MailCloak 3.0 for

One Click Install Process
Installing MailCloak for Microsoft Internet Explorer is fast and simple. Simply the appropriate here to download, and follow the instructions below to install MailCloak email encryption for MSN Live Mail.

Double click the installer. Select your language and click "OK".

Click "Next" to continue.

Read and accept the End User License Agreement, and click "Next" to continue.

Select an Installation Path (default is C:\Program Files\gWebs MailCloak ) and click "Next".

Name the Start Menu Folder and click "Next". The default name is gWebs MailCloak.

MailCloak is now ready to install. Click "Install" to continue with the installation.

MailCloak will take a few seconds to install.

Congratulations! You have successfully installed MailCloak. Click "finish" to exit startup.

Double Click Internet Explorer to start using MailCloak. You will see the following web page with some useful links. Click "QuickStart" to learn how to get started with MailCloak or right click on the gWebs icon and click "Options" to jump right into MailCloak's setup page.

Installing MailClaok for Mozilla Firefox is fast and simple. Simply the appropriate link below, and a window will pop up asking if you are sure you want to install our extension. Click install now, and you're done!*
*If this your the first time installing MailCloak, you will have to tell Firefox allow www.gwebs.com to install extensions. Click allow in the upper right corner of your browser, and then proceed as usual.

Click Install now.

Restart Firefox. That’s it! A few Clicks!

You will see the following web page with some useful links. Click "QuickStart" to learn how to get started with MailCloak or right click on the gWebs icon and click "Options" to jump right into MailCloak's setup page.

Welcome to gWebs MailCloak. MailCloak provides GnuPG, public key encryption for most popular webmail services including Google Gmail, Yahoo! Mail, and Microsoft Windows Live Mail. In this tutorial you will learn how to generate a cryptographic key pair for public key email encryption.

After installation, MailCloak will automatically take you to the options page. Fill out the required information.

Click "Generate"

When that's done, You're ready to begin receiving public key encrypted email!

First off, we at gWebs would like to thank you for your interest in gWebs MailCloak. MailCloak is a free, easy to use and simple to setup email encryption program.

MailCloak provides GnuPG public key encryption for today's most popular webmail services including Google Gmail, Yahoo! Mail, and Microsoft Windows Live Mail.

In this tutorial you will learn:

• How to generate a cryptographic key pair.
• Exchange your public key with a contact.
• Send and receive public key encrypted email.

The first thing you will need to do is download and install MailCloak.

Next Page
Key Pair Generation

MailCloak 3.0 is the first commercial quality email encryption program to explicitly support most major webmail services. It is a powerful and easy-to-use tool that quickly encrypts and decrypts your emails and attachments, providing unprecedented security for your valuable information, while blocking information-hungry search engines from indexing your emails.

MailCloak 3.0 is a completely re-written version of our previous WebmailSafety software. MailCloak 3.0 uses the GNU Privacy Guard (GnuPG) encryption engine to ensure extremely strong public key encryption that is standards based – so you can freely interact with users from anywhere, on any system, using one of hundreds of other GnuPG compatible products.

MailCloak 3.0 utilizes Firefox and IE browser plug-ins to put this essential internet security directly into your web-browser.

Learn more about MailCloak

Download MailCloak

Benefits	Free
Automatic protection for emails, drafts, and attachments.	√
Automatic peer-to-peer public key exchange.	√
Supports eleven domains, including Gmail, Hotmail and Yahoo! Mail.	√
Auto-update keeps you secure with the latest features and bug-fixes installed as soon as they are available.	√
Gnu Privacy Guard (GPG) core encryption technology inside: Large user-base in place Key servers Signing Open Source Symmetric (CAST5 Passwords) based & Keypair Based options Strong encryption – up to 4096 bit keys Reliable Authentication	√
No Adware, Spyware, or Malware.	√
Email Support	√
Telephone Support	√

We have the upmost respect for your privacy. Your important data will never be transferred to us, but we may keep track of some anonymous statistics in order to bring you better service.

To read more about our privacy policy, click here

No. You must safeguard your private key. If you lose your private key, your encrypted messages become unreadable (and if someone else gets their hands on your private key, your messages become readable to them.)

Yes, but not automatically. You must manually encrypt part of your message with the encryption tool provided in MailCloak → Options → Tools.

That depends on the forwarder. If they choose to send decrypted text, then yes. If they choose to forward encrypted text, then the message remains secure.

There are several methods to prove this. One is you can compile or install your own GnuPG, and manage your keys with an external utility. Another thing you can do is use a network monitoring tool to watch all information that leaves your computer. You will never see any communications initiated by our software or any communications with any of our servers.

