Reports decrypting with Mailvelope

This guide describes how to decrypt reports with the Mailvelope extension

Description:

Mailvelope is a well-known browser extension that brings OpenPGP encryption to webmail services like Gmail, Outlook.com, and Yahoo Mail. Beyond email, it can also be used to encrypt and decrypt PGP text on web pages.

Features:

Automatic Detection: Recognizes PGP-encrypted text blocks on web pages.
Inline Decryption: Allows you to decrypt messages directly on the page.
Key Management: Import, export, and manage your PGP keys securely within the extension.
Open Source: The code is open for review on GitHub.

Install Mailvelope:

Go to the Chrome Web Store or Firefox Add-ons and search for "Mailvelope."
Click “Add to Chrome” or “Add to Firefox” to install the extension.

Setup

Key Pair Creating:

To create a Key Pair in Mailvelope, follow these steps:

Click the Mailvelope icon in your browser toolbar.

Go to the Key Management Tab.

Add your Key.

In order to send and receive encrypted messages, you first need a Key. The Mailvelope setup screen will help you to either generate a new one or import an existing one

Key Generating

To generate a key in Mailvelope, follow these steps:

Generate a New Key: In the Key Management window, look for an option to "Generate Key" and click on it.

Fill Out Key Information:

Name: Enter your name or identifier for the key.
Email Address: Enter the email address you want to associate with the key.
Key Size: Choose the key size (e.g., 2048 or 4096 bits) for better security.

Set a Password: Create a strong password to protect your private key. Make sure it’s something memorable but difficult to guess.

Generate the Key: Click the "Generate" button. Wait a moment while Mailvelope creates your key pair.
Confirmation: Once generated, your new key will appear in the Key Management list. Make sure to back up your private key and passphrase securely.
Verifying: Verify Mailvelope email address.

For security reasons, the server needs to verify the identity of your email address. To do this it will send you an encrypted email with the subject line "Verify your email address" immediately after key creation.

Be sure to open this email in the inbox of your email provider using Mailvelope.
Click on the ‘Show message’ button

Enter the password associated with your private key
Verify your email address by clicking on the link in the email.

Key Importing

To import a key in Mailvelope, follow these steps:

Import Key: In the Key Management window, look for an option that says "Import Key." Click on it.

Paste or Upload Key: You can either paste the key directly into the provided field or upload a key file from your computer.

Confirm Import: After pasting or selecting the key, click "Import keys", then confirm the key import by clicking the 'Confirm' button.

Verify the Key: Once imported, you should see the key listed in your Key Management section. Verify that the key details are correct.

Key Backup

After generating your key, make sure to back it up. You can export your public and private keys to a secure location.

HackenProof Domain Authorization

To authorize the Hackenproof dashboard domain for it to work with Mailvelope, follow these steps:

Load the Hackenproof dashboard ( follow the link https://dashboard.hackenproof.com/).
Select the Mailvelope icon in the upper right corner of your browser to open the main menu.
Click on the "Authorize this domain" button.

A Mailvelope dialogue to add the new domain will open. You can leave the fields "Status", "Domain pattern" and "API" unchanged. Click on the ‘OK’ button.

After clicking the "OK" button, Mailvelope will save the entry in the list of authorized domains. There, the entry can be edited at any time. Reload the newly authorized website to activate Mailvelope.

Report Decryption

To decrypt the report on the HackenProof platform using Mailvelope, follow these steps:

Open the encrypted report. Mailvelope will detect the PGP encrypted message and highlight it.
Click on the Mailvelope icon or ‘Show text’ button to decrypt the message.