CYBER-ATLAS TOOLKIT
TOOLKIT: REFERENCES FREE EMAIL ENCRYPTION SOFTWARE BEFORE YOU START Limited functionality, limited capacity, limited usage, limited platforms or restrictions disallowing commercial use The inclusion of adware (advertisements) or more serious malware from unscrupulous suppliers Trial periods, after which payment for the services become due Errors (bugs) which will not be resolved quickly, if at all Lack of help in the event you run into problems 2 That said, for small organisations freeware can be a good option for improving cyber security at zero cost. For larger organisations, freeware allows the organisation to dip its toe in the water to see which product is most suitable for them. Many of the fullfunctionality products or services are available at a very modest cost. Whilst all the products we list have been through limited validation by ourselves, and we have found no threats in the software itself, it is wise for organisations to re-validate that situation at time of selection. Remember services which do not require a download of software to your own network are inherently safer than those that do. FOR SMALL ORGANISATIONS FREEWARE CAN BE A GOOD OPTION FOR IMPROVING CYBER SECURITY AT ZERO COST.
SENDINC www.sendinc.com Sendinc is a web-based service that makes it safe and simple to transmit sensitive information via email. You and your recipients can use Sendinc for free. No software is required. Sendinc secures your message by ensuring that your data remains encrypted from the time it leaves your computer through the time your recipients retrieve it. At no point in the process is your message data transmitted or stored in an unencrypted format. Sendinc further ensures the safety of your messages by verifying your recipients are in fact your intended recipients. Messages are encrypted with a powerful randomly-generated encryption key that is emailed to your recipients in the form of a link. Sendinc does not save a copy of your recipients encryption keys and your message cannot be decrypted without the key not even by Sendinc. This means only your recipients can decode the message data. 3 AT NO POINT IN THE PROCESS IS YOUR MESSAGE DATA TRANSMITTED OR STORED IN AN UNENCRYPTED FORMAT.
HUSHMAIL www.hushmail.com Hushmail is a secure web-based free email service that looks and feels just like any other web-mail site, but adds strong encryption to your emails. It uses standards-compliant encryption and provides mobile access (Android, iphone, BlackBerry, etc.). In addition, Hushmail has a range of paid plans that provide additional storage, unlimited email aliases, dedicated technical support, and desktop access. 4 A SECURE WEB-BASED FREE EMAIL SERVICE THAT LOOKS AND FEELS JUST LIKE ANY OTHER WEB-MAIL SITE, BUT ADDS STRONG ENCRYPTION TO YOUR EMAILS.
LOCKBIN www.lockbin.com Lockbin is a free web application for sending private email messages and files. Lockbin ends message persistence, which means your email message will not be backed up on email servers or stored in backup files. Network sniffers (aka packet sniffers, protocol analysers, network analysers) are software or hardware means for intercepting and logging traffic over a network. They may be used to intercept your email traffic while in transit. The use of Lockbin to obscure the content of your message will avoid these possible risks to your privacy. No registration is required to use Lockbin. Your message and file attachments are protected by strong AES-256 bit encryption and your secret password. You invent the password and deliver it to the recipient using a different secure method, not email. The free plan allows one user to send secure messages with secure file attachments up to 15MB. Files are stored for up to one month. You can also download free Lockbin Java desktop software and a free Microsoft Outlook add-in for sending and receiving Lockbin messages. As with other software there are also paid plans providing more features and allowing for larger limits on file attachments and for more users. 5 YOUR MESSAGE AND FILE ATTACHMENTS ARE PROTECTED BY STRONG AES-256 BIT ENCRYPTION AND YOUR SECRET PASSWORD.
isafeguard.. www mxcsoft com isafeguard is a range of software packages that provide easy-to-use and highly secure encryption and digital signature solutions for everyone from big companies to individual users. The software allows you to sign and encrypt files, folders, and emails and verify digital signatures and countersignatures. It provides a secure text editor and allows you to wipe files, folders, and free disk space. It also integrates with the Windows shell. The freeware (free software) version of their software is for non-business, individual users only, so may not be suitable for commercial organisations, but is useful for individuals themselves. Although the freeware version lacks some of the features the paid-for Enterprise and Professional versions it does provide powerful encryption and digital signatures capabilities, and security is as strong as the enterprise and professional editions. The freeware version does allow individuals to assess the product in advance of any purchase by the business. All editions support using certificates from any Certificate Authorities, and handle certificate status checking automatically. 6 ALL EDITIONS SUPPORT USING CERTIFICATES FROM ANY CERTIFICATE AUTHORITIES, AND HANDLE CERTIFICATE STATUS CHECKING AUTOMATICALLY.
