www.schne1der.de
thorsten's homepage

Home > Tutorials > Encryption with Thunderbird

Encryption with Thunderbird


This tutorial is going to show, how to use gnupg with thunderbird and the enigmail plugin under windows.
It will not show how you to customize your thunderbird installation, such guides are available on http://mozilla.org
The GNU Privacy Guard (GnuPG or GPG) is a free suite of cryptographic software http://www.gnupg.org/.
Thunderbird is an email program based on Mozilla http://www.mozilla.org/products/thunderbird/.
Enigmail is a public key encryption extension for Mozilla Thunderbird http://enigmail.mozdev.org/.

The used software for the following tutorial can be obtained from the following pages:


Installing Software

In the following guide, we assuming that you are using all software for windows:

In the first step we are going to install all the required programs.

  1. Install Thunderbird (This should be relatively easy...)
  2. Install GnuPG  (This should also be easy...), GPG4win brings a lot of additional tools for key management etc.
  3. Install Enigmail
For that you have to start thunderbird and choose Tools→Extensions. Just drag and drop the enigmail???.xpi file in the new window. And restart Thunderbird.

For a global installation

[This part is not relevant for using encryption in thunderbird, just skip it]

If you want to change the path, where thunderbird saves your email you have to change or create in the directory:

  • C:\Dokumente und Einstellungen\yourUsername\Anwendungsdaten\Thunderbird (for a german windows)

the file

  • profiles.ini

to the following:
[General]
StartWithLastProfile=0

[Profile0]
Name=default
IsRelative=1
Path=Profiles/default.svd

[Profile1]
Name=profileName
IsRelative=0
Path=d:\myThunderbirdDirectory
Default=1

If you want to use for example your email accounts from different operating systems you have to install enigmail global:

  • <full-path-to-thunderbird> -install-global-extension <full-path-to-enigmail.xpi>

Customizing Enigmail

Open thunderbird. Choose OpenPGP→Preferences and insert in ‘GnuPG executable path’ something like this:

  • C:\Program Files\GNU\GnuPG\gpg.exe  [for different windows language versions, you have to replace 'Program Files']

And for ‘Additional parameters for GnuPG, something like this:

  • –homedir d:\myGnuPGKey (first you have to create the directory)

if you want to safe your public and private keys in a special folder on another harddrive.
Now it should be done with the enigmail configuration.

Generate new key pair

Now you should start with generating a new key pair. Choose OpenPGP→Key management.
In the new window you should see all your public keys. If you also have a private one the line should be bold. To start the generation of new key choose Generate→New Key Pair.
Now you should choose the account for which you want to create a new key pair, for that you have to create at least an account.

  • Choose a passphrase, which protects your private key (the best is around 10 signs with captials and digits)
  • Choose ‘Generate key’ and move your mouse for some time...
  • You don’t have to create a revocation for your key.

Now there should be one key in your Key Management window.
Now you send your public key to friends, then they can send you encrypted emails, which can only be decrypted by you!

  • right click on your key and choose ‘Copy public keys to clipboard’
  • start writing a new mail and copy the clipboard into the body of the new mail and send it to your friends.

To publish your public key on certain key servers you have to do the following:

  • select your key and choose Keyserver→Upload public keys now every one can find your public key, which is associated with your email address.

Manage new public keys

You have two possibilities to import a public key of your friend.

  1. copy the public, which you have received by email (including the BEGIN PGP PUBLIC KEY BLOCK and the END PGP PUBLIC KEY BLOCK) and choose OpenPGP→Key Management. Then you have to choose in the new window Edit→Import keys from clipboard.
  2. choose OpenPGP→Key Management and Keyserver→Search for keys. And then you could insert the email address or the Key ID (with a length of 8) into the search field.

Problems ?

If you have any problems just write an email to: t@jpv.de, by the way my Key ID is 713B81E2. You can find my public key on the Keyserver.