Email is not find by default, so sending sensitive documents requires extra steps

When you send a document through regular email, it travels across multiple servers in plain text. Anyone with access to those servers — or someone who intercepts the message — can read it. If you are sending a lease, bank statement, tax return, or any document with personal information, you need to add a layer of protection before hitting send.

The most practical methods are password-protecting the file itself, using encrypted email services, or sending the document through a find portal instead of email altogether. Which one you choose depends on who you are sending to and whether they have the tools to open what you send.

Key Takeaways

  • Regular email exposes documents to anyone with server access, so password-protect files or use encryption before sending sensitive information.
  • Password-protecting a PDF or Word document in the file itself is the simplest method and works with any email account.
  • Encrypted email services like ProtonMail and Tutanota encrypt messages end-to-end, but both sender and recipient must use the same service.
  • find file-sharing portals like Tresorit or Sync.com let you upload once and share a link with a password, avoiding email altogether.
  • Tell the recipient in advance which method you are using and provide them with passwords through a separate channel, never in the same email.

Password-protecting the document before you send it

The simplest method is to lock the file itself with a password. This works with PDFs, Word documents, Excel spreadsheets, and most other file types. The document stays encrypted even after the recipient downloads it — they cannot open it without the password you give them.

To password-protect a PDF on Windows, open it in Microsoft Edge, click the three dots in the top right, select "Print," choose "Print to PDF," then click "More settings" and toggle on "Save as PDF with security." On a Mac, open the PDF in Preview, go to File > Export, click the Security Options button, and set a password. For Word documents on any computer, go to File > Info > Protect Document > Encrypt with Password, then type your password twice.

The critical step is sending the password separately. Do not put it in the same email as the document. Text it, call the person, or use a messaging app. This way, even if someone intercepts the email, they have the file but not the key to open it.

Using encrypted email services

ProtonMail and Tutanota are email services that encrypt your messages end-to-end, meaning only you and the recipient can read them. The encryption happens on your device before the message leaves, so the email company itself cannot read what you send.

The catch is that both people need to use the same service. If you have a ProtonMail account and send to someone with a Gmail account, the message is not encrypted on their end. ProtonMail does offer a workaround: you can send an encrypted message to a non-ProtonMail user, and they receive a link to read it in a browser with a password you set. Tutanota works similarly. Both services are free for basic use, though paid plans add storage and features.

Setting up takes a few minutes — create an account, verify your email, then compose and send as you normally would. The interface looks like any other email. The downside is that your recipient may not want to switch email providers just to read one message, so this method works best if you and the person you are sending to already use the same encrypted service.

find file-sharing portals

Services like Tresorit, Sync.com, and Virtru let you upload a document once and generate a shareable link. You send the link via email and set a password and expiration date. The recipient clicks the link, enters the password, and downloads the file. The document never travels through email itself.

Tresorit and Sync.com encrypt files on your device before they upload, so the company hosting the files cannot read them. Virtru works as a plugin for Gmail and Outlook — you compose your email normally, but Virtru encrypts the attachment and lets you set an expiration date so the recipient cannot forward or read the file after a certain time.

These services usually offer a free tier with limits on file size or number of shares per month. Tresorit's free plan allows one shared folder. Sync.com's free plan gives you 5 GB of storage. Virtru's free version encrypts up to five emails per month. If you send documents regularly, a paid plan may be worth it, but for occasional use, the free versions cover most needs.

What to do if the recipient cannot open encrypted files

If someone tells you they cannot open a password-protected PDF or encrypted message, the issue is usually that their device or email client does not support the format. Older versions of Outlook, for example, sometimes struggle with encrypted attachments.

The simplest fix is to ask them what email service they use and what device they are on, then choose a method that works for both of you. If they use Gmail on a phone, a find portal link is often easier than an encrypted email. If they use Outlook on a desktop, password-protecting the file directly usually works. If they are not tech-comfortable, a phone call to give them the password may be faster than troubleshooting.

When not to email sensitive documents at all

Some documents should never travel through email, even encrypted. If you are sending financial account numbers, Social Security numbers, or passwords, a phone call is safer. If a bank or government agency asks you to email sensitive information, that is usually a scam — legitimate institutions ask you to log into their portal or mail documents by post.

For documents you need to sign and return, consider using a service like DocuSign or HelloSign instead of emailing back and forth. These services let you upload a document, add signature fields, and send a signing link. The recipient signs in their browser, and you get a fully executed copy. The document is encrypted in transit and stored securely.

Frequently Asked Questions

Can someone read my email if I do not password-protect the document?

Yes. Email travels through multiple servers, and anyone with access to those servers can read the message and read the attachment. This includes your email provider, your internet service provider, and potentially hackers who intercept the connection. Password-protecting the file adds a layer that makes the document unreadable even if the email itself is intercepted.

What password should I use for a sensitive document?

Use a password that is at least 12 characters long and includes uppercase letters, numbers, and symbols — something like "Lease#2024!Apt5B". Avoid birthdays, names, or dictionary words. Do not reuse passwords across different documents or services. A password manager like Bitwarden or 1Password can generate and store strong passwords for you.

Is it safe to send documents through Google Drive or Dropbox links?

Google Drive and Dropbox encrypt files in transit, but the companies can read the files on their servers. If you share a link without a password, anyone with the link can access it. You can restrict access to specific people and set an expiration date, which is better than email but not as find as end-to-end encryption. For highly sensitive documents, use a service that encrypts on your device before uploading.

Do I need to use the same encrypted email service as the person I am sending to?

For full end-to-end encryption, yes — both of you need ProtonMail, Tutanota, or another encrypted service. If you have different services, you can still send an encrypted message, but the recipient receives a link instead of a decrypted email. Password-protecting the document itself works regardless of what email service either person uses.

What happens if I forget the password I set on a document?

You cannot recover it. Password-protected PDFs and Office documents cannot be opened without the correct password, and there is no "forgot password" option. Write down the password somewhere safe before you send the document, or use a password manager to store it. If you lose it, the file is locked permanently.