SAFE-MAIL.NET www.safe-mail.net Safe-mail is a highly secure communication, storage, sharing and distribution system for the Internet. It provides email, instant messaging, data distribution, data storage, and file sharing tools in a suite of applications that enables businesses and individuals to communicate and store data with privacy and confidence. Every application is secured by state-of-the-art encryption ensuring the highest level protection and privacy to users. Within the overall system as with each application, security is not an add-on feature but has been designed into the fundamental architecture of the system. The system is available at any time and from any location using any device or operating system, be it PC or Macintosh, Windows or Unix, Sun or i-mode enabled wireless device. Safe-mail s free service contains ALL the functionality of the Safe-mail system but is limited to 3Mb of storage space, less names in the address book, less folders, filters, smaller mail quota and reduced frequency of backup. To increase access to these resources, they offer a range of Premium Services. There are no advertisements, downloads or cookies. Safe-mail supports most hardware platforms and any operating system. Includes file storage, spam filters and anti virus protection. Full compatibility with most browsers, email clients and all relevant protocols including POP, SMTP, IMAP, S/MIME and Public Key Infrastructure (PKI). 7 THE SYSTEM IS AVAILABLE AT ANY TIME AND FROM ANY LOCATION USING ANY DEVICE OR OPERATING SYSTEM.
ENIGMAIL www.enigmail.net Enigmail is a security extension to Mozilla Thunderbird (email, news and chat) and Seamonkey (Internet). It enables you to write and receive email messages signed and/or encrypted with the OpenPGP standard form of encryption. Enigmail can also be used with Eudora OSE (an extension of Mozilla Thunderbird) and Postbox (mail - using a Postbox extension). Enigmail is an email plugin. It cannot be run by itself. You can only use Enigmail with the software mentioned above. Other prerequisites include the installation of free GnuPG software additional information is provided on the enigmail website. 8 ENIGMAIL CANNOT BE RUN BY ITSELF. YOU CAN ONLY USE ENIGMAIL WITH THE SOFTWARE MENTIONED ABOVE.
COMODO www.comodo.com Comodo provides free Secure Email Certificates to personal/home users only. This allows you to protect your digital communications. The digital signature ensures confidentiality and provides secure message encryption with up to 256-bit security. The Comodo Free Secure Email Certificate integrates with Microsoft Office and major applications, and is trusted by popular email clients. Email certificates provide the strongest levels of confidentiality and security for your electronic communications by allowing you to digitally sign and encrypt your mail and attachments. Encryption means that only your intended recipient will be able to read the mail while digitally signing allows them to confirm you as the sender and verify the message was not tampered with en route. There is a charge for the use of this software for business use, and further details may be found on the Comodo website. 9 THE COMODO FREE SECURE EMAIL CERTIFICATE INTEGRATES WITH MICROSOFT OFFICE AND MAJOR APPLICATIONS, AND IS TRUSTED BY POPULAR EMAIL CLIENTS.
MOBRIEN.COM www.mobrien.com Mobrien offers a free encrypted email service that transmits your email text message in an encrypted form so that it cannot be parsed (checked) for key words while en route. What happens once it is stored on the receiver s computer is up to them and the protective security measures they have enabled. Your e-mail remains encrypted from the time it is sent and until it is received and decrypted by the intended recipient. The recipient automatically receives instructions for decrypting messages. No unencrypted message is transmitted across the internet. Between transmissions, when your e-mail is stored on mail servers, the message remains encrypted and the content cannot be sniffed for specific key words, which is the manner in which email eavesdroppers select the emails they want to read. 10 When using Mobrien s encrypted email service, there is no need to exchange passwords or complex public key details with encrypted email recipients. The recipients are automatically sent instructions for deciphering the encrypted email. Sending an encrypted email message using Mobrien is as simple as sending an ordinary email with a web client. Other email encryption methods require the sender and receiver to exchange public keys which is complicated, inconvenient, and not very practical when spontaneously sending encoded email messages. Further details on how to take advantage of this service are included on the Mobrien website.
