FlowCrypt

Overview

FlowCrypt is an email-encryption tool for people who want to protect messages without requiring every recipient to use OpenPGP. Its strongest case is a small team starting on the free plan or a larger domain that needs centrally enforced security rules. It is less compelling for buyers who need a clear enterprise price before evaluating the service.

FlowCrypt supports encrypted messages to OpenPGP users and password-protected delivery to other recipients. Those recipients can reply securely without installing a plugin, which makes it more practical for conversations across organizations than a workflow that depends on both sides adopting the same software.

Browse Email Encryption Software or File encryption tools to compare category options.

Key features

• Two delivery routes: OpenPGP users receive encrypted email, while other recipients can receive password-protected messages. That flexibility suits mixed audiences, though password-based delivery is a different route from OpenPGP messaging.
• Secure replies: Recipients can respond securely without installing a plugin, reducing setup friction for occasional correspondents.
• Email compatibility: Gmail and Outlook integration are supported, alongside a Chrome extension.
• Expiry and verification: Messages can expire, and recipient verification uses a password. These controls give senders options beyond encryption alone.
• Domain administration: Enterprise administrators can set domain-wide restrictions and enforce passphrase, key, signing, and other security rules. This is useful where individual users should not define security policy for themselves.
• Enterprise infrastructure: Enterprise supports SSO through Google, OIDC providers, and delegated identity providers, and can integrate with public key servers, HSMs, and internal systems. Its GDPR-compliant DPA and SLA covering availability and response times for fixes and patches add governance and support provisions for organizations.

Pricing

FlowCrypt is freemium. The Free plan costs nothing and is aimed at smaller use: it is for fewer than 100 users, and the plan summary gives a 5 MB attachment threshold. Free users can add attachments up to 25MB, so buyers should confirm how the 5 MB threshold relates to that stated attachment cap before relying on larger files.

Enterprise has custom pricing: contact FlowCrypt for commercial-use pricing. It supports domains with more than 100 users and attachments up to 25 MB, making it the relevant tier for larger organizations rather than a priced upgrade for individuals. The trade-off is that teams cannot compare its cost against a budget until they contact the company.

Platforms

FlowCrypt offers a Chrome extension, other platforms, and a mobile application. The platform listing identifies it as an extension, so readers who need a specific operating-system app should confirm that their intended platform is supported before choosing it.

Who it's for

FlowCrypt fits individuals and small groups seeking a free way to send encrypted email, especially when they communicate with both OpenPGP users and people who need password-protected delivery. Enterprise is a better match for domains above 100 users that need centralized controls, SSO, integrations, and formal support terms. It is a weaker fit for buyers who require transparent enterprise pricing or a simple attachment limit without a threshold distinction to resolve.

Pros and cons

Pros

• Works across recipient types: OpenPGP encryption and password-protected messages cover correspondents who do not share the same setup.
• Recipient replies do not require a plugin: External contacts can participate securely without installing additional software.
• Meaningful enterprise governance: Domain-wide settings, enforceable security rules, SSO, and system integrations suit organizations with centrally managed policies.
• Free entry point: The no-cost plan offers a way to start, with the stated free attachment allowance reaching up to 25MB.

Cons

• Enterprise cost requires a sales conversation: Custom pricing makes advance budgeting and direct price comparisons harder.
• Free attachment terms need clarification: The plan summary's 5 MB threshold and the free-user 25MB attachment cap are not the same figure.
• Not a standalone universal platform promise: The platform listing centers on an extension, so users needing a particular native app should verify coverage first.

Alternatives

• Mailvelope is another freemium extension option, with a web platform and a Mailvelope Business plan priced at €3 a month for 1–49 users; consider it if that stated per-user price range fits your team.
• c.Email is a free extension offering unlimited email addresses, making it worth considering if address quantity is the priority.
• DataMotion Secure Email Exchange is a freemium service with Android, iOS, web, and API platforms; consider it if those platform options matter more than FlowCrypt's extension-led offering.
• SecureMyEmail has a free plan for one email address and supports Windows, macOS, iOS, and Android; it may suit someone seeking broad device coverage for a single address.
• Send It Secure is another freemium option.
• Virtru Email Encryption is a paid option with web, desktop, and mobile platforms; its Starter plan is $119 a month, billed annually, for 5 users, so it suits buyers prepared for a priced multi-user plan rather than FlowCrypt's free entry tier.
• Lockbin offers a free plan for one user with a 25 MB attachment limit and six months of inbox storage; consider it if those explicit limits match a single-user need.
• RMail is another email-security option.

Verdict

Choose FlowCrypt if you need encrypted email that can reach both OpenPGP users and password-message recipients, or if a larger domain needs enforceable security controls and identity integrations. Its main advantage is combining recipient flexibility with serious enterprise administration; look elsewhere if you need a published enterprise price or a single, unambiguous free attachment limit before committing.