Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for information security professionals. It's 100% free, no registration required.

How do I securely communicate my bank connection details (IBAN + full name) to an otherwise trusted person with email being the only connection? Obviously I wouldn't use (plaintext) e-mail since any person that ever gets access to either mine or the recipient's inbox will also have access to that data.

What tricks do you use? Is there something like a trusted pastebin service with password-option and expiration date?

share|improve this question
    
Yes, an encrypted pastebin service would be really useful, but I'm not sure why you need to be so secretive with an IBAN. Can't someone only use it for deposits? –  Simon East Jul 29 at 5:51

4 Answers 4

up vote 1 down vote accepted

Is there something like a trusted pastebin service with password-option and expiration date?

Yes, there is. I found it via this answer and I've used it a few times now. It is:

https://onetimesecret.com/

They appear to take security very seriously; but it's also open source so you could set up your own copy if you were paranoid.

I like the fact that it is guaranteed the recipient will detect if the secret has been compromised, so for something like a revocable key it's a good transport mechanism.

share|improve this answer
    
this seems to be the most simple and quickest solution. thanks! –  Henrik Jun 20 '14 at 1:25

There is an OpenPGP standard for encrypting and signing email so that you can provide, confidentiality, integrity and authentication towards the person who is reading your email.

share|improve this answer
    
I've found that OpenPGP is great for those with the know-how, but try explaining how to install OpenPGP to a non-technie for once-off usage... argh. –  Simon East Jul 29 at 5:36
    
You can also try S/MIME which is a bit easier. –  Lucas Kauffman Jul 29 at 5:52

You can use a web-based encyption service like Infoencrypt or Sendinc for sending your emails.

They are free and they encrypt your email from end to end.

There is also an extension for google chrome, SafeGmail, although I have never used it.

share|improve this answer
2  
An explanation on the down-vote would be highly appreciated :-) –  Abbas Javan Jafari Jun 17 '14 at 9:48

The standard solution for secure email is exchanging public keys and using PGP.

When you or the other party doesn't want to install PGP, a more convenient alternative is to put the data into a password-protected (encrypted) ZIP archive and tell them the password via another communication channel. However, keep in mind that some email servers might reject password-protected zip attachments because they can not scan them for malware.

share|improve this answer
2  
Why the downvote? –  Philipp Jun 17 '14 at 9:38

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.