TOKU - Treasury of Knowledge for Users

A variety of information you might find useful

User Tools

Site Tools


flowcrypt

This is an old revision of the document!


Below is the same content reformatted for DokuWiki, using standard DokuWiki markup (======, =====, ====, lists, bold, notes).

You should be able to paste this directly into a DokuWiki page.

PGP Encrypted Email on iPad Using Gmail + FlowCrypt

This guide explains how to add true end-to-end encrypted email (OpenPGP / PGP) to a Gmail account on an iPad using FlowCrypt.

FlowCrypt encrypts email on your device, so neither Google nor FlowCrypt can read your messages.

What You Get

•	True end-to-end encryption (OpenPGP)
•	Works with existing Gmail accounts
•	Messages and attachments encrypted locally on the iPad
•	Compatible with other PGP email clients (Thunderbird, Proton Mail, etc.)

Requirements

•	iPad (iPadOS)
•	Gmail account
•	FlowCrypt app from the App Store
•	Recipients who support PGP encryption

Step-by-Step Setup

1. Install FlowCrypt

•	Open the App Store
•	Install FlowCrypt – Encrypted Email
•	Launch the app

2. Sign In to Gmail

•	Tap Sign in with Google
•	Select your Gmail account
•	Approve access

Note: FlowCrypt uses Google OAuth. Your Gmail password is never shared.

3. Create a PGP Key

When prompted:

•	Choose Create a new encryption key
•	Select 4096-bit key (recommended)
•	Create a strong passphrase

Important:

•	This passphrase protects your private key
•	If lost, encrypted email cannot be recovered

4. Back Up Your Private Key (CRITICAL)

You must back up your private key to avoid permanent data loss.

Recommended backup locations:

•	Encrypted password manager (e.g., KeePassXC)
•	Cryptomator vault
•	Encrypted USB drive

Backing up allows you to:

•	Add FlowCrypt on another device
•	Recover access after reinstalling the app

5. Share Your Public Key

To receive encrypted email, contacts need your public key.

You can:

•	Email it to contacts
•	Attach it once in a normal email
•	Publish it on a public key server

FlowCrypt can automatically fetch public keys for many recipients.

Sending Encrypted Email

•	Tap Compose in FlowCrypt
•	Enter the recipient
•	If a public key is available, a lock icon appears
•	Write the message
•	Attach files if needed (attachments are encrypted)
•	Send

If no public key exists, FlowCrypt will warn you before sending.

Receiving Encrypted Email

•	Encrypted messages appear normally in FlowCrypt
•	Enter your PGP passphrase to decrypt
•	Decryption happens locally on the iPad

Gmail App Behavior

•	Encrypted messages cannot be read in the Gmail app
•	Gmail shows a placeholder such as:

“This message is encrypted”

•	You must open FlowCrypt to read or reply securely

This is expected and normal.

Attachments

•	Fully encrypted
•	Only readable by intended recipients
•	Suitable for PDFs, images, documents, and text files

Important Limitations

Recipient Must Support PGP

PGP works best with:

•	FlowCrypt
•	Thunderbird with OpenPGP
•	Proton Mail (PGP mode)

It is not ideal for one-time or non-technical recipients.

Subject Lines Are Not Encrypted

Avoid sensitive information in subject lines.

•	Bad: Medical test results
•	Good: Document

Search and Previews

•	Gmail cannot index encrypted content
•	Message previews and search will be limited
•	This is the privacy trade-off for encryption

Go to Settings in FlowCrypt and enable:

•	Face ID / biometric unlock
•	Auto-lock timeout
•	Disable lock-screen message previews

When FlowCrypt Is the Right Choice

•	Regular communication with the same people
•	Privacy-sensitive email and documents
•	Recipients already using PGP
•	You want encryption without changing email providers

•	Importing an existing PGP key
•	Sending password-encrypted messages to non-PGP users
•	Using FlowCrypt on macOS or Windows
•	Comparing FlowCrypt vs iPGMail or Canary Mail

If you want, I can also:

•	Optimize this for your existing DokuWiki structure
•	Add screenshots placeholders
•	Create a short checklist version
•	Add a key recovery & rotation section

Just tell me what you’d like next.

flowcrypt.1767802149.txt.gz · Last modified: by Steve Isenberg