Free tools Windows power users keep installed
One-click scans. No signup required.
Mailvelope is a browser extension that adds OpenPGP encryption and decryption to supported webmail services. It is not an email provider: you continue using your webmail account, while Mailvelope helps you manage OpenPGP keys and encrypt or decrypt messages in the browser.
What Mailvelope does—and what it does not do
Mailvelope brings OpenPGP tools into supported webmail pages. Its core functions include encrypting and decrypting email and managing contacts’ public keys. Your mailbox and webmail provider remain separate services; Mailvelope adds an encryption workflow to the browser interface.
OpenPGP encryption is useful when the people exchanging messages can use compatible keys. It does not, by itself, establish that every part of an email is private. The available Mailvelope material supports claims about message encryption and key handling, but not a blanket claim that all message metadata is hidden or that a compromised browser is protected.
Which webmail providers does Mailvelope support?
Compatibility depends on the provider and its current webmail interface. Mailvelope names Gmail and other services, but providers including GMX, WEB.DE, Posteo, mailbox, and freenet.de have tailored integrations and setup instructions. Check Mailvelope’s current provider guidance for the exact service you use rather than assuming that support for one webmail service means support for another: Mailvelope setup and help.
PC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minute#1 Best Overall
- POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
OpenPGP.org distinguishes services that integrate with the Mailvelope browser plugin from providers that implement OpenPGP directly in their own webmail. These are different approaches: with Mailvelope, encryption is provided through a browser extension; with a provider’s own implementation, it is built into that service’s webmail. Consult the current directory and your provider’s instructions before choosing a workflow: OpenPGP.org software directory.
How setup works
Mailvelope’s setup involves installing the extension, granting browser permissions, and creating or configuring an OpenPGP key pair. The extension requests read and write access to webmail pages so it can integrate with them. That permission is central to how the product works, not a cosmetic setting: consider whether you are comfortable allowing the extension to interact with those pages.
Rank #2
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
- Check compatibility. Confirm that your browser and exact webmail provider are covered by Mailvelope’s current setup instructions.
- Install and authorize the extension. Review the requested browser permissions. Mailvelope says it needs read/write access to webmail pages to add its features.
- Create or configure your key pair. Follow the key setup flow for your provider. You will need the relevant public keys to exchange encrypted messages with contacts.
- Set up contacts and test the workflow. Add or verify contacts’ public keys, then follow the provider-specific instructions to encrypt and decrypt messages.
Provider-integrated deployments may need different steps and may have limited support from Mailvelope. The official guide is the best place to confirm the current process: Mailvelope setup guide.
How are private keys protected?
Mailvelope says it stores and exports private keys only in encrypted form, and that private-key operations require both the private key and its password. Those are the vendor’s descriptions of its key handling, not an independent security evaluation. A password is still important: protect it and do not share it with people who should not be able to use your key.
Rank #3
- POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Access to the computer is not the only security question. Mailvelope cautions that “Mailvelope can only be as secure as your browser.” A browser or computer that has been compromised may undermine the protections an extension provides. Mailvelope recommends keeping the browser up to date; its FAQ discusses both key protection and provider compatibility: Mailvelope FAQ.
When to consider the GnuPG and smartcard option
Mailvelope documents an optional local GnuPG backend, which can support use of security tokens such as smartcards. This is an advanced route, not a requirement for ordinary Mailvelope use. It adds local software and configuration, and the documentation does not establish universal compatibility across smartcards, operating systems, and setups.
Rank #4
- POWERFUL SECURITY KEY: The YubiKey 5C Nano is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C Nano secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: The YubiKey 5C Nano is designed to stay plugged into your device via USB-C. Simply tap it to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
If you are considering this option, check the project’s instructions for the backend and your intended token before investing time or money: Mailvelope GnuPG backend documentation.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.How to choose an OpenPGP workflow
Mailvelope is a fit when you want to keep using a supported webmail service and are comfortable adding a browser extension to your workflow. Compare it with other options using these practical checks:
Best Value
- POWERFUL SECURITY KEY: The YubiKey 5 is a versatile physical passkey that protects your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 secures 100+ of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 via USB and tap it to authenticate. No batteries, no internet connection, and no extra fees required.
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
- Provider and browser: Is your exact combination supported today, with instructions you can follow?
- Where encryption runs: Do you prefer a browser extension, a standalone email client, or OpenPGP built into your provider’s own webmail?
- Key handling: Does the documented storage and protection model suit you, and do you actually need an optional local GnuPG setup?
- Setup and support: Are there provider-specific steps, and does Mailvelope document that integration clearly?
These distinctions matter because support, permissions, and setup vary by provider and deployment. Mailvelope’s project repository and changelog offer implementation and release context, but details such as browser support and provider authorization can change: Mailvelope project repository and Mailvelope changelog.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
