Documentation

Everything this does, in plain words. No background in security is assumed anywhere on these pages.

These pages are written for someone who uses e-mail every day and has never thought about how it works underneath. Nothing here needs a technical background. If you want the protocol, the byte formats and the API, that lives in the technical documentation instead.

Start here

What this is, and why

The problem with ordinary e-mail, and the three things this adds to it.

How it works

Wax seals and padlocks, then a step-by-step account of what happens when you press send.

Worked examples

Six real situations, what you would see in each — including two where this cannot help.

What the banners mean

Every message you open gets one line. Here is each one, and what to do about it.

How this differs from what you have

SPF, DKIM and DMARC; PGP and S/MIME; spam filters; secure portals. What each really does.

Using it

Installing

Three ways to install, and how to choose between them.

Everyday use

Sending, receiving, replying, and what changes for the people you write to.

Your recovery phrase

The twelve words that are your account. What to do with them, and what happens if you lose them.

When something looks wrong

No banner, everything unconfirmed, or your own message reported as altered.

For a team or a company

Where the value actually is, what to tell colleagues, and the decisions to take first.

Knowing what you have

What you have to trust

What this removes the need to trust, what it does not, and where the design is still weak.

What is stored, and who can see it

Exactly what leaves your computer, and what does not.

Honest limits

What this does not protect, and what an attacker can still do.

Questions

The things people actually ask, answered directly.

Glossary

Every term used on this site, in one sentence each.

Early software. This works and is in daily use on a test network, but it has not had an independent security audit, there is no mobile version, and the Outlook add-in has not yet been tested against a live Microsoft 365 tenant. Please read the honest limits before relying on it for anything that matters.

← All documentation