# Encryption Settings

1. The **Trigger encryption by e-mail subject** allows Internal Recipients to encrypt email to any External Recipient by entering a special keyword in the subject of any email. This setting enables or disables this feature. We recommend you set it to **Enabled** (**Figure 1**).

**Figure 1**

[![image-1609680981859.png](https://docs.deeztek.com/uploads/images/gallery/2021-01/scaled-1680-/image-1609680981859.png)](https://docs.deeztek.com/uploads/images/gallery/2021-01/image-1609680981859.png)

2. The **Encryption by e-mail subject keyword** sets the special keyword to be entered in the subject of an email in order to encrypt that email message. Enter a unique keyword that would not normally appear in the subject of a typical email. We recommend you set this field to **\[encrypt\]** or **\[secure\]** ensuring to include the brackets (**Figure 2**).

**Figure 2**

[![image-1609680998600.png](https://docs.deeztek.com/uploads/images/gallery/2021-01/scaled-1680-/image-1609680998600.png)](https://docs.deeztek.com/uploads/images/gallery/2021-01/image-1609680998600.png)

3. The **Remove e-mail subject keyword after encryption** field sets the system to automatically remove the special keyword from the subject after the email has been encrypted. We recommend you set it to **Enabled** (**Figure 3**).

**Figure 3**

[![image-1609681020505.png](https://docs.deeztek.com/uploads/images/gallery/2021-01/scaled-1680-/image-1609681020505.png)](https://docs.deeztek.com/uploads/images/gallery/2021-01/image-1609681020505.png)

4. The **Secure Portal Address** field sets the address that will be included in PDF encrypted emails that require the recipient to navigate in order to decrypt, view and reply to encrypted PDF emails (**Figure 4**).

**Figure 4**

[![image-1609681343402.png](https://docs.deeztek.com/uploads/images/gallery/2021-01/scaled-1680-/image-1609681343402.png)](https://docs.deeztek.com/uploads/images/gallery/2021-01/image-1609681343402.png)

5. The **PDF Reply Sender E-mail** sets the **From** address for when an external recipient replies to an encrypted PDF email from the **Secure Portal** (**Figure 5**).

**Figure 5**

[![image-1609681357968.png](https://docs.deeztek.com/uploads/images/gallery/2021-01/scaled-1680-/image-1609681357968.png)](https://docs.deeztek.com/uploads/images/gallery/2021-01/image-1609681357968.png)

6. The **Server Secret Keyword, Client Secret Keyword** and **Mail Secret Keyword** are used to protect external resources against tampering. For example if an external user replies to an encrypted PDF email, the **Server Secret Keyword** ensures that the user can only reply to to a message generated by this server. If you followed the [Getting Started](https://www.deeztek.com/documentation/hermes-seg-documentation/hermes-seg-administrator-guide/getting-started/) guide, you should had generated new Server Secret Keyword, Client Secret Keyword and Mail Secret Keyword. If not, ensure you generate one by clicking on the [![image-1609681075547.png](https://docs.deeztek.com/uploads/images/gallery/2021-01/scaled-1680-/image-1609681075547.png) ](https://docs.deeztek.com/uploads/images/gallery/2021-01/image-1609681075547.png)icon next to each which will automatically generate a keyword and enter it in each respective field (**Figure 6**).

**Figure 6**

[![image-1609681276095.png](https://docs.deeztek.com/uploads/images/gallery/2021-01/scaled-1680-/image-1609681276095.png)](https://docs.deeztek.com/uploads/images/gallery/2021-01/image-1609681276095.png)

7. Click on the **Save Settings** button to save your settings.