Secure links

A confidential message for someone who does not use ProtectMyMail.

Encrypting a message normally needs the recipient's key, and most people have none. A secure link fills that gap. Your own e-mail carries only a link. The message itself waits, encrypted, on the AnuuTech network, and the recipient opens it in their browser after confirming their e-mail address with a one-time code. They need no account and no software.

I received a secure link Sending a secure link Who can see what Limits

I received a secure link

Someone you know sent you an e-mail with a link to anuumail.com/m/…. That link opens a message they did not want to send as ordinary e-mail.

Open the link. Check that your browser's address bar shows anuumail.com.
Ask for a code. It is sent from secure@mail.protectmymail.com (before October 2026: secure@anuumail.com) to the address the message was sent to. It arrives within a minute — look in your spam folder if it does not. Received it as a blind copy (Bcc)? Then your address is not in the list: choose My address is not in this list and type it.
Enter the code. It is valid for 15 minutes and works once. The message opens in your browser.
If the sender added an extra password, they gave it to you separately — by phone or in person. The page asks for it.

You can reply, download the message as an e-mail file, print it and save attachments. When you close it, it is gone from the page; to read it again, open the link again and ask for a new code.

Is this safe to open? A secure link comes from the sender's own address, not from us. We never ask for a password — only for the code we just e-mailed you, and only on anuumail.com. If a page asks for your mail password, or the address bar shows anything other than anuumail.com, close it: that is not us.

Can anuumail.com read my message? No. The message is decrypted in your browser. It needs two halves of a key: one is in the link after the “#”, which browsers never send to any website, and the other is released by our server only after you enter the code. Our server has only its own half.

What does the page check? That the message is exactly what the sender sent, signed by them; whether they proved they control the address it comes from; and, when the network has recorded it, the latest time it can have been sent — a time fixed by the AnuuTech network, not by the sender's clock.

Your reply is encrypted in your browser, for the sender only. It reaches them from secure@anuumail.com, which confirms it was written by someone who opened the message with a code sent to your address. The e-mail that carries it does not name you; the sender's ProtectMyMail shows who wrote it once it has checked the reply. Other people the message was sent to cannot read it.

Sending a secure link

Use it for someone who does not have ProtectMyMail. For someone who does, ordinary encryption is simpler: the message arrives in their inbox, already readable to them.

Browser plugin: write your message in Gmail or Outlook on the web and press 🔗 Secure link. The body is replaced by a short note with the link; send it as usual. Only the text goes into the link, not attachments: remove them first.
Outlook add-in: the same button in the ProtectMyMail pane while you write. It refuses a message with attachments, rather than let them go out unencrypted next to the link.
Desktop application: the Protect a message tab has a secure-link option, with attachments and an expiry date.
Automatic protection: start the subject with [secure] (or [beveiligd]). The desktop application sends the message as a secure link, attachments included, and removes the tag from the subject. Blind copies (Bcc) can open it too, without being listed to anyone. If it cannot make the link — ProtectMyMail locked, the message too large — the message is not sent and your mail program shows an error, rather than it going out unprotected.

Gmail and Outlook save drafts on their servers while you type, so what you wrote in them may already be stored there before it becomes a link. For something very sensitive, write it in the ProtectMyMail desktop application.

You must have confirmed your mailbox first: every secure message shows the recipient who sent it, and that has to be proven.

Extra password: Optional. Tell it to the recipient another way — by phone, never by e-mail. Without it, whoever controls the recipient's mailbox can open the message, because the link and the code both arrive there. With it, not even they can — provided it is hard to guess: someone who has the link can try passwords without asking anyone, so use four or more random words rather than a name or a date.
How long it can be opened: 30 days unless you choose otherwise, at most 90. After that the network deletes it.
Withdrawing: Sent to the wrong person? Withdraw it from the plugin or the desktop application. The network deletes it and it can no longer be opened — but a message someone already read cannot be un-read.
Size: Attachments up to about 1.3 MB together. The network's storage nodes each keep a copy of every message, so it is meant for letters and documents, not for large files.

Who can see what

	The message	Who it is for	That you sent one
Your mail provider	No — only the link, unless it is also the recipient's provider	Yes	Yes
The recipient's mail provider	Not by itself; see the box below	Yes	Yes
The AnuuTech network	No	No	Yes: your address, the time and the size
anuumail.com (the gateway)	No	Yes — it sends the codes, blind copies included	Yes

The recipient's mailbox is the key. The link and the code both arrive there, so anyone who controls that mailbox — its owner, someone who broke into it, or a provider that chooses to act — can open the message. Every opening sends a visible code e-mail first. For something that must not be read even then, add an extra password.

Limits

The page is served by anuumail.com. The plugins check everything with their own code; a web page runs whatever the site serves. If the site itself were broken into, it could serve a page that leaks what it decrypts. That is true of every web portal, and it is why ProtectMyMail users get ordinary encryption instead.
Withdrawal and expiry stop new openings, not copies someone already downloaded or printed.
The subject line of your own e-mail is not encrypted — only the message behind the link. Put nothing sensitive in the subject of the e-mail that carries the link.
Replies are text only, for now.

← All documentation