OPOLIS www.opolis.eu Opolis is a high-security email service. Combining the latest E-Mail security technologies, Opolis transmits, processes and stores all your confidential messages in encrypted mode. Accessible from all over the world, Opolis operates on your PC in parallel to standard email applications, such as Microsoft s Outlook or Apple s Mail. The Opolis Mail Client runs on any machine and does not require any specific configuration. Opolis is a fully integrated service provider for all your confidential emails, combining a global infrastructure, server systems, backup facilities, storage and customer service. Note that Opolis works on a personal level, not on an enterprise level, and can be very useful for specific email communications where confidentiality is mandatory. 11 THE OPOLIS MAIL CLIENT RUNS ON ANY MACHINE AND DOES NOT REQUIRE ANY SPECIFIC CONFIGURATION.
MAILVELOPE www.mailvelope.com Mailvelope is an easy-to-use Chrome (the web browser developed by Google) extension that offers free, OpenPGP encryption for the most popular webmail services. It comes preconfigured for major webmail providers (Gmail/Google Apps, Outlook, Yahoo! and GMX) and integrates directly into the webmail user interface. It can also be configured to support other webmail services. A Firefox version of Mailvelope is currently in development. 12 MAILVELOPE IS AN EASY-TO-USE CHROME EXTENSION THAT OFFERS FREE, OPENPGP ENCRYPTION FOR THE MOST POPULAR WEBMAIL SERVICES.
CRYPT4FREE www.secureaction.com Crypt4Free is a free program that allows you to encrypt every kind of file on every kind of medium, whether floppy disk, removable hard drive, zip drive, tape drive or other, using two encryption algorithms, Blowfish and DESX. It offers full.zip support, providing the ability to browse for existing.zip archives, extract their contents, and even create new.zip archives. The program also allows you to send encrypted files and messages via the internet and to encrypt email text (or any other text message) to send it securely via e-mail, chat, or instant messengers like ICQ, AOL Messenger, Microsoft Messenger, etc. The recipient must enter the password to read this message. Crypt4Free provides a user privacy tool that removes all internet traces, such as URL history, typed URLs, Favorites, Recycle Bin, typed passwords in web forms, etc. There is also a built-in file shredder that allows you to wipe the contents of the original, pre-encrypted file. Note that the free version, whilst having many features, does not include all the features of a paid-for version. The company that offers Crypt4Free, SecureAction, also sells a program called Advanced Encryption Package Professional. This program offers features not available in the freeware version, such as creation of self-extracting archives, integration with Windows Explorer, complete command line support, RSA algorithm support, and 17 additional encryption algorithms and 19 additional secure files erasure algorithms. 13
SOPHOS www.sophos.com Sophos produce the commercial product SafeGuard Encryption; however, a comparable product Sophos Free Encryption is currently available for download, free of charge, from reputable providers. Sophos Free Encryption is a program that allows you to send encrypted data by creating password-protected archives you can send (attachments) using most email programs. When you encrypt your data, the files are automatically compressed and the archives are automatically added to new email messages. Encrypted files can be self-extracting so recipients don t need special software to open the file; all they will need is the password. Note that it is the attachments to the email that are encrypted, not the email contents. 14 ENCRYPTED FILES CAN BE SELF-EXTRACTING SO RECIPIENTS DON T NEED SPECIAL SOFTWARE TO OPEN THE FILE; ALL THEY WILL NEED IS THE PASSWORD.
15
Willis Limited The Willis Building 51 Lime Street London, EC3M 7DQ United Kingdom Tel: +44 (0)20 3124 6000 www.willisfinexglobal.com Willis Limited, Registered number: 181116 England and Wales. Registered address: 51 Lime Street, London, EC3M 7DQ. A Lloyd s Broker. Authorised and regulated by the Financial Conduct Authority. 12601/02/13