In the unlikely event that someone steals your passphrase and private key, you are pretty much up a creek. There is no good way to tell if someone has been reading your email. But you may notice that someone is sending unauthorized email from your account. So choose a strong password and don't share your password. Don't write it down. Don't do anything that could lead to someone compromising your password.

Yes, This is actually the safest way to use MailCloak because the more places you store your private key, the more vulnerable it becomes to attack. but you will only be able to read your encrypted messages on the system with MailCloak.

Encrypted email cannot be scanned for viruses until it is decrypted, so email users cannot rely on their providers to scan encrypted messages for them. However, regular email messages may not contain viruses and malware. Viruses and malware are always contained in attachments.

Because email attachments are crucial to most people, MailCloak enables HTML email and attachments, but they aren't automatically downloaded. Remember: only download attachments from people you trust (this is the same for regular and encrypted email).

No. Your encryption keys stay in your control, so you decide who can open your encrypted messages, not us.

If your computer has been compromised by malware, MailCloak cannot change that. However, once email is encrypted with MailCloak, a hacker would need both your password and your private key to decrypt mail sent to you.

Currently we only support Yahoo, Gmail, Aol, MSN, Live Mail, QQ, 163.com, sina.com and 263.com. We are working on adding many more major webmail systems. We also have a domain inclusion plan where, for a fee, we can add your webmail system.

Currently MailCloak is only in English and Chinese, but we are planning to translate into many more languages. If you are interested in translating MailCloak into your language, you can contact us.

Click here to uninstall ( IE / Firefox).

Yes - but this only makes sense if you use different keys for each encryption layer.

Yes.

See the next question.

This question is not as simple as it sounds. It would take the government millions of years to crack a GnuPG encrypted message using brute force. However, it may only take several minutes for someone to guess your password if you don't choose a strong passphrase.

Not yet, but we are working on Mac and Linux versions. You can also click here for more information about getting an OpenPGP compatible encryption system for your mac

MailCloak encrypts email messages fairly quickly – it takes an average of 2 seconds per message to encrypt/decrypt. Once the encryption is done, your email is sent like all other email on the web.

Only a combination of the right password and your private key can authenticate you in the User Panel, thus allowing decryption of emails sent to you. If your identity has been compromised you should create a new identity, (migrate and) delete all email that was sent to your old identity, and tell all your contacts that you have switched public keys.

You can email support@gwebs.com if you have a problem with MailCloak.

No. MailCloak will work over any internet connection.

MailCloak is a simple browser plug-in. It won't affect anything else in your computer.

MailCloak will ask you how you want to encrypt any message you send to someone who's public key isn't in your key chain. You can also turn MailCloak off by clicking on the MailCloak button at the bottom of your browser.

MailCloak automatically encrypts all email attachments up to 20 mb, regardless of their format.

You will see a small MailCloak icon at the bottom of your browser. And when you send mail, MailCloak will ask you how you want to send it. If you are sending email to someone who's public key is in your key chain or receiving encrypted email, Mailcloak will notify you when it encrypting or decrypting automatically.

A Windows PC, and an email account.

MailCloak is free for webmail users and small businesses using google's or Microsofts' small buiness email servers. For medium to large buineses (over 100 employees), or people who have their own email servers, MailCloak costs $29.00 per user per year. The outlook version also costs $29.00 per user per year.

We currently support 11 webmail services including Gmail, Hotmail, MSN mail, Live mail, Yahoo mail and AOL mail, as well as QQ mail, 163.com and 126.com. We are in the process of supporting even more webmail systems.

We currently support Mozilla Firefox, Microsoft Internet Explorer and Outlook. Plug-ins for Outlook, Eudora, Thunderbird, and other email clients as well as support for Mac and Linux platforms are all in the works.

This is a three step process:

* Use the backup feature on one of your MailCloak systems.
* Save the backed up .exe file to a moveable disk, or use secure email to email it the other computer*.
* Run the .exe executable on the second system...

That's it! You're done.
* If you choose to use email to migrate your identities, make sure you are sending secure email to an established identity with an established public key.

Anyone can still send you unencrypted messages. If they want to send you encrypted messages they must use a GPG compatible program for encryption, click here for more information.

Click here to download the latest version of MailCloak.

Navigate to click: gWebs://config or right click on the MailCloak icon and select options.

Don't worry! Every time you view email from a MailCloak or GPG/PGP user, MailCloak will automatically re-download their public key.

If you still have email from them in your inbox, you can open it and the public key will automatically be added back into your keychain. Otherwise you should send them a symmetrically encrypted email asking them to send you their public key again, so you can continue sending them encrypted email.

