Mailvelope

Mailvelope is a browser-based PGP encryption tool for people who want protected email without abandoning their existing webmail. It suits privacy-conscious individuals and organizations willing to manage keys, especially Gmail and Outlook users. Its free private tier lowers the barrier to entry, while business billing is aimed at teams that need broader integration and support.

Overview

Mailvelope performs client-side, end-to-end encryption with PGP, encrypting and decrypting mail in the browser rather than moving users to a separate mailbox. It can detect a recipient’s public key while a message is being composed, and users can export keys, maintain multiple keyrings, and use Mailvelope or other key servers. That flexibility is valuable for established PGP users, although key ownership and recipient verification remain an ongoing responsibility.

Encrypted and decrypted attachments remain inside the email workflow, including PGP/MIME support. Signature-mismatch warnings help expose possible phishing attempts, providing a useful second check alongside careful recipient verification. Mailvelope GmbH is based in Zellingen, Germany, was founded in 2015, and says it complies with GDPR and EU privacy laws.

Key features

• Webmail coverage: The browser add-on works with Gmail, Outlook, WEB.DE, and other webmail services. That makes it a practical overlay for existing accounts rather than a reason to migrate providers.
• PGP key control: Exportable keys, multiple keyrings, and support for external key servers suit users who need portability or already operate a PGP setup.
• Attachment protection: Mailvelope encrypts attachments as well as message content, with PGP/MIME support for workflows that require standards-based handling.
• Recipient and signature checks: Automatic public-key detection reduces lookup work, while signature-mismatch alerts can draw attention to impersonation or tampering. Neither replaces deliberate identity verification.
• Business administration: Business integrations include admin access controls and professional or premium email support options, which are more relevant to managed deployments than to a single private account.

Pricing

The private-user offering is free and independent from Google. It is a sensible way to start with PGP in supported webmail, but it omits PGP/MIME, Google Workspace integration, and customer service, so organizations needing those capabilities should budget for a business plan.

Mailvelope Business is €3.00 per user per month for 1–49 users. The annual plan is €32.40 per user per year, equivalent to a lower effective monthly cost than monthly billing, and business plans include a 14-day free trial without payment data. Paid subscriptions auto-renew, although they can be cancelled at any time.

Volume plans cover 400 or more users: annual billing receives a 30% discount and monthly billing a 20% discount. Their prices are custom rather than published, so larger organizations need a sales conversation. The listed starting figure of €2.40 per user per month reflects discounted volume pricing, not the standard 1–49-user rate. Choose monthly billing for flexibility; annual billing is better when headcount and usage are predictable.

Platforms

Mailvelope is delivered as a browser extension and web-based workflow. Its add-on supports Gmail, Outlook, WEB.DE, and other webmailers, making it most useful on desktop browsers where those services are already in use.

Who it's for

Mailvelope is a strong fit for privacy-focused individuals, consultants, and organizations that specifically want PGP encryption in established webmail accounts. The free tier works for private users who can do without PGP/MIME, Workspace integration, and support. Teams need the business plans when administration, professional support, or fuller attachment and Google Workspace workflows matter.

It is less suitable for people seeking a fully managed encryption service with minimal key handling, or for users whose devices and email habits do not center on supported browser-based webmail.

Pros and cons

Pros

• Client-side PGP encryption: Messages are encrypted and decrypted in the browser, preserving control within the existing email workflow.
• Broad webmail reach: Gmail, Outlook, WEB.DE, and other webmail support avoids requiring a new mailbox.
• Flexible key management: Exportable keys, multiple keyrings, and external key-server support benefit experienced PGP users.
• Free private tier: Individuals can begin without a subscription or dependence on Google.
• Business controls and support: Admin access controls and professional support options make paid deployments more manageable.

Cons

• Free-tier omissions: No PGP/MIME, Google Workspace integration, or customer service limits the free option for business use.
• Key responsibility: Users still need to manage keys and verify recipients, which adds operational work.
• Browser dependence: The experience is tied to supported webmail and a browser extension rather than a broad native-mail client offering.
• Renewing subscription: Paid plans auto-renew, so teams must monitor billing even though cancellation is allowed anytime.

Alternatives

SecureMyEmail is worth choosing when native Android, iOS, macOS, or Windows coverage and support for up to eight addresses on its premium tier matter more than Mailvelope’s browser-centered PGP approach.

FlowCrypt is a better fit for extension users who can work within its free plan’s fewer-than-100-user scope and 5 MB attachment threshold, or need enterprise attachments up to 25 MB.

c.Email suits readers wanting a free extension with unlimited email addresses and end-to-end protection.

Send It Secure is an alternative for users needing API, mobile, desktop, and web access, with a guest tier that retains data for 30 days and permits 10 lifetime sends to non-paid users.

DataMotion Secure Email Exchange is aimed at organizations seeking an enterprise secure-email exchange with sales-led pricing.

Virtru Email Encryption is the paid-only option for teams that prefer native coverage across web, Windows, macOS, iOS, and Android; its Starter plan costs $119.00 per month billed annually for five users.

Lockbin fits users who want a free web and desktop option with one user, 25 MB attachments, and six months of inbox storage.

Trustifi Outbound Shield is another paid alternative for organizations needing API, extension, desktop, and web deployment.

For broader comparisons, see File encryption tools and Email Encryption Software.

Verdict

Choose Mailvelope if you want standards-based PGP encryption inside Gmail, Outlook, or another supported webmail service and are prepared to manage keys. Its free private tier is a credible starting point, while paid plans add the integrations, administration, and support businesses need. Look elsewhere if you want native multi-device coverage or a service that removes most of the key-management burden.