In modern Microsoft Outlook: (1) Click New Email; (2) Click the Options tab in the ribbon; (3) Click Encrypt; (4) Choose Encrypt-Only or Do Not Forward. For corporate S/MIME, install an enterprise certificate via Trust Center settings. If sending sensitive whistleblower intelligence, encrypt the message text using this studio's PGP engine and paste the armored block into the email body.

S/MIME is centralized and hierarchical: it requires identity certificates signed by accredited Certificate Authorities (CAs) and is natively supported by Microsoft Exchange and Apple Mail. OpenPGP is decentralized: it requires no central authority, supports anonymous identities and pseudonyms, and allows true peer-to-peer verification through fingerprint exchange.

Internet email operates on the Simple Mail Transfer Protocol (RFC 5322). Email servers, routers, and spam filters require envelope headers (To, From, Date, and Subject) to route and organize messages without decrypting the payload. Even with S/MIME or PGP, the subject line travels across the internet in unencrypted plain text. Never include sensitive names, project codewords, or allegations in the subject line.

No. Telegram does not use end-to-end encryption for standard private chats or group channels. Messages are stored on Telegram's proprietary cloud servers where they can be accessed by server operators or disclosed during legal compliance. Only mobile "Secret Chats" use end-to-end encryption. Investigative newsrooms strongly discourage sources from using standard Telegram for whistleblower leaks; use Signal or PGP-encrypted email instead.