It is your responsibility not to lose your password or your private key. gWebs doesn't even keep our users personal information, and we certainly don't keep your passwords (would you really want us to?) WebmailSafety passwords and RSA private keys are unrecoverable. Should you lose yours, all your encrypted email and files will become unreadable. Make sure you make a backup of your private key (and preferably, keep it offsite somewhere.) Also, make sure you have a password you won't forget.

Should you really and truly lose your password or private key, you can create another safe identity. You should then send an encrypted email to notify your contacts that you have changed your public key so that they can begin sending encrypted email to your new signed identity.

See here.

See here.

There are many ways MailCloak users can exchange encrypted email with their friends. You can send your friend a MailCloak invitiation, which comes with a MailCloak download link. If your friend is using a platform currently unsupported by mailcloak (such as mac or linux) they can use PGP or one of the many GnuPG encryption tools available at http://www.gnupg.org/related_software/. You can also exchange symmetric (password only) encrypted files and emails at http://www.GpgCrypt.com.

GnuPG stands for GNU Privacy Guard. Sometimes GnuPG is written as GPG.

GnuPG is free, open source encryption software which implements the OpenPGP standard. GnuPG is available on a wide variety of platforms and can be compiled separately and then installed into MailCloak for added piece of mind. You can learn more about GnuPG at http://www.GnuPG.org.

MailCloak uses GnuPG for encryption. GnuPG uses GPG/PGP public key encryption with a choice of algorithms including El Gamal and RSA. MailCloak can uses Keys of up to 4096 bits.

It's extremely easy for unauthorized parities to snoop during the email transmission process, and if you are sending email in plain text, your personal and business information is readable to the world.

Intercepted email can result in big financial losses as well as illegal and malicious use of your private information.

You might think that you never send anything important in your email, so you don't care if anyone intercepts it, but anytime you send a piece of personal information, you may be giving identity thieves another piece of the puzzle. Any

MailCloak encrypts all your email and attachments with 4096 bit GPG encryption - the strongest email protection available to the public. With MailCloak you'll never have to worry about intrusion or snooping by unauthorized parties. Your email service provider doesn't have access to your emails, and our GnuPG encryption is so strong that it would take a billion billion US governments a billion billion years to crack.

You know that MailCloak uses GnuPG for public key encryption, but what is public key encryption? The following is a basic description of public key encryption.

Public key encryption uses keys to encrypt and decrypt messages. When you first use MailCloak you will generate a key pair – a public key and a private key.

The Public Key
The public key is used to encrypt messages that may only be decrypted with the private key.

You can attach your public key to all your email and make it publicly downloadable on your website or blog, because anyone who has it can send you encrypted email.

The Private Key
The private key is used primarily to decrypt messages encrypted with your public key, but it can also be used to encrypt your digital signature so it can only be decrypted with your pubic key.

You should back up your private key and keep both copies somewhere completely secure – never share your private with anyone, email it, upload it to a website or transfer it over any insecure medium. If your private key gets copied, the copier will be able to read your encrypted email or impersonate you by using your digital signature to sign documents.

Conclusion:
Here's the point: you can share your public key with everyone, and then they can use it to encrypt messages which can only be opened with your private key. Since you never share your private key, that means only you can open messages sent to you. In addition, since no one else will have.

For a more thorough treatment, you can read this: http://en.wikipedia.org/wiki/Public-key_cryptography.

Quite simply, MailCloak intercepts your messages before they leave your computer, encrypts them, and then sends them on their way. For a more detailed look at how it works, read on.

Stack-Interception Technology:
When you click "send mail" in Yahoo! Mail (for example), your web browser bundles your mail message into a "post" message, and then sends the post message to Yahoo, where your mail is then processed and sent over the web to the recipient. gWebs MailCloak uses custom Stack-Interception Technology (SIT) to intercept the message after it is bundled but before it is sent. Once MailCloak has your message it tells the browser to "hang on a sec". Now MailCloak runs your message though GnuPG, encrypting the content. When encryption is complete, MailCloak repackages the message so it's ready to "post" again and then passes it back to the browser with a wink, and then the browser sends your message off to Yahoo as usual.

All versions of MailCloak use SIT – so that model works the same way in Outlook as it does in Firefox.

Click here to read more!

Alice sends Bob her public key along with an invitation to download MailCloak.
Bob now installs MailCloak and opens Alice's message.
Alice's public key is automatically attached to Bob's keychain, so he can now send her encrypted messages.
Bob writes a reply and clicks "send" as usual.
MailCloak automatically encrypts this reply and attaches Bob's public key.
Once Bob's key is on Alice's keychain, she can send him encrypted messages as well.

