Getting Started with MailCloak for Firefox

From gWebs Support Wiki

Getting started with MailCloak on Mozilla Firefox is super easy.


  1. Vista users - turn off UAC
  2. Install MailCloak
  3. Create your identity (your key pair)
  4. Bind & Turn On MailCloak
  5. Exchange your keys
  6. Send someone encrypted email



  1. Make sure your system meets the system requirements.
  2. If you haven't done so already, please go to | and click "Download"
  3. A yellow box like this one will pop up on your screen:image:confirmInstall.png
  4. Click allow, and then Install" on the Firefox add-on installer dialogue box
  5. Restart Firefox.

Create an Identity

When Firefox restarts, MailCloak will automatically restart direct you to the "Add Identity Wizard"

The wizard asks for:

  • Identity Name - This is the name people will when they receive your public key
  • Password - This will be the password for your private key. This password should be different from your email password.
  • Email Address - this will be the primary email address attached to this key pair.

You can attach more email addresses to the key pair later.


Note that gWebs will never see any of this information. Your keychain will be stored on your own PC.

Turn on MailCloak

In order to use MailCloak to send encrypted email or do a key exchange, you must first toggle encryption on. To toggle MailCloak, right click on the MailCloak icon on the lower right of your browser, and then click encrypt so that it is checked, as demonstrated below.


You will notice that the words "gWebs MailCloak" will be grayed out when MailCloak is toggled off, and they will be displayed in green when MailCloak is toggled on.

Bind MailCloak to Your Email Account

You must bind your email account to MailCloak in order to send and import public keys and read and write encrypted email.

If you entered the email address correctly when you generated your key, this should have been automatic, but if you are logging into a different email address, you will see the following dialogue:


Click "Yes" to add your key-pair to this account.

Exchange your key

  • In order to send encrypted email with MailCloak, or any PGP or GPG compatible encryption system, you must first exchange your public key with your communications partner. Your public key will be used to encrypt email so that only you can read it. You will then use the combination of your private key and your password to decrypt it.
  • Sending someone your public key is automatic once MailCloak is turned on.
  • We have created Cryptobot to help new users get used to the idea of key exchange. Using Cryptobot is really really easy! Once you have installed and turned on MailCloak, simply send an email to - MailCloak will automatically attach your public key to this email.

So go ahead and send an email to, wait a few minutes, and check your email. Cryptobot should have replied to you. Now Send Cryptobot another email. At this point MailCloak will ask for your password, and when you click OK, MailCloak will encrypt and send your email.


Now you're ready to try it with your contacts!

Go ahead and send them an invitation. If you leave MailCloak on when you send email, it will automatically send invitations with outgoing mail.

The invitation looks like this:


When a user gets an invitation, they can click on the envelope and they will automatically be sent to the MailCloak installation page. They then install MailCloak and restart their browser. When they open the email you just sent them, your public key will automatically be imported, and the first message they send you will be encrypted and contain their public key.

NOTE: Please do not send important data with MailCloak before verifying a test message to the recipient gets encrypted.

Personal tools