag readers with tips and solutions on using popular applications, operating systems, and programming languages in my "User to User" and "Ask Neil" columns, which began in 1990 and ran for almost 20 years. Along the way I wrote more than 40 utility articles, as well as Delphi Programming for Dummies and six other books covering DOS, Windows, and programming. I also reviewed thousands of products of all kinds, ranging from early Sierra Online adventure games to AOL’s precursor Q-Link.

In the early 2000s I turned my focus to security and the growing antivirus industry. After years working with antivirus, I’m known throughout the security industry as an expert on evaluating antivirus tools. I serve as an advisory board member for the Anti-Malware Testing Standards Organization (AMTSO), an international nonprofit group dedicated to coordinating and improving testing of anti-malware solutions.

Read Neil J.'s full bio

Read the latest from Neil J. Rubenking