work
Flexcrypt Passwords Documents in a Standalone Package
Posted by Lifehacker US Edition at 11:30 PM on June 10, 2008
Windows only: Need to send an encrypted file to someone, but know they won't want to mess around with installing their own cryptography software? Freeware Flexcrypt packages your files in a standalone executable file ready to email to a cohort who's also using Windows. The recipient only needs to know the password to open it. To decrypt the package, just double-click the .EXE and enter the password at the prompt, as shown:

If you're sending the package via email, keep in mind that many email clients and firewalls flag executables as a possible malicious software. Just rename the file and remove the .EXE extension to avoid that, and send your recipient instructions to add .EXE back to the filename before they run it. Flexcrypt is a free download for Windows only.

Comments (AU Comments · US Comments)
Jona
Posted June 11, 2008 3:21 PM
PDFCreator is free and lets you send any document you like in an encrypted format across platforms too.
RockAndRollProgrammer
Posted 12:01 AM 11/6/08
Or...your could use open source AxCrypt.
RockAndRollProgrammer
rand0mCreep
Posted 12:00 AM 11/6/08
now i can send my stuff back to me and store it in my email(s)
rand0mCreep
caedus
Posted 11:41 PM 10/6/08
sort of like making an executable zip or rar file then...
caedus
f3lix
Posted 12:57 AM 11/6/08
on the downside "standalone" executables are only standalone as long as you and the recipient are both using MS Windows. Mac and Linux people will that have use Wine to open it (if possible) and I IMHO installing crypto software is easier than running Wine...
I think using PGP to encrypt messages is probably the best solution for confidential emails. PGP is available on all platforms, supported by most mail clients (plugins, add-ons, ....) and you can also use it over SSH.
f3lix
heavylee-again
Posted 12:57 AM 11/6/08
While renaming the file does get around the issue of being blocked by email servers, it doesn't address the issue that most people are scared to run exe files emailed to them for fear of viruses.
heavylee-again
ThaddeusSmith
Posted 12:43 AM 11/6/08
i'm an idiot and didn't read the last portion of the article ...yes renaming fixes the issue, just a pita.
ThaddeusSmith
ThaddeusSmith
Posted 12:42 AM 11/6/08
more importantly ...don't most enterprises and free email hosts filter out .exe attachments?
ThaddeusSmith
jarhead
Posted 12:39 AM 11/6/08
@japapuss: Only if you're an idiot.
jarhead
japapuss
Posted 12:31 AM 11/6/08
And how does the recipient know the password? Oh, because you e-mail it to them . . . within the same message that contains the encrypted attachment . . . hmmm.
japapuss
joelena
Posted 12:31 AM 11/6/08
I took me a second to parse this title because "password" is not a verb.
joelena
thetap
Posted 1:01 AM 11/6/08
I'll have to check this out. Steganos has had a freware app called Locknote available for a few years that does this same thing. I use that a lot.
thetap
Speedmaster
Posted 1:44 AM 11/6/08
I'm curious to know how this compares to TrueCrypt.
Speedmaster
chabis
Posted 1:40 AM 11/6/08
1. I don´t know your mail server configuration, but only renaming a executable file would not work on our server - it can recognize it as a EXE anyway.
2. As mentioned there are a lot (freeware) packer tools, which also allows to encrypt files with a password. Why should I install another program?
3. At least for commercial purposes I would also suggest using PGP, so you get rid of the "how-to-transfer-the-pwd-problem".
chabis
Speedmaster
Posted 3:28 AM 11/6/08
xlerate, thanks. ;-)
Speedmaster
Fitwit
Posted 3:17 AM 11/6/08
WinZip encryption. Everybody already has it.
Fitwit
sunglint
Posted 3:12 AM 11/6/08
I do this with PGP from time to time, making encrypted archives. The EXE isn't a big issue when working with a trusted partner that is expecting to receive it, and the password should always be something like a telephone call. And if you go to the trouble to set up PGP you can also sign things.
sunglint
OX4
Posted 2:56 AM 11/6/08
The exe extension is a total dealbreaker.
OX4
appleturnover
Posted 2:52 AM 11/6/08
@Speedmaster: TrueCrypt is for password protecting entire drives or creating an encrypted area on a drive. This program works on individual files.
appleturnover
xlerate
Posted 2:43 AM 11/6/08
@Speedmaster:
Seeing as you are curious, please install it and report back to us.
xlerate
Gerard Sorme
Posted 4:43 AM 11/6/08
Wait!!! Everyone has missed the point of FlexCrypt. The link goes to "FlexCrypt Folders" which is single-file encryption and if you wanted to email the file you would send as an attachment. That is one small part of this line of products. Read about the *real* FlexCrypt from the other tabs. It is a program that uses your email client and encrypts automatically. The free version allows up to three email addresses to send encrypted mail to. The PRO version allows unlimited email addresses. This is an integrated email encryption product....that also happens to do single-file encryption. The Lifehacker article doesn't make that clear and everyone is getting the wrong idea about this software.
With that said, there is precious little information on technical/security specs. I couldn't even find what algorithm they use. Because of that - I would proceed with caution.
Gerard Sorme
Capone
Posted 4:16 AM 11/6/08
You can even do it in Word: Save as... > Options> Then enter a password.
Capone
bigbill25
Posted 4:49 AM 11/6/08
Also, Locknote was a download-of-the-day back in 2006:
[lifehacker.com]
--Bill
bigbill25
bigbill25
Posted 4:47 AM 11/6/08
@thetap: I love Locknote and use it all the time as my master password and account information holder. However, it is text only. If you just need to encrypt text, use Locknote.
Flexcrypt must be installed as a shell extension to encrypt. Does anyone know of a program, like Lokenote, that will let you decrypt and encrypt without installing?
--Bill
bigbill25
righteye
Posted 6:05 AM 11/6/08
Winzip 9.0 uses AES encryption, which is plenty good enough, and everybody knows what you're talking about and what to do when you tell them you're sending a zipped up file.
righteye
rainbowsky
Posted 5:45 AM 11/6/08
Wow! Marvelous solution! I get to send to three, and only three e-mail addresses, encrypted files which I have to manipulate in various ways for various e-mail clients; then, I get to figure out a way to send a password in another encrypted e-mail (or maybe make an unencrypted phone call). No wonder Al Queda is so good at terrorism--they don't use Flexcrypt. Keep researching thank you please.
rainbowsky
USBman
Posted 6:30 AM 11/6/08
Oops, sorry - I forgot something: 7 zip files typically pack much smaller than standard zip files, and are cross platform (eliminating any concerns about being able to open exe files).
USBman
USBman
Posted 6:27 AM 11/6/08
There are many good comments, pointing out many nice alternatives, but I think the gist of this posting was to create a simple standalone, encrypted file.
For that purpose I might suggest using 7zip (open source). [www.7-zip.org] It uses strong AES-256 encryption to generate compressed, encrypted 7z or zip files, and can then (painlessly) package either format into an executable.
USBman
USBman
Posted 6:43 AM 11/6/08
@appleturnover: TrueCrypt can be used to do many things, including generating encrypted hosts for any number of files, of any size. It does not have to be used for an entire drive, etc.
This encrypted host, called a "container," can then be emailed, or shared via USB drive, or in any other way.
The one thing I must point out is that unless the receiving party has TrueCrypt installed, they are out of luck. ...that is unless they:
1) have a Windows account with admin privileges and can use TrueCrypt's "traveler mode", or
2) use something like TCExplorer [www.portablefreeware.com] on an account without admin privileges.
(both of which can also be ran as portable software, for example, via USB flash drives - [www.portablefreeware.com])
USBman
Toschi
Posted 6:42 AM 11/6/08
I can't find any information regarding the algorithms used by Flexcrypt, which is no-go regarding security related software. Security by obscurity is no security at all.
Toschi
nighttimestereo
Posted 12:53 PM 11/6/08
Promote PGP/GPG! It's a much better solution to the problem of sending encrypted/signed information back and forth. For windows, the excellent free WinPT suite works just fine. For Linux, the Evolution mail client integrates directly with GPG for signed and encrypted messages. There's probably something for Mac folks too.
nighttimestereo
supermamon
Posted 3:30 AM 11/6/08
I'd go with caedus and Fitwit. You can do the same thing with Winzip and Winrar.
supermamon
randomelectron
Posted 6:52 AM 11/6/08
I also use AxCrypt for these type of encryption duties. I am not sure about FlexCrypt, but AxCrypt is also translated into multiple languages.
Re: Speedmaster - TrueCrypt comparison...
TrueCrypt is a totally different animal. TrueCrypt is used to create encryption containers (to hold many files), not for encrypting single files. You could, in theory, create a small TrueCrypt container, add your file, and e-mail it. There is really no point in doing so though when other programs are better suited for the task.
randomelectron
ku5h
Posted 12:53 AM 11/6/08
sorry if someone's already mentioned it - Steganos also has a similar product - LockNote - as freeware. [tinyurl.com]
(preview link: [preview.tinyurl.com])
ku5h
shallowz
Posted 12:06 AM 11/6/08
i love when people say free
you actually expect it to be free
the software only allows you to email three people
"Flexcrypt Free includes encrypted communication with up to 3 email addresses."
is that really free?
its not freeware its demoware
shallowz
nethol
Posted 1:11 AM 11/6/08
Creo que si es mucho mejor idea comprimirlos con contraseña en un archivo auto extraible, ya que así por lo menos no crecerá el archivo, en cambio con esta aplicación una carpeta con un tamaño de 200kb creció hasta 600kb, no me quiero imaginar que pase con carpetas o archivos mas grandes.
if you care about this comment take a minut and translate it at google.com/language_tools.
nethol
Gipmakk
Posted 6:50 PM 13/6/08
Clarification regarding Flexcrypt products:
Flexcrypt Folder uses ZIP encryption = produces encrypted .exe file. No software requiered for decryption. Sending of .exe file may be trixy, rename is a way around that.
Flexcrypt Email Encryption 1.0.0.1305 uses AES 256 bit encryption. Runs on XP/Vista, "FREE" version includes three recipients (that may be changed at any time).
Personal comment:
Flexcrypt Email is a bit trixy to set up, but ok if you want to be able to send encrypted emails (and attachments) to the same receiver several times. You (and the receiver) only have to go through settin it up once, after that Flexcrypt applies correct password and encrypts (if instructed to) automatically.
Gipmakk