Preskočiť na obsah
BlueMail Help Center BlueMail Help Center
Stiahnuť

Using PGP Encryption

Tento obsah zatiaľ nie je dostupný vo vašom jazyku.

PGP end-to-end encryption in BlueMail is completely free. It is included on every plan, the free Personal plan included. There is no license to buy, no upgrade prompt and no trial to start, and it works on Android, iOS, Windows, Mac and Linux with any account you already use, including Gmail, Outlook, Yahoo, iCloud and other IMAP mailboxes. For what PGP is and how it works, see PGP encryption in BlueMail.

PGP Encryption Settings

  1. Open BlueMail.
  2. Go to Settings.
  3. Go to Privacy & Security.
  4. Select End-to-End Encryption from the security options.
  5. Select PGP Encryption. (The same screen offers S/MIME Encryption & Signing, if your organization issues you a certificate rather than PGP keys.)

You will see two main actions:

  • Generate New Key Pair
  • Import Existing Keys

Below these options, you’ll find:

  • Active PGP Configuration – the key pair currently used for encryption and signing.
  • All keys – a list of all keys stored in the app.
Settings → Privacy & Security → End-to-End Encryption → PGP Encryption

Option 1: Generate a New PGP Key Pair

If you are new to PGP or want to create separate keys for your BlueMail account:

  1. Tap Generate New Key Pair.
  2. Check Name and Email address, BlueMail fills these in from the account you selected, and the email address is the identity the key will be issued for.
  3. Choose a Key type: ECC (Elliptic Curve), the default, or RSA.
  4. For RSA only, pick a Key strength of 3072 or 4096 bit. ECC keys use a fixed curve (P‑256), so there is nothing to set.
  5. Set Key expiry. The default is 3 years; you can change the number and the unit (days, months or years), or turn on Key does not expire.
  6. Enter a Key passphrase. This protects the private key on your device, choose a strong one and keep it somewhere safe.
  7. Tap Generate keys.

Once generated, the new keys appear under Active PGP Configuration, and your account will use them to encrypt and sign outgoing emails.

What Happens When You Generate a Key Pair?

  • Public Key: Shared with others so they can send you encrypted messages.
  • Private Key: Stored securely on your device and used to decrypt incoming mail.

Important: Never share your private key with anyone.

Option 2: Import an Existing PGP Key

If you already have PGP keys (for example, from GnuPG, ProtonMail Bridge, OpenKeychain, etc.), you can import them into BlueMail.

How to Import Your Key

  1. Tap Import Existing Keys.
  2. Provide your private key in one of two ways:
    • Tap Select file next to Private key and choose a key file (.asc, .pgp or .gpg), or
    • paste your ASCII-armored private key block straight into the Private key box.
  3. If your private key is protected with a passphrase, enter it in the Private key passphrase field.
  4. Tap Import keys to finalize.

You only need to supply the private key, a standard private-key export already contains the matching public key, and BlueMail reads it from there.

BlueMail will validate and store your key pair. Once imported, your key will appear under Active PGP Configuration.

Before You Import

  • Ensure you trust the origin and authenticity of your key.
  • If your private key is not passphrase-protected, consider adding one for better security before importing.

Managing Your PGP Keys

After generating or importing keys:

  • The Active PGP Configuration displays the key currently used for encryption and signing.
  • The All keys section lists every PGP key available in BlueMail.
  • You can switch active keys or remove old ones as needed.

Safe PGP Use

  • Back up your private key securely. Losing it means you cannot decrypt messages encrypted for that key.
  • Protect your passphrase and avoid storing it in plain text.
  • Share only your public key, never your private key.
  • Verify public keys received from others to avoid man-in-the-middle attacks.

Troubleshooting

“We were unable to import your PGP keys. Verify the files and passphrase and try again.”

BlueMail shows this one message for every import failure, so work through the possible causes in turn:

  • Key format: if you pasted the key, it must be ASCII-armored and complete: it starts with -----BEGIN PGP PRIVATE KEY BLOCK----- and you need the header and footer as well as the body. If in doubt, use Select file with the original .asc, .pgp or .gpg file instead of pasting.
  • Passphrase: use the exact passphrase the key was created with, and watch for a trailing space picked up when pasting.
  • Private part missing: a public key export cannot be imported as a key pair. Make sure you exported the private key from your other PGP tool.

Keys Not Appearing

Try:

  • Restarting BlueMail.
  • Re-importing the key pair.
  • Verifying that the export you imported contains the private key, not just the public one.
Contact Support Stiahnuť
© 2026 Blix Inc.