To put it simply, MailCloak takes your email from your browser and runs it through the GNU Privacy Guard (GPG), a mature and highly secure encryption program, when it’s done, it swaps the email content back into the message, and the message is sent.

Public key encryption is a complicated process grounded in complex mathematics, but the basic outline is actually quite simple.

Here is are two the essential concepts you need to know:

• There are two files involved in public key encryption, they are called the private key, and the public key, and they are pared (they can only be used together).
• Data encrypted with the public key can only be decrypted with the private key. Conversely, data encrypted with the private can only be decrypted with the public key.

What to do with your keys:

• Primary uses:
  Your public key is needed to encrypt files and emails sent to you, so feel free to give your public key to everyone you communicate with. You can distribute your public key on your website or blog, and attach it to all your outgoing email. You can post your public key on newsgroups or discussion boards. Basically, your public key can be shared with anyone, even unfriendlies.
  Your private key is needed to decrypt files and email sent to you with your public key. You should keep your private key private and backed up. If you lose your private key, all your encrypted email becomes unreadable. If someone else gets their hands on your private key, they can then read all your encrypted email.
• Secondary uses:
  Your private key may also be used to create digital signatures. Since only you have access to your private key, a file or email signed with your private key is garenteed to be signed by you.
  Your public key is necessary to read digital signatures. Because your public and private keys are a pair, people can use your public key to decrypt your digital signature and verify that the sender of a signed message is actually you.
• gWebs MailCloak automatically attaches your public key to all your outgoing email (when this feature is enabled). MailCloak also automatically encrypts and decrypts email to specified recipients and handles all your key files for you. All you have to do is enter your password (and remember to back up your key pair).

Uninstalling gWebs MailCloak is fast and easy. However, we do recommend backing up your public and private key pair before uninstallation, or else all of your encrypted email will be rendered permanently unreadable. Click here to find out how to back up your key pair.

Go to Start → All Programs → gWebs MailCloak → Uninstall.

Click Yes.

Wait for the process to complete.

That's it ! You're done !

Open Firefox. Go to Tools → Add-ons.

Select the Extensions TAB, locate gWebs MailCloak and click "Uninstall".

Restart Firefox.

After installation, MailCloak will automatically take you to the options page. Fill out the required information.

Click "Generate"

When that's done, You're ready to begin receiving public key encrypted email!

Next Page
Public Key Exchange

Previous Page
Introduction

Now that you have generated a public key, its time to send it to your contacts. Once a contact has your public key, they can send you public-key encrypted email. Conversely, once you have someone's public key, you can send them encrypted email.

MailCloak will automatically attach your public key to emails sent to people in supported domains, so go ahead and log in to your email system (we will use Google's Gmail for our tutorial).

Turn on MailCloak
First make sure that MailCloak is turned on.
Notice the MailCloak icon in the right hand corner of your browser. Click it once and see that it turns red – you have just turned MailCloak off. Click it again and it should turn green – now MailCloak is on again.

Compose Email
Now compose an email message to the people you want to send your public key.
Click "send".

Sign your Message

(click here if you have selected "sign" in the MailCloak Menu)

If you have selected "Sign" in the options, you will now see the following dialogue box, asking you to digitally sign your email. Input your key's password to digitally sign this message. Click "Don't sign" if you don't wish to sign it. You can also choose to have MailCloak cache this password forever, by checking "Cache this password for" and selecting “always”.

Now click "Sign" or "Don't Sign".

Send Email
By default MailCloak will attach your public key to email if you don't have the recipient's key in your keychain. If you have edited your advanced settings for symmetrical encryption, or not to send your public key.

(click here for instructions on "how to setup public key attachments".)

Open a new tab or browser window and right click the MailCloak icon in the bottom of your browser. Click "Advanced Settings". Scroll to the bottom of the page, until you see: Symmetrical password options.

You can now select "Ask me what to do every time" or "Send plain text email with my public key attached". Now click "save".

If you chose "Ask me every time" in the advanced options.

click here.

Next you will see a dialog box telling you that MailCloak doesn't have your recipient's public key. Select "Send mail in plain text and attach your public key" and click "OK". You also have the option use symmetrical encryption. Click here to learn more about symmetrical encryption.

Your public key will now be attached to this email and the email will be sent in plain text.

When the recipient with MailCloak replies to this email, they will automatically send you encrypted email with their public key attached. Click "Yes" to attach their public key to your keychain.

And then their email will be decrypted.
Once you have their public key, you can send them encrypted email.

Next Page
Sending Encrypted Email

Previous Page
Key Pair Generation

Reply to their message, and type your message. Click "send".
That's it!

Previous Page
Public Key Exchange