Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

how do I securely communicate my bank connection details (IBAN + full name) to an otherwise trusted person with email being the only connection? Obviously I wouldn't use (plaintext) e-mail since any person that ever gets access to either mine or the recipient's inbox will also have access to that data.

What tricks do you use? Is there something like a trusted pastebin service with password-option and expiration date?

share|improve this question

4 Answers 4

up vote 0 down vote accepted

Is there something like a trusted pastebin service with password-option and expiration date?

Yes, there is. I found it via this answer and I've used it a few times now. It is:

https://onetimesecret.com/

They appear to take security very seriously; but it's also open source so you could set up your own copy if you were paranoid.

I like the fact that it is guaranteed the recipient will detect if the secret has been compromised, so for something like a revocable key it's a good transport mechanism.

share|improve this answer
    
this seems to be the most simple and quickest solution. thanks! –  Henrik Jun 20 at 1:25

There is an OpenPGP standard for encrypting and signing email so that you can provide, confidentiality, integrity and authentication towards the person who is reading your email.

share|improve this answer

You can use a web-based encyption service like Infoencrypt or Sendinc for sending your emails.

They are free and they encrypt your email from end to end.

There is also an extension for google chrome, SafeGmail, although I have never used it.

share|improve this answer
2  
An explanation on the down-vote would be highly appreciated :-) –  Abbas Javan Jafari Jun 17 at 9:48

The standard solution for secure email is exchanging public keys and using PGP.

When you or the other party doesn't want to install PGP, a more convenient alternative is to put the data into a password-protected (encrypted) ZIP archive and tell them the password via another communication channel. However, keep in mind that some email servers might reject password-protected zip attachments because they can not scan them for malware.

share|improve this answer
2  
Why the downvote? –  Philipp Jun 17 at 9